Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
File: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft (raw, json)
Hash identifier: RL6FHeF3AThFdsPwg8cYR/gw3CiGtTTR3S6m0i30Hsk=
Subject key identifier: 95:15:0C:6C:64:91:C5:12:D8:16:B0:A7:58:90:76:A5:6E:86:89:D7
Authority key identifier: B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
Certificate issuer: /CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Certificate serial: 01984B5550342EE28D8093FC4FE6DE68100A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
Manifest number: 0447
Signing time: Sun 27 Jul 2025 10:02:18 +0000
Manifest this update: Sun 27 Jul 2025 10:02:18 +0000
Manifest next update: Mon 28 Jul 2025 10:02:18 +0000
Files and hashes: 1: f-wF0yIlDOHaFqLViWnFWeP4B9o.roa (hash: 8olsSb6V441J0mOtJjve8qF0Z7IUWgXwJVtuxOxK2Bg=)
2: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl (hash: Ke6BrLrBynyi1lH2+88F3IxqThCAsIwBcsSF+qvrdMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:50:34:2e:e2:8d:80:93:fc:4f:e6:de:68:10:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Validity
Not Before: Jul 27 10:02:18 2025 GMT
Not After : Jul 28 10:02:18 2025 GMT
Subject: CN=95150c6c6491c512d816b0a7589076a56e8689d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:98:1f:cf:ba:80:1c:65:6d:f9:10:7f:c0:00:
06:c7:29:83:28:ea:80:09:27:e3:5f:64:40:1c:df:
c7:7f:48:43:b2:54:23:bb:c7:71:4a:b5:dc:40:9a:
88:94:cc:55:5e:ac:63:03:ae:ec:74:8b:55:7b:36:
06:41:e8:d9:ed:e5:ae:c6:62:6d:fe:2a:df:5c:4c:
fa:05:4c:a5:d6:dd:22:ab:d5:d9:9f:e1:e6:d4:ec:
9f:29:cb:66:78:bc:5c:b6:83:74:52:4d:6a:25:e7:
64:22:c4:69:92:f5:9d:53:3b:8e:df:e2:81:49:ef:
e3:5f:44:ce:52:83:47:45:4a:01:a5:de:fe:a6:3d:
30:d9:5d:c1:46:5f:de:77:c0:6e:0c:89:d9:ae:c4:
58:09:ca:cf:49:17:be:bb:6e:81:24:02:e9:12:c4:
6a:3d:b2:3f:5c:bf:2e:22:37:64:c6:85:0a:ff:47:
86:e0:43:ea:63:af:86:57:f4:6b:00:01:b1:50:a3:
44:f3:f6:d1:78:54:cb:ac:ed:0f:9e:30:92:f4:83:
90:96:c7:5a:a9:7e:89:45:0a:69:2a:86:a6:ee:9a:
f3:92:eb:b9:80:0d:14:7d:fd:10:e9:64:cf:cc:50:
50:88:fc:82:ef:b0:ff:53:84:27:fe:bb:a9:ba:e1:
94:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:15:0C:6C:64:91:C5:12:D8:16:B0:A7:58:90:76:A5:6E:86:89:D7
X509v3 Authority Key Identifier:
keyid:B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7d:5c:da:24:7a:8c:78:2f:cb:22:19:59:ca:69:58:fa:cb:
44:58:89:35:44:3b:1e:81:b6:2f:90:7a:52:96:47:21:96:0a:
df:ae:22:ff:a2:70:30:d3:61:4e:1d:07:d4:19:87:1d:d6:64:
4b:34:c7:b9:a1:07:5a:8f:a2:47:9c:41:45:97:11:cf:04:64:
58:21:ce:3b:f3:45:d1:16:47:9d:30:4a:7a:55:c5:3e:d2:8c:
db:45:04:32:0d:4d:13:c4:5e:af:55:3c:35:40:86:b8:16:3e:
c7:58:1a:86:ed:84:55:54:a8:e6:28:db:9f:ce:04:af:f1:c2:
c9:04:a6:ac:ef:75:8d:a7:05:88:39:8f:8c:35:5f:99:28:a2:
22:35:b4:29:73:0b:d1:39:8f:60:0d:0b:77:0b:f3:8e:a5:7d:
75:83:db:4e:f3:9c:13:38:ee:b9:ec:68:24:c4:4e:a0:2a:ca:
7c:0b:25:42:6b:84:72:0b:9c:29:a8:bb:78:78:4c:f2:cf:5e:
c0:2f:d8:e4:28:51:7d:15:3e:8f:36:7a:42:ad:e7:33:5c:7c:
e2:5a:3b:c0:16:fb:51:6a:2e:75:d6:a1:3a:f5:51:91:0b:2d:
31:98:95:af:f1:3b:83:6e:be:8c:94:9d:6d:4f:c3:98:2a:88:
ca:6b:d0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:59:06 2025 by rpki-client