Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
File: kOszbVYE1HuugXI4sNu0l3HiRyk.mft (raw, json)
Hash identifier: aHOxzKiTjtAZAPpT35HnPffaE4/fdkoEnF8m9ucj7Ec=
Subject key identifier: CF:BB:EB:6D:28:38:32:E4:7C:80:9B:A6:06:D0:29:65:3E:D0:EC:C9
Authority key identifier: 90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
Certificate issuer: /CN=90eb336d5604d47bae817238b0dbb49771e24729
Certificate serial: 019840CFFAEEFBDD369125BCF9A5AF90DF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
Manifest number: 15FD
Signing time: Fri 25 Jul 2025 09:00:28 +0000
Manifest this update: Fri 25 Jul 2025 09:00:28 +0000
Manifest next update: Sat 26 Jul 2025 09:00:28 +0000
Files and hashes: 1: kOszbVYE1HuugXI4sNu0l3HiRyk.crl (hash: 8KcQntXYcnA1okxV+lYcFE6qW9ovpO5DZPJrB/bVkHY=)
2: nHFDaIILOdTjKywJ536u2NbijQ4.roa (hash: GZUS5OKqPLBVaLkWEyB2Ce3k2q8gf8Rj7vaTEKCevNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:cf:fa:ee:fb:dd:36:91:25:bc:f9:a5:af:90:df:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90eb336d5604d47bae817238b0dbb49771e24729
Validity
Not Before: Jul 25 09:00:28 2025 GMT
Not After : Jul 26 09:00:28 2025 GMT
Subject: CN=cfbbeb6d283832e47c809ba606d029653ed0ecc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c4:46:3b:a6:bf:93:ce:60:55:35:e7:7d:c4:
7e:d3:3e:89:7c:7a:cb:bf:be:b7:6e:9f:26:3c:f6:
cb:d8:38:41:68:ee:d0:27:d8:ec:65:46:af:18:03:
3e:3a:2c:88:de:7c:a2:29:22:a2:f5:a8:e3:2e:65:
a1:03:21:86:17:50:bd:37:2d:91:50:7b:69:0c:36:
70:ce:ad:7c:d0:6c:c9:f6:ea:72:d7:ec:6e:01:b1:
a7:2c:35:f3:5b:a5:4d:d5:2f:55:a5:2c:d4:db:5b:
74:ad:78:c8:df:a3:09:71:d0:18:4b:d8:64:ee:54:
f4:25:cd:82:20:c2:9f:6e:e8:7f:46:14:21:26:2e:
03:5d:d9:43:79:e6:36:dc:29:18:ea:7d:df:36:13:
bd:5d:4f:dd:d7:aa:6b:03:19:38:4a:92:d2:1a:7e:
df:1e:c8:71:b4:7e:97:f0:28:80:c3:15:49:11:6d:
c8:ef:8c:90:e3:94:c4:65:89:02:10:53:39:3e:65:
88:c7:c2:01:f9:0e:30:92:d6:a3:98:9f:84:6a:2a:
2b:43:2b:ee:17:fa:83:92:b8:63:c4:ee:a3:4c:0a:
2c:35:c9:24:43:9d:ae:ed:d3:c6:4b:5e:d6:d9:c2:
e1:bf:c3:3e:67:e7:70:cf:8f:37:30:b7:4c:71:72:
6c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BB:EB:6D:28:38:32:E4:7C:80:9B:A6:06:D0:29:65:3E:D0:EC:C9
X509v3 Authority Key Identifier:
keyid:90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a0:9b:0f:11:1d:70:68:4c:31:bc:4d:5e:d1:70:c4:ef:62:
b4:87:dd:92:ed:22:2b:00:13:d1:10:4b:28:5c:07:bf:5d:36:
cf:f2:78:d6:ed:b3:f3:cd:81:28:59:94:6f:9f:ec:c4:7f:e5:
c9:97:35:dc:7c:ee:10:ef:18:1b:a2:4b:d4:69:6b:35:49:6c:
cf:10:a8:c7:57:cd:bb:37:be:3a:71:cb:0d:10:4f:29:a4:93:
1d:e3:bd:b3:95:fe:a0:1e:cd:7b:fd:3e:45:3f:0d:94:76:3d:
bf:66:9e:6f:bb:aa:d1:c3:00:1e:69:a2:7c:a6:d4:fe:d9:e0:
51:06:1e:37:7a:e1:27:42:4b:f3:b6:82:84:5f:2d:a8:3e:15:
d6:dd:d8:e4:dd:7b:f3:15:75:3b:12:2a:7c:8f:77:83:90:e9:
e0:b6:71:2c:5e:98:21:73:46:d9:92:e3:12:01:3f:96:77:a9:
a1:eb:d7:97:f4:77:90:43:33:25:d6:10:e9:d1:b1:3e:2a:93:
c7:e5:ed:71:9f:de:9a:0c:62:49:84:35:c6:cf:aa:3b:6f:bc:
d2:1f:41:cc:f0:23:ba:4a:e4:79:88:64:9b:15:a4:06:41:50:
13:5b:96:1a:c7:6a:14:40:d3:5f:f0:53:e9:4a:75:8e:05:ee:
94:d1:f6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:12:25 2025 by rpki-client