Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
File: E38jlE49eNqSAFXXLHTQK-VFXzU.mft (raw, json)
Hash identifier: 6ilRuc0NOkLpvZGZRL2jR73iGtMHmMY/D68GrDNzkOg=
Subject key identifier: FE:9E:C7:68:76:C0:91:F5:B7:4C:19:84:A0:52:17:CA:18:27:45:2F
Authority key identifier: 13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
Certificate issuer: /CN=137f23944e3d78da920055d72c74d02be5455f35
Certificate serial: 0198499C51B7EB6BB6C815478FD4A155C53B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
Manifest number: 155A
Signing time: Sun 27 Jul 2025 02:00:37 +0000
Manifest this update: Sun 27 Jul 2025 02:00:37 +0000
Manifest next update: Mon 28 Jul 2025 02:00:37 +0000
Files and hashes: 1: E38jlE49eNqSAFXXLHTQK-VFXzU.crl (hash: HCg6RY9kwth6loO8F4a9FOLwPgP6mQ4v2wIhWRqJnBk=)
2: pPGln_tGe3Wb0dePm4ie5BM7xaM.roa (hash: e7lXmv0/qA8zwcIJTP+HZzZQ8eseEaVWqcUevE7q2Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:51:b7:eb:6b:b6:c8:15:47:8f:d4:a1:55:c5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137f23944e3d78da920055d72c74d02be5455f35
Validity
Not Before: Jul 27 02:00:37 2025 GMT
Not After : Jul 28 02:00:37 2025 GMT
Subject: CN=fe9ec76876c091f5b74c1984a05217ca1827452f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:f8:c5:87:d4:0a:5a:2c:c0:9d:42:06:9e:
a3:f3:ce:be:d8:77:ed:7a:23:6c:2f:cf:9c:76:98:
e4:02:9b:e0:69:90:4c:68:f4:ed:e4:eb:3d:15:f6:
4f:ed:8c:99:5f:86:4e:f9:3c:37:60:92:45:8b:32:
37:4d:2d:1b:6f:72:a2:ce:a2:69:b1:90:aa:54:a3:
16:1f:45:3f:00:cc:d1:e5:2b:a1:bd:0a:2e:4f:2e:
96:47:53:d0:d2:60:fc:2e:9f:3a:46:98:72:cf:82:
c7:72:04:39:50:3c:95:eb:c9:39:d9:11:14:a4:41:
f0:6d:67:24:b4:d9:54:81:0a:b2:cb:69:20:99:b0:
ac:0e:33:b6:d4:39:24:f2:7a:e1:29:05:92:c3:25:
1d:b3:c6:e1:05:18:89:db:64:5d:0b:59:0a:5c:d6:
0f:58:ac:d7:2a:be:22:cd:0f:c1:57:d8:5a:9c:6b:
79:0e:21:50:07:ad:6a:61:84:73:10:01:43:b6:2e:
4c:fe:d2:29:26:c9:bd:ec:2a:2b:23:26:d8:61:b4:
f3:76:f4:8c:01:41:67:7c:ad:36:7e:d1:38:7e:97:
74:0a:ff:f1:65:b7:e5:3e:06:fe:82:13:54:27:04:
78:16:4e:07:0a:78:45:f3:57:28:24:90:18:25:63:
5b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9E:C7:68:76:C0:91:F5:B7:4C:19:84:A0:52:17:CA:18:27:45:2F
X509v3 Authority Key Identifier:
keyid:13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0d:72:4e:73:54:7f:17:ae:4c:6b:ce:5f:b1:f7:ce:d9:8f:
39:fe:7b:55:da:8d:c4:db:d1:a3:08:ec:c9:be:0f:25:cd:59:
55:e2:95:92:9c:27:c6:87:68:d3:97:c2:35:cb:33:2b:53:24:
15:e0:f1:fa:54:1b:5e:c3:b0:6f:56:0d:33:1a:59:91:44:37:
53:6f:c6:a7:19:08:3f:6f:2d:e6:43:b0:ff:77:68:4f:c0:52:
4f:6c:5e:d9:7e:53:89:b5:22:f6:13:8b:2a:b0:b2:ed:31:20:
9c:4e:6b:ca:e9:45:30:be:8f:d5:50:22:9a:3b:9b:94:27:49:
14:63:d7:0c:10:28:6e:61:94:d2:5f:99:b0:55:cd:09:5c:65:
18:fd:8d:26:ad:e1:30:e5:6f:fb:c4:21:be:49:7e:1d:7a:eb:
eb:77:72:1d:54:bc:6d:47:79:e3:44:b2:e2:da:b0:17:ca:0e:
e2:2e:43:ae:b3:0a:42:7d:07:c4:c8:42:8c:4c:fb:64:e1:d6:
6b:60:16:44:63:bc:93:6c:77:ef:a9:53:a8:0d:a0:72:99:88:
42:c5:b6:3f:b3:ac:1e:5c:03:8a:60:83:4b:5e:ea:d3:a5:70:
b5:26:d5:66:a0:59:f0:8b:66:43:8b:00:1b:7b:1f:8e:52:26:
94:c1:e7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:29:17 2025 by rpki-client