Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
File: RbUATsPPXBp1UYXW9AaDxkbMlOw.mft (raw, json)
Hash identifier: cHo15doAkg+dKTLYMTqmgU1rvqNUAkQkSBrlCT4RF+c=
Subject key identifier: E7:91:C4:A0:02:F7:57:23:32:14:32:34:BD:9B:85:3C:ED:3B:F3:6A
Authority key identifier: 45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
Certificate issuer: /CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Certificate serial: 01984A7811E7C2DC8CB9D9187CFAEC705AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
Manifest number: 0A3E
Signing time: Sun 27 Jul 2025 06:00:39 +0000
Manifest this update: Sun 27 Jul 2025 06:00:39 +0000
Manifest next update: Mon 28 Jul 2025 06:00:39 +0000
Files and hashes: 1: RbUATsPPXBp1UYXW9AaDxkbMlOw.crl (hash: gb+VgRyVF0M+m0P0E9V6EcAEIYd1o0mr98SR8dmU0lg=)
2: cg41KOlM1vNAwrdMnvNHppcwT4c.roa (hash: QsQ4ZMCLxuolAifAsH1HBIsIugUjZ4tjy04rNn/2wxI=)
3: iuqsr8mDy4hdl6U1K1v1iSpNchQ.roa (hash: 1qvvVB0UpfZrwtI6t2Uw+kulc+5R7APEpoKz6kq0OuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:11:e7:c2:dc:8c:b9:d9:18:7c:fa:ec:70:5a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Validity
Not Before: Jul 27 06:00:39 2025 GMT
Not After : Jul 28 06:00:39 2025 GMT
Subject: CN=e791c4a002f7572332143234bd9b853ced3bf36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:05:1c:2f:ad:ba:6f:05:ca:af:31:20:92:
c2:fa:48:4b:54:7a:47:71:65:4b:39:2a:fc:5d:e6:
ec:e6:7d:a7:50:c2:48:61:d1:e2:70:f2:74:ec:01:
dd:b1:9e:3f:10:76:85:a1:5c:02:66:72:bd:41:39:
a7:ce:c0:35:0f:97:59:2e:7a:04:be:e3:93:34:04:
cf:ff:0f:2d:38:f1:08:14:c8:98:7d:c2:66:74:e3:
3a:73:bb:7a:53:d5:cb:c6:fe:59:c9:30:54:de:02:
f4:71:ee:d4:dd:31:8e:2e:09:92:1f:65:11:ac:9e:
8c:2f:8b:7c:fa:9d:44:3f:ab:e6:17:0e:32:4a:79:
cf:17:9a:f9:26:25:89:25:c2:f0:3e:2a:f9:f3:0d:
13:44:0a:d9:c5:ac:c9:13:f4:a6:81:d5:b2:9c:7d:
48:02:60:8c:96:be:49:6f:3f:80:9c:53:f3:1c:b2:
41:36:4e:7f:6e:2c:b9:55:23:12:32:01:90:2d:b7:
60:e8:a9:21:f0:36:15:d4:b4:07:47:c3:86:60:35:
84:e8:fc:d8:22:c8:8d:83:57:cb:49:8e:ad:18:43:
8d:b0:3c:f5:eb:79:22:e2:1b:71:50:6c:6c:01:56:
02:4b:e3:c9:88:ed:38:08:1e:b5:57:6d:64:5a:f7:
98:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:91:C4:A0:02:F7:57:23:32:14:32:34:BD:9B:85:3C:ED:3B:F3:6A
X509v3 Authority Key Identifier:
keyid:45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:00:05:12:d5:16:4e:f7:76:f3:65:56:c0:9c:f5:72:94:a1:
c5:27:2c:b6:ad:8c:a3:c7:90:59:77:66:6f:20:5e:73:d3:46:
ab:1c:29:80:0e:34:86:44:20:f8:ad:54:fa:8b:f6:f4:0f:97:
b7:98:7e:6e:ec:7d:9e:f8:ca:a8:15:50:a6:db:0d:ec:f1:d6:
46:7d:24:a9:eb:f2:1b:33:d0:11:60:86:cf:fa:d6:d1:bf:e5:
99:5f:dd:ba:d8:66:8d:e9:53:22:66:52:13:47:6e:a7:e1:b9:
72:b6:4e:4e:d2:07:86:2b:62:b7:60:27:40:d6:af:99:20:3c:
aa:68:e6:5c:ac:8f:6a:b0:dd:d9:5a:5c:fd:fc:82:f5:67:d1:
09:20:2c:bf:38:02:1a:03:e6:7c:19:e8:39:2c:e5:bc:eb:61:
bc:2d:82:e5:c9:55:2c:b0:36:b6:ca:9f:77:7e:af:f2:d8:29:
11:75:d7:f2:81:98:67:df:c5:ce:97:b8:65:aa:69:fc:0c:df:
f5:2b:0a:66:0f:c1:f4:b4:1a:5d:12:07:85:93:33:1b:03:c3:
86:50:85:ec:3a:20:6e:f6:01:f9:b7:30:63:73:c2:ce:f9:3b:
87:b3:53:9a:77:c3:86:11:76:92:4b:6a:f1:4d:af:da:95:1b:
79:99:a7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:18:14 2025 by rpki-client