Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
File: sV49wOv7EOu5QZdFRzLveGrHW3A.mft (raw, json)
Hash identifier: YgdDdSElR6dfkM65aTpYnwYDuMcqWQPU5+OHEt0Wp2g=
Subject key identifier: 9C:2D:27:80:23:DE:45:B7:F1:C1:01:48:18:BB:91:3F:EA:D4:C0:0E
Authority key identifier: B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70
Certificate issuer: /CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
Certificate serial: 0198499C472486A5B9CA0F1A1E15B90CF168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
Manifest number: 0ABC
Signing time: Sun 27 Jul 2025 02:00:35 +0000
Manifest this update: Sun 27 Jul 2025 02:00:35 +0000
Manifest next update: Mon 28 Jul 2025 02:00:35 +0000
Files and hashes: 1: sV49wOv7EOu5QZdFRzLveGrHW3A.crl (hash: 58phH/kOecww8OPc9Kn7BFiBsaP7RmUZ94Lb71QcbYE=)
2: xqJHtB7Nv0rU8nAxtjI4F8Ssziw.roa (hash: xXaHko57KcXgGPz0/l3ONXw7AGqXwRHBoA+nggaHNQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:47:24:86:a5:b9:ca:0f:1a:1e:15:b9:0c:f1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
Validity
Not Before: Jul 27 02:00:35 2025 GMT
Not After : Jul 28 02:00:35 2025 GMT
Subject: CN=9c2d278023de45b7f1c1014818bb913fead4c00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:59:42:84:b9:2e:aa:4c:f8:4c:18:14:7e:03:
2a:68:af:da:be:cd:29:a8:b8:fb:30:b4:28:7c:c2:
f0:4e:58:e9:e6:8b:ff:d6:4c:4f:34:26:4a:da:0e:
e8:6f:0f:b2:e1:b2:50:97:fa:a7:a8:1b:81:73:40:
8b:20:46:e0:b6:ec:b1:b3:45:a7:99:1a:8d:ff:ac:
a0:f6:d8:8d:bb:ae:b7:3f:8c:1b:3d:dd:f8:ba:a1:
ef:09:48:98:f4:74:b4:77:18:73:94:02:ff:0e:ce:
bd:71:53:72:0f:64:3e:5d:09:6b:a9:f8:24:67:ca:
07:c2:01:f6:37:76:dc:2b:6f:15:61:fa:c8:0a:c7:
73:78:d8:ea:4d:96:70:95:6d:fd:a2:31:a7:47:71:
af:d1:a9:a8:aa:3e:fe:f5:b3:85:ce:b2:ca:3b:e9:
1c:4c:30:fd:da:e4:81:2c:bb:e4:4d:33:fa:48:1c:
53:df:72:15:c4:d4:6f:b4:f5:cc:86:7a:22:f0:7c:
d7:4f:84:2d:ae:36:0d:f2:5b:7f:0b:74:0d:28:91:
3c:af:bf:c4:51:22:fe:d7:6c:d8:e3:af:0f:e9:af:
a0:fc:70:e9:5b:e0:6b:fc:61:d6:8e:8f:14:2c:43:
cf:b1:09:ed:40:49:ed:03:a2:e0:83:9d:ca:5c:eb:
7e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2D:27:80:23:DE:45:B7:F1:C1:01:48:18:BB:91:3F:EA:D4:C0:0E
X509v3 Authority Key Identifier:
keyid:B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4c:68:93:a6:bb:3b:7b:7a:2e:4e:e7:91:85:f3:8e:a3:01:
10:18:80:3f:8d:34:9d:3b:c3:5d:02:ff:e7:fe:bc:6a:25:0f:
10:b3:66:0e:6a:b7:9c:bf:12:c6:6c:1d:bd:ce:98:a9:ce:44:
e0:48:d2:24:ed:9c:b9:55:6f:91:c0:5b:6e:fb:17:5f:bb:98:
0e:c8:ab:38:91:a9:f4:f4:56:46:e9:45:28:c6:9c:6b:dc:ab:
c7:28:ce:07:56:49:0f:d7:56:bc:af:e4:08:55:de:d9:e1:ac:
dc:cf:3b:7c:e1:64:11:61:af:2a:ac:2f:8e:5f:13:f3:26:1a:
1c:3b:b2:00:22:60:84:56:ea:3a:91:ae:0e:56:c2:17:f6:44:
ec:ea:ab:fd:f3:44:d5:ed:87:54:a6:aa:13:71:bd:13:f4:ba:
93:ab:3d:c5:ee:42:dd:48:53:00:22:40:d4:ad:45:c5:c3:9a:
7c:42:28:99:36:43:ee:4d:6a:72:91:a0:5c:04:4d:48:33:d5:
f6:5e:b4:fd:68:f9:7c:b9:55:41:e6:12:87:74:cd:e4:07:5e:
15:91:02:83:73:a9:63:15:6f:87:27:92:6b:29:18:71:df:dc:
35:b4:7f:1e:5a:9e:3f:cd:6f:2e:da:2d:d5:2e:e3:18:20:54:
c6:c6:0a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:24:10 2025 by rpki-client