Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
File: geTmB1l46pR2tkHOAIx4erKOXRM.mft (raw, json)
Hash identifier: S+cCHxk+u9Ke3+/y9hpGht0YBAQzwL5YL/F/Kep5270=
Subject key identifier: 52:29:E7:73:10:F0:DA:D8:80:1C:37:43:2E:0B:D4:0E:C2:D2:F1:FA
Authority key identifier: 81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
Certificate issuer: /CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Certificate serial: 0198481B912D89E24ECBFFBF8B725E1A2338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 19:00:22 +0000
Manifest this update: Sat 26 Jul 2025 19:00:22 +0000
Manifest next update: Sun 27 Jul 2025 19:00:22 +0000
Files and hashes: 1: dBbI1Z81Mloa7W2OzhoKXchOrRQ.roa (hash: cFMz5yq3xJCpOCH1TXFzmCMMTxw6N/8cLdoB9ZDvza0=)
2: geTmB1l46pR2tkHOAIx4erKOXRM.crl (hash: pqwws1udnCCn5fDuzbAzpzzr+eb8LIOvez7GpzBmc7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:91:2d:89:e2:4e:cb:ff:bf:8b:72:5e:1a:23:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Validity
Not Before: Jul 26 19:00:22 2025 GMT
Not After : Jul 27 19:00:22 2025 GMT
Subject: CN=5229e77310f0dad8801c37432e0bd40ec2d2f1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f6:ab:7e:3a:0d:41:b7:f9:02:c3:76:40:ea:
89:07:a5:53:97:d0:c4:80:06:2f:7d:b2:c1:f5:5c:
4d:85:e6:d8:b3:53:05:8b:1b:30:ad:a6:50:4e:44:
2b:59:0a:0d:a2:3e:0d:1c:ea:0a:a8:eb:b0:4c:30:
bc:31:f2:6a:8f:19:71:aa:a7:6d:a5:e0:9c:36:1c:
40:2e:a3:6e:b0:74:cc:00:fa:bc:15:97:dd:cb:e1:
52:7c:1f:37:6e:3b:85:ab:9e:e6:a8:ad:fd:2f:38:
a2:4b:80:e0:1a:29:25:b7:dc:57:b7:50:b7:0c:a7:
bd:51:37:eb:37:d9:a6:00:8c:de:e9:9b:ee:2e:ad:
87:ca:e3:1b:29:4f:56:3a:ce:17:05:8b:70:e8:c9:
21:da:97:be:b7:ef:39:ad:f2:f1:ed:38:77:a3:b7:
d6:ff:60:9d:f8:1a:0b:a3:51:80:83:ae:4c:1b:59:
78:5f:bc:3a:8b:89:e3:51:55:bb:58:c8:11:fb:b1:
a2:16:5d:7a:e1:70:ee:fa:15:87:99:22:ef:05:59:
24:e6:e3:99:36:e6:5b:7e:dd:79:29:1c:89:9c:39:
11:20:1a:fb:64:42:55:10:52:76:1b:4c:2c:b6:47:
52:37:2f:cc:0e:5d:b4:b5:8d:0d:ef:1a:94:64:44:
fd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:29:E7:73:10:F0:DA:D8:80:1C:37:43:2E:0B:D4:0E:C2:D2:F1:FA
X509v3 Authority Key Identifier:
keyid:81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:77:76:ca:23:e5:d8:86:83:a1:c8:4a:1c:dc:a5:6c:73:34:
d2:f9:f1:ef:ff:23:1c:c8:be:a6:03:03:84:3c:b2:e0:e9:bf:
17:fc:b9:16:42:a6:94:35:c1:49:14:e6:a3:0c:42:84:5d:18:
7a:6a:72:6b:c0:44:2f:1e:18:b5:10:76:4c:f6:52:c4:83:dd:
77:a5:3f:80:e2:9e:03:65:59:34:80:2b:d2:6a:e2:66:51:63:
0d:77:af:80:09:a9:10:01:3b:41:ba:d8:da:01:25:a6:e8:72:
85:16:3d:2c:4a:f4:95:94:eb:2e:0f:45:a4:64:43:6a:8e:ec:
dc:db:10:9b:02:35:66:86:4d:a4:d4:64:5e:38:9a:36:29:88:
60:22:c5:94:34:15:92:3f:e6:bb:1a:f9:c5:38:57:24:30:c4:
4e:f6:4b:b5:a4:a5:1b:d2:9b:a6:10:e3:2e:4c:2c:be:bd:e6:
d2:b1:25:d1:49:1b:13:47:37:e4:42:0b:d1:37:59:ae:99:d5:
25:be:33:33:e3:05:5c:37:a6:48:ad:36:e4:3f:77:6e:04:fd:
b7:c6:d3:c7:0c:b9:dd:a4:05:b3:94:47:51:8b:4d:5e:b3:04:
b3:0d:8f:e7:54:8e:85:d6:44:98:8d:be:2e:2a:02:18:73:61:
5e:d8:06:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:35:40 2025 by rpki-client