Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
File: 93n18CiJhaveCYJ-A9eHpSFJ5-w.mft (raw, json)
Hash identifier: aHhbsmp5Yss4yoJq35ZEoNK3PSYmVEEx+/cKy4uJeGk=
Subject key identifier: 7A:27:4E:83:16:64:61:C0:8B:D6:AD:54:C8:23:1C:34:0D:52:A7:A4
Authority key identifier: F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC
Certificate issuer: /CN=f779f5f0288985abde09827e03d787a52149e7ec
Certificate serial: 019860932A05A10B5DEC1E613C75E6D3ACDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
Manifest number: 1614
Signing time: Thu 31 Jul 2025 13:01:53 +0000
Manifest this update: Thu 31 Jul 2025 13:01:53 +0000
Manifest next update: Fri 01 Aug 2025 13:01:53 +0000
Files and hashes: 1: 93n18CiJhaveCYJ-A9eHpSFJ5-w.crl (hash: dKORbE+Gm92bJy2pqsDrGUD/CX1vWSXGjMSOrJwZhio=)
2: FIrgG9lOckS2whhTIp5aX9dzDrk.roa (hash: w3cwGYtOKvfw8oY9fh8sMYPgttcg8puA2TGSCPuXrrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:93:2a:05:a1:0b:5d:ec:1e:61:3c:75:e6:d3:ac:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f779f5f0288985abde09827e03d787a52149e7ec
Validity
Not Before: Jul 31 13:01:53 2025 GMT
Not After : Aug 1 13:01:53 2025 GMT
Subject: CN=7a274e83166461c08bd6ad54c8231c340d52a7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:7c:db:6c:f7:c8:bf:80:c7:07:2d:1b:dc:
76:f0:3b:5a:20:49:c5:a4:8b:72:36:16:04:95:ac:
00:08:af:2f:ed:93:90:0b:16:91:ee:46:a6:98:e5:
8d:ec:bd:6a:31:18:81:1a:79:95:84:8e:50:04:d4:
07:65:6b:b8:25:80:a7:8e:4a:d7:ef:4b:a8:d4:f7:
33:65:a8:37:c5:30:ef:34:66:cb:d2:63:41:bd:bd:
33:0d:20:25:40:21:67:9d:b3:e6:fb:f3:83:04:01:
0e:37:6a:e7:8c:30:a4:a8:e8:ac:ef:09:a5:61:7a:
0a:2c:84:4e:b5:46:6c:c6:1f:e0:e7:8b:86:d4:18:
3f:b3:8b:4f:4d:20:19:27:1c:f2:f6:c4:d0:5c:09:
a2:a5:fc:41:0e:56:6e:5d:b7:4c:18:6d:fd:9e:e5:
61:f7:09:ab:db:c7:44:fe:26:90:d4:7d:ea:5c:7f:
50:cd:27:03:89:da:c7:f9:09:23:7b:28:b7:1e:b5:
62:8a:ee:e3:62:37:b6:52:19:1e:01:e9:b6:39:30:
11:15:0e:d4:8b:65:e2:28:f9:73:c2:2f:6b:87:73:
d5:c7:61:18:60:4f:db:82:b4:8e:27:34:66:f3:05:
a5:62:1d:11:ad:f8:b8:c9:a7:b4:e6:8a:4a:43:ef:
69:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:27:4E:83:16:64:61:C0:8B:D6:AD:54:C8:23:1C:34:0D:52:A7:A4
X509v3 Authority Key Identifier:
keyid:F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c1:f9:21:f9:33:24:09:21:3b:7f:08:20:43:23:4b:b0:98:
75:ef:94:45:6b:05:59:22:21:c9:1b:ae:4e:78:04:a1:f2:a0:
64:0b:83:fa:48:1a:59:74:f4:df:bf:22:d1:53:98:b0:58:91:
95:bd:95:2b:4c:d0:78:5f:6e:24:bc:20:15:b6:9a:80:3d:22:
80:62:fb:50:ee:e5:71:46:90:26:86:22:39:b3:03:b4:42:2e:
3f:6a:de:ec:8e:1f:f0:5c:27:6b:78:b1:93:4c:50:62:5f:c7:
40:69:e4:83:47:67:47:9e:70:ca:c1:a9:be:45:0f:a3:a8:b3:
6e:4d:b5:b0:99:17:1a:d6:08:e9:95:2d:98:59:32:14:89:e1:
5e:af:53:53:33:19:8f:f6:f4:82:f4:3d:0f:f6:ca:42:b5:b6:
47:a8:37:8c:6d:f0:81:f4:07:53:f6:9e:5d:08:0f:00:82:3f:
7d:21:72:cd:1e:2a:d7:0d:7c:ea:ea:f1:a2:1d:e6:c3:3b:18:
b7:e7:9e:71:f5:e1:ec:b5:cf:6c:8e:58:08:2c:b9:47:27:63:
1d:e7:d4:e2:ca:97:a0:79:ff:d8:c0:47:8a:f3:7a:73:77:b0:
e3:a7:a0:d9:de:6f:53:6c:53:0c:16:a7:c0:81:7c:9b:5a:89:
97:b4:b6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 14:24:09 2025 by rpki-client