Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft
File: aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft (raw, json)
Hash identifier: xI7B3ush6g+Ubr0MncvhLUaAMcjlGQhv/M31Jy89jKY=
Subject key identifier: 54:CE:FE:BB:0C:D5:70:6B:9B:28:66:E8:6A:6B:2B:88:C8:F0:A8:F2
Authority key identifier: 68:3B:33:DC:72:18:B3:FE:88:3C:49:50:51:34:CB:39:A6:64:FD:28
Certificate issuer: /CN=683b33dc7218b3fe883c49505134cb39a664fd28
Certificate serial: 01984B548C4609401107DA95A1A014BC9027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDsz3HIYs_6IPElQUTTLOaZk_Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft
Manifest number: 0A6B
Signing time: Sun 27 Jul 2025 10:01:28 +0000
Manifest this update: Sun 27 Jul 2025 10:01:28 +0000
Manifest next update: Mon 28 Jul 2025 10:01:28 +0000
Files and hashes: 1: PecnHh8YFMYIBEgD1PQBC-sYFMY.roa (hash: G67Iyj0Q7isunYlJO9b465cfL0xQGyEo+TS/2SlDQcA=)
2: aDsz3HIYs_6IPElQUTTLOaZk_Sg.crl (hash: qLvtfXsx9W6aOIsqyI5sN4cjDxlgScvUq+CLHa5ok64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDsz3HIYs_6IPElQUTTLOaZk_Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:8c:46:09:40:11:07:da:95:a1:a0:14:bc:90:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=683b33dc7218b3fe883c49505134cb39a664fd28
Validity
Not Before: Jul 27 10:01:28 2025 GMT
Not After : Jul 28 10:01:28 2025 GMT
Subject: CN=54cefebb0cd5706b9b2866e86a6b2b88c8f0a8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dd:e8:86:ce:aa:4b:fc:cf:08:79:e9:5e:25:
3e:2a:6c:cb:40:9d:e9:a1:5a:86:eb:9b:03:91:8c:
1c:5d:27:58:80:8b:5f:32:76:24:5e:1a:60:bb:79:
7b:37:ec:20:be:7a:59:1d:48:e1:46:29:25:cf:09:
de:66:c7:9a:0b:de:be:0a:e7:d6:31:db:3f:82:35:
11:2a:c3:77:7e:5c:11:0a:db:e1:c6:31:e4:3d:54:
83:3d:64:df:79:46:15:49:71:7b:58:6f:0d:6f:12:
9f:01:77:7b:55:4a:cd:b8:cb:60:72:20:77:17:98:
ed:51:8e:13:14:c6:f8:30:e8:81:21:0a:1e:6b:a6:
be:6b:5a:8d:91:4a:76:37:51:cc:08:f5:66:56:83:
2b:b0:f4:dc:ea:40:f0:b1:a7:59:29:3e:d9:2e:23:
08:29:a7:5d:09:90:fe:5a:c3:d7:26:7d:72:de:ea:
ee:f2:02:be:ae:fa:a9:3f:85:41:35:7c:79:1a:d5:
8d:92:07:60:32:ad:9b:56:ed:16:4b:3b:70:23:48:
c2:fc:51:63:81:fc:3f:34:0e:59:c7:8b:b7:b0:16:
f0:85:53:96:0a:ec:4d:47:ca:bd:e2:be:db:fe:f4:
01:b5:b4:19:73:f4:57:15:ac:31:d3:7b:f6:f1:37:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CE:FE:BB:0C:D5:70:6B:9B:28:66:E8:6A:6B:2B:88:C8:F0:A8:F2
X509v3 Authority Key Identifier:
keyid:68:3B:33:DC:72:18:B3:FE:88:3C:49:50:51:34:CB:39:A6:64:FD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDsz3HIYs_6IPElQUTTLOaZk_Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a2:e7:e0:54:0d:2c:5f:a1:9a:20:1c:a3:d9:f4:bd:ec:4a:
a9:b8:79:70:47:4a:e1:09:18:1f:86:df:24:2c:e4:7c:a6:57:
88:bf:97:55:2f:af:0f:97:e3:3e:87:98:10:40:15:b3:ef:1f:
57:64:0e:21:49:a4:0a:5f:c6:91:44:12:7c:6a:44:49:e5:de:
49:c2:33:78:82:77:e7:54:ff:ad:e3:91:50:e9:e0:dd:ca:29:
fd:ec:d4:4c:1c:43:80:bc:a0:d9:2e:07:c9:7e:37:26:23:01:
3d:33:1e:76:15:73:75:1a:a7:83:6e:1b:1d:63:4e:83:d0:0f:
ea:68:6f:f9:76:41:30:fa:de:61:47:6e:aa:89:2b:e6:2c:0c:
99:5a:be:95:c8:fc:7f:88:01:06:f7:88:81:3a:45:d0:b6:8c:
5f:64:d0:37:85:ab:ae:72:e0:7f:0a:73:50:14:7d:b4:61:2d:
d4:ae:97:e4:a9:4e:ae:41:fd:51:0e:39:d4:89:73:df:e1:e0:
84:32:9f:0b:8b:5a:f3:4c:60:eb:81:53:b3:99:c7:fe:25:f4:
a7:a0:b9:b4:db:ee:d4:df:20:36:d8:79:40:e4:2a:95:fe:aa:
ef:47:67:74:59:2e:45:fa:e0:c5:f3:8e:11:bb:2d:b9:ef:41:
6d:5e:f3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:03:40 2025 by rpki-client