Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.mft
File: so7x9PiCePTfGec-M4HOzXjgacE.mft (raw, json)
Hash identifier: 51D3ShtYTtgIRcHveBihdcMPQKI8sfJ/yvFoO0rZY5A=
Subject key identifier: 13:92:CF:E2:77:3D:89:45:2F:AE:1B:33:C7:AB:B0:22:AE:CF:08:DE
Authority key identifier: B2:8E:F1:F4:F8:82:78:F4:DF:19:E7:3E:33:81:CE:CD:78:E0:69:C1
Certificate issuer: /CN=b28ef1f4f88278f4df19e73e3381cecd78e069c1
Certificate serial: 01984A419174BE5369EFC92090443151292E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/so7x9PiCePTfGec-M4HOzXjgacE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.mft
Manifest number: 02AA
Signing time: Sun 27 Jul 2025 05:01:07 +0000
Manifest this update: Sun 27 Jul 2025 05:01:07 +0000
Manifest next update: Mon 28 Jul 2025 05:01:07 +0000
Files and hashes: 1: ZWC54UPrMHyZ6gth2IDDnRYsMDY.roa (hash: 4Yk1QA2QugshfW9geeysUTQ4Sub4Aja/bv1m3JJnrLU=)
2: so7x9PiCePTfGec-M4HOzXjgacE.crl (hash: 5jLYqaeaBcoUcKEvkvw2cx2M5zOq7NyXxTmry1lPXEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.mft
rsync://rpki.ripe.net/repository/DEFAULT/so7x9PiCePTfGec-M4HOzXjgacE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:91:74:be:53:69:ef:c9:20:90:44:31:51:29:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b28ef1f4f88278f4df19e73e3381cecd78e069c1
Validity
Not Before: Jul 27 05:01:07 2025 GMT
Not After : Jul 28 05:01:07 2025 GMT
Subject: CN=1392cfe2773d89452fae1b33c7abb022aecf08de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b0:b3:a4:2c:02:0c:e0:dc:43:6c:7b:7a:fb:
ed:f1:6e:9d:8d:27:d8:eb:9a:a8:d8:17:62:6b:7d:
41:db:9a:8d:00:86:7f:92:a7:8b:e4:98:d2:df:09:
83:4d:6e:41:d6:5d:84:8f:38:98:ee:2b:ee:2f:21:
93:6f:f3:de:7d:e8:b2:75:aa:9f:46:7d:76:ec:b4:
8c:8f:b6:b2:82:fc:2f:a4:d1:37:4f:13:fb:19:34:
dc:8d:e5:72:b2:b0:e9:4a:41:20:4c:7e:3e:6d:8b:
42:63:7c:45:bd:bf:0c:af:c4:35:30:4d:aa:51:c2:
fd:5c:3b:9c:4f:24:2f:20:39:56:d4:d0:b1:b6:49:
cb:c9:be:dd:64:46:fe:99:c2:17:89:80:56:2d:73:
4c:c1:80:c0:9c:12:72:33:0b:9e:ec:11:95:71:08:
6a:95:a9:5a:eb:de:4e:7e:31:26:0d:a3:9a:e6:14:
74:89:7a:ca:b6:bc:dd:17:90:8c:86:2e:0c:83:30:
03:c2:51:50:b0:ca:7e:d9:97:97:e8:91:7a:59:7e:
83:1a:00:28:64:8c:d6:38:57:3b:60:56:91:51:8d:
f9:04:8a:49:50:5c:68:15:0a:90:e7:8d:ac:fc:95:
51:d0:40:84:5b:3d:8b:33:0e:77:29:66:b7:35:e2:
ff:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:92:CF:E2:77:3D:89:45:2F:AE:1B:33:C7:AB:B0:22:AE:CF:08:DE
X509v3 Authority Key Identifier:
keyid:B2:8E:F1:F4:F8:82:78:F4:DF:19:E7:3E:33:81:CE:CD:78:E0:69:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/so7x9PiCePTfGec-M4HOzXjgacE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/1f051b-e735-49b8-bc6d-9ef0a59927b1/1/so7x9PiCePTfGec-M4HOzXjgacE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:fc:c2:b9:27:ce:d6:65:3a:b7:1d:17:69:f6:04:c8:0c:9a:
c8:f2:1d:2c:75:50:99:41:47:63:4b:f4:1c:e8:95:18:c5:0c:
5f:a9:08:5f:7a:fb:83:0b:62:00:f6:74:a9:d2:79:48:f3:5a:
ad:11:fd:1e:c3:1a:63:63:73:ed:90:45:04:06:58:d7:e3:b9:
7a:47:e4:62:c3:38:bc:58:d5:3a:3e:f8:3d:f3:6e:55:9d:67:
8a:6e:03:7c:d8:b2:a9:9e:64:08:93:6b:a7:8b:d9:bd:cc:cf:
f9:b6:21:fb:75:6b:3f:38:1a:26:3e:f1:ba:f3:98:4e:05:10:
13:24:66:b4:a2:23:31:16:e9:8c:ca:05:c4:42:bb:a5:d6:d2:
23:c9:91:00:74:c9:17:d2:30:1c:42:0f:3b:f9:c6:65:51:a7:
e7:6c:a8:4c:72:d1:d7:f5:6d:96:4f:75:ae:a9:c6:86:94:c1:
0c:ea:14:9e:61:17:1f:1f:48:85:bb:76:10:39:46:d9:5f:37:
2f:3f:09:22:be:29:44:fa:5f:d5:44:a1:34:0e:db:d4:aa:86:
e0:79:72:8d:5a:c5:f8:89:75:09:06:38:08:5c:a8:21:bd:46:
53:78:6c:e5:a0:0b:33:cc:0b:bc:5f:f7:a6:9a:ff:81:41:07:
65:09:c5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:09:49 2025 by rpki-client