Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
File: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft (raw, json)
Hash identifier: wJOFaya9gPpJBl34UaVvpuxEJF6Dr43XQyJZUq9/nMo=
Subject key identifier: EA:6A:15:C2:1F:00:02:A4:B7:B5:91:84:B3:4F:87:3C:63:54:4C:2D
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Certificate issuer: /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial: 019845891887E859658820058EB4F325C96A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
Manifest number: 04B1
Signing time: Sat 26 Jul 2025 07:01:09 +0000
Manifest this update: Sat 26 Jul 2025 07:01:09 +0000
Manifest next update: Sun 27 Jul 2025 07:01:09 +0000
Files and hashes: 1: bKhEoTi8VyX_Q5KODWRSQwgQwKY.roa (hash: xvVp0HHxMjOmKvNmsan4is7a0Z8jz8EK1PXrOk2MzSo=)
2: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl (hash: y8oj7B67SkldurChXL2xc+f1eJp2VFvTv9BKBXJzZvU=)
3: k3MkBKIkrmXV8hBuw2gGPp_sASw.roa (hash: kkGwe02sJUGG5OVjC1fC3C/lnFwMVxsODhInEGGgNMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:18:87:e8:59:65:88:20:05:8e:b4:f3:25:c9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
Validity
Not Before: Jul 26 07:01:09 2025 GMT
Not After : Jul 27 07:01:09 2025 GMT
Subject: CN=ea6a15c21f0002a4b7b59184b34f873c63544c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:a4:13:fe:1a:7f:40:9c:aa:75:4d:b6:35:
87:7b:83:5f:3e:ed:dd:30:ee:5e:d1:18:8b:67:62:
1f:4d:85:f7:f6:d3:c9:5f:ef:92:5f:5a:c3:57:9a:
75:cd:03:d9:2e:87:27:7b:c7:5d:b4:86:8c:0f:19:
fa:70:fc:d9:c2:20:0a:c2:f2:18:8b:f5:3d:2b:f7:
68:56:bb:ed:82:15:fe:ed:26:64:2c:91:af:29:3f:
ef:d8:9d:7e:94:70:18:7b:c2:e8:be:23:b9:3c:58:
c1:e4:a3:0d:7a:93:9d:e5:f2:9f:74:ec:12:6a:fe:
97:46:21:62:99:bb:71:84:2f:92:66:ce:80:78:4f:
81:70:ff:5c:5c:20:17:de:2f:d5:02:a5:51:fd:52:
42:05:03:a1:12:23:2b:d8:c9:76:28:3f:1a:2f:7b:
f2:de:7a:27:32:30:9f:9d:05:2a:04:6f:f1:b7:98:
a3:80:d4:09:79:57:ea:a0:05:7b:0a:d2:6a:dc:4c:
ce:80:5f:dd:28:b2:96:9e:8e:50:ca:b8:8a:71:1e:
f5:e7:9e:6f:92:d9:10:34:17:35:8a:53:e5:47:be:
82:37:54:d3:ab:af:ab:7e:f5:60:53:2b:de:d8:e9:
fe:8a:22:71:ef:b3:85:c8:c3:84:0f:31:9d:40:af:
9c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6A:15:C2:1F:00:02:A4:B7:B5:91:84:B3:4F:87:3C:63:54:4C:2D
X509v3 Authority Key Identifier:
keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b4:6e:73:9a:02:b5:ff:c0:85:c5:31:af:b6:7a:f8:25:f6:
77:8c:a6:a5:65:b9:fc:bf:2c:69:9b:f7:1f:26:bd:be:2f:95:
e7:94:39:c3:d4:48:db:57:45:73:aa:d7:4b:f1:46:a1:e1:43:
ae:b6:93:5c:85:c6:c0:f9:0b:77:47:2a:5d:91:a9:77:10:e2:
cc:6e:90:26:9e:f7:77:fe:e7:81:8a:98:54:2d:f8:02:1d:1b:
8d:f4:51:a8:ad:65:2e:f4:59:b6:ae:be:91:d4:01:9b:b3:7a:
8f:71:3e:a3:6b:7a:c7:cc:45:fe:c5:42:4b:b8:ed:a5:35:44:
2a:dc:57:11:ab:9f:ff:f9:31:d0:53:15:bc:64:26:a0:e8:cf:
2b:96:72:39:8d:80:7c:6b:9a:64:c5:4d:a8:01:00:86:f2:38:
e1:d1:9e:6a:54:da:fb:e2:6a:1e:f8:9a:ca:2c:f2:63:d1:3e:
2d:39:cf:2a:b0:27:b1:93:d5:d9:b0:ce:1b:e4:e8:71:5f:6f:
6e:d6:fd:d6:e8:09:3e:d2:d9:8c:5f:e6:29:f2:06:47:d2:03:
52:34:d8:54:56:33:a5:94:f7:40:07:ec:78:c1:39:7a:fe:31:
e6:32:3c:5a:a0:90:52:86:74:53:c8:89:95:d9:11:c9:0d:ef:
48:9f:04:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:01:44 2025 by rpki-client