Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json)
Hash identifier: CT3B8Cb2ykTBfiQ1I/bdzW4PYuRbxxjbaNmsj3n7jBc=
Subject key identifier: A2:6B:E3:71:F3:A8:1A:88:F1:2A:4D:0D:9F:72:B2:C1:8B:A0:C2:AA
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial: 019845888A9983DE64FA6F9E3C6C72865FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 07:00:32 +0000
Manifest this update: Sat 26 Jul 2025 07:00:32 +0000
Manifest next update: Sun 27 Jul 2025 07:00:32 +0000
Files and hashes: 1: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: +QrBeVXWlU4NlTO0aLkScBbsgYdkLy4jY9/xb+/O3lc=)
2: kbK5FbYWiIzhyfd6X1FvOM4LM_M.roa (hash: DqjgdH8s8QL3DkbtV73wzVgdXOipMU6gUg//vr7va8U=)
3: mDUiFexcT2mv6c5O8qGbFAH9b3Y.roa (hash: pPWVkb6MaBCnVH/KCkJGhD1ngVL39J0MeLmVUJGfUTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:8a:99:83:de:64:fa:6f:9e:3c:6c:72:86:5f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Validity
Not Before: Jul 26 07:00:32 2025 GMT
Not After : Jul 27 07:00:32 2025 GMT
Subject: CN=a26be371f3a81a88f12a4d0d9f72b2c18ba0c2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:eb:bf:0f:8f:05:29:9d:ce:de:4b:c5:62:d3:
3b:c5:f8:7c:6b:ff:79:e4:b1:15:93:dd:8f:78:3c:
3c:4f:71:56:c1:09:79:dc:9d:9c:63:e8:8c:bf:e1:
f9:bc:82:52:ae:2d:6f:f5:3b:8a:d5:a0:85:17:f4:
2c:2b:26:36:ce:5d:33:ff:fc:65:e3:cd:b8:bb:05:
60:bf:d5:59:1b:14:84:b2:69:cc:59:26:95:c1:ae:
e6:26:45:41:fb:11:42:8a:e0:41:5d:bd:5f:11:8b:
74:e9:8d:59:65:b6:12:a3:e8:3d:12:9b:95:f2:39:
3b:6d:cf:de:df:35:f8:97:7a:f7:6f:8b:0d:27:2b:
a4:5b:a3:16:45:96:0c:77:91:64:3e:82:de:2f:51:
01:d9:93:d6:56:f0:13:1e:f3:df:90:35:d6:7a:8a:
26:41:8f:dd:9e:6f:3b:39:bc:9b:12:c6:a9:78:ba:
12:aa:4a:63:bd:71:8e:b0:4f:3d:a0:95:10:32:82:
08:9a:ac:18:95:2f:4f:60:a7:16:47:27:45:0d:be:
8b:0a:c8:bf:3d:c7:79:6c:0b:2b:f8:5a:d8:26:f7:
00:0b:1c:79:56:3e:89:d3:79:85:1f:fe:fb:94:46:
31:7b:fe:27:e4:db:ad:e8:a9:e1:b7:04:d1:25:1f:
32:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6B:E3:71:F3:A8:1A:88:F1:2A:4D:0D:9F:72:B2:C1:8B:A0:C2:AA
X509v3 Authority Key Identifier:
keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:94:ba:40:a7:e9:1b:31:01:e2:6b:b4:a0:74:34:24:42:c4:
3a:3b:ce:3b:33:3b:59:c1:05:4f:1d:53:e8:58:75:a0:72:3c:
72:1e:6e:1b:1b:2b:dd:44:a6:45:e0:20:a5:ca:92:1a:51:64:
63:90:2f:e1:a7:ff:3d:09:dd:31:cc:f5:9a:af:80:f1:2e:13:
f7:a1:74:75:4a:f1:7e:66:b5:b4:6e:f5:8c:3c:20:39:b0:b4:
22:18:19:e6:b9:36:00:43:78:55:b5:7c:f1:e3:8f:af:ea:9c:
4b:91:83:94:21:10:06:1b:15:a6:a6:28:cb:8b:a7:cc:de:67:
61:e7:51:f8:92:3f:87:c7:fb:f9:6d:3f:bd:b2:26:7b:dc:9b:
47:e8:69:1f:6f:58:20:fb:30:5f:25:7a:15:4a:e4:ed:35:d2:
ee:3d:e9:45:21:fc:57:ae:42:07:7a:9e:00:46:ff:3d:fd:ca:
d3:3b:dd:77:3f:f8:0c:c9:c3:73:2c:34:fa:7b:5b:d5:ff:ac:
91:8a:8e:2b:76:2c:f7:27:79:c7:82:85:fe:6c:b8:20:f1:bd:
e3:77:73:ec:ee:ed:ba:19:ee:a9:d8:15:ee:ac:5d:7e:b3:fb:
8f:de:51:7a:83:ca:6f:b3:80:35:9f:87:02:28:0c:34:b8:78:
41:ab:3f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:49:15 2025 by rpki-client