Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
File: RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft (raw, json)
Hash identifier: bpE2Ycf0eMqYFQwOHQ5/KKV9yerIRoCkk72HKop20MU=
Subject key identifier: 25:B1:0F:37:CE:88:7A:09:7E:17:48:CC:04:FD:5D:46:E7:DA:8D:0E
Authority key identifier: 46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
Certificate issuer: /CN=4603c656c197461a49caa1ffd720d18beeac8076
Certificate serial: 01984AE6025B5ACCA51B4AC146617D701EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
Manifest number: 03CA
Signing time: Sun 27 Jul 2025 08:00:44 +0000
Manifest this update: Sun 27 Jul 2025 08:00:44 +0000
Manifest next update: Mon 28 Jul 2025 08:00:44 +0000
Files and hashes: 1: RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl (hash: QZoODJ/o/lfIIjj7B+YMGP+uekyVe7i1mHdien1TW9w=)
2: etkRbnW9ryrJ6e3ywwJ1q9bD7Xw.roa (hash: JMmWgxd8mijwpLVsPTeG3AKA8OAxDNzyK+lSzQE8/U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e6:02:5b:5a:cc:a5:1b:4a:c1:46:61:7d:70:1e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4603c656c197461a49caa1ffd720d18beeac8076
Validity
Not Before: Jul 27 08:00:44 2025 GMT
Not After : Jul 28 08:00:44 2025 GMT
Subject: CN=25b10f37ce887a097e1748cc04fd5d46e7da8d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:eb:8b:93:39:50:c7:94:7e:47:18:e5:f5:
db:1e:48:77:a2:e2:0d:37:bd:bc:42:22:b8:cf:8f:
53:e5:2f:6f:30:1d:c3:e7:0b:6f:c6:26:f2:1e:a1:
d7:21:8b:42:f7:41:f1:7e:8b:fd:68:f9:83:cf:92:
a0:59:61:09:df:f5:74:34:43:2c:51:0b:cd:77:11:
67:3e:33:ff:a2:36:56:20:e6:1b:90:69:7f:04:c2:
a2:5a:2b:d2:18:d6:9f:00:00:c7:da:b9:be:12:7f:
e4:79:0f:7d:16:b4:4f:78:45:96:4a:b6:56:1f:4d:
95:e6:f9:52:33:c8:e7:67:dc:8b:0e:e7:4c:93:a0:
26:3e:34:c3:4c:61:12:3d:d6:34:1b:81:fc:12:b0:
aa:c3:6c:50:cc:6a:d4:ee:35:8f:16:b7:65:d3:73:
af:3d:80:69:51:fd:76:f9:de:c7:79:2b:f1:20:7c:
81:1e:b9:31:63:e8:2d:1f:df:e7:94:4b:b0:08:19:
96:f6:c6:61:1a:89:7e:19:37:a7:14:20:04:b0:3c:
0a:74:59:51:55:ea:04:34:e0:ee:c1:ce:05:12:9b:
f8:1a:63:a6:86:57:f4:12:33:56:85:94:a3:44:9a:
c5:da:b0:e1:3c:b6:df:46:d1:1f:87:aa:1e:57:30:
2f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B1:0F:37:CE:88:7A:09:7E:17:48:CC:04:FD:5D:46:E7:DA:8D:0E
X509v3 Authority Key Identifier:
keyid:46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:96:e0:25:94:af:48:d0:33:91:04:e1:16:89:dd:b8:63:16:
30:6f:34:02:97:36:d4:ba:ae:24:13:04:23:f1:d8:4a:c3:f2:
02:a8:b7:3c:20:53:7c:00:a2:d4:a6:63:ac:e9:9c:7f:d9:ef:
72:53:4c:68:63:19:47:4a:10:c6:fb:a9:a3:f6:a3:10:57:c5:
8e:04:4b:40:44:7e:e8:55:dd:19:c3:94:4a:9b:4c:a1:4c:6d:
d5:e1:9a:38:cc:e9:3a:40:c3:70:0c:77:12:f8:35:f1:ae:c8:
9a:f7:01:5c:fd:46:fa:ff:9e:5c:d9:cf:77:8f:0d:35:b7:02:
4b:99:c8:c5:3d:5f:65:cc:70:41:f7:d8:28:48:13:98:8a:e6:
91:54:dd:2c:4e:6b:50:21:49:8a:cd:26:ec:6c:a2:c7:dc:9d:
af:f6:c9:07:d3:10:16:e0:96:37:5a:43:68:09:c7:b4:e7:43:
f7:19:3a:79:ee:63:98:27:f8:c1:8a:cb:b4:1d:90:40:37:ef:
11:02:0f:7e:9d:83:5c:b1:8f:75:c9:7a:1c:9d:d9:46:95:26:
54:0f:52:cf:0d:30:63:5f:e3:d5:75:20:d0:c6:ec:ac:30:00:
b7:82:b5:cf:4f:7e:a9:c5:56:a4:9f:17:dd:ec:68:cb:fe:7c:
8f:cb:15:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:21:28 2025 by rpki-client