Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft
File: rUZjafOSfaDIn7X0s-qeMk-SioQ.mft (raw, json)
Hash identifier: fqpC9Z1uzpshjszDULOEvq6XN6wd6LG88ujHvVdEnfg=
Subject key identifier: 39:C9:7E:D0:21:EE:08:82:12:63:7B:35:9A:75:1D:CA:80:30:54:24
Authority key identifier: AD:46:63:69:F3:92:7D:A0:C8:9F:B5:F4:B3:EA:9E:32:4F:92:8A:84
Certificate issuer: /CN=ad466369f3927da0c89fb5f4b3ea9e324f928a84
Certificate serial: 01984AE571B7195626CFDB2EC030C3EE13E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUZjafOSfaDIn7X0s-qeMk-SioQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft
Manifest number: 0618
Signing time: Sun 27 Jul 2025 08:00:07 +0000
Manifest this update: Sun 27 Jul 2025 08:00:07 +0000
Manifest next update: Mon 28 Jul 2025 08:00:07 +0000
Files and hashes: 1: e2krXZzkR-AkHScvd476IUHzrz0.roa (hash: KJC7yZeLdAZIJXLO5En/1DBnqhI+LO45sglWIneobpg=)
2: rUZjafOSfaDIn7X0s-qeMk-SioQ.crl (hash: dJGyQuSbOBXN/tz7jXm8LKHEZDYPvIiDzVW7C46AJWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUZjafOSfaDIn7X0s-qeMk-SioQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:71:b7:19:56:26:cf:db:2e:c0:30:c3:ee:13:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad466369f3927da0c89fb5f4b3ea9e324f928a84
Validity
Not Before: Jul 27 08:00:07 2025 GMT
Not After : Jul 28 08:00:07 2025 GMT
Subject: CN=39c97ed021ee088212637b359a751dca80305424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:81:88:cf:10:c0:69:e7:79:d6:af:24:da:
64:99:cc:5c:4c:2a:91:5f:61:96:d5:c1:dd:ed:25:
f7:c1:63:d7:6d:eb:cd:15:8b:52:f8:4e:7c:72:e7:
02:85:a4:c0:80:ef:3b:f3:64:7c:ef:2b:ea:16:6d:
4c:70:d0:bd:15:77:5c:2b:f9:39:d0:0b:73:3e:15:
b6:a1:30:5e:11:5b:48:e1:e8:7b:92:02:86:17:83:
c2:f3:a5:59:b4:ff:77:ec:49:91:91:c7:cd:29:cf:
02:ca:6e:80:d3:ed:58:74:3a:2a:de:05:26:20:80:
6d:75:22:40:9f:a4:d2:cc:64:d2:71:8b:71:e6:11:
f8:8c:41:0f:1b:e5:3d:18:7b:bb:21:a2:ad:fd:44:
cd:ad:34:11:cf:c7:94:a5:52:91:56:ea:ab:e6:cc:
0f:8c:bc:73:51:62:93:df:7c:a3:6d:64:88:b8:3d:
06:f7:07:31:77:3a:14:39:13:fa:94:6c:34:c4:3b:
b4:20:0c:f1:63:98:e4:c1:05:b7:f5:e2:11:46:36:
8e:ea:fd:ab:67:c9:33:83:6b:cd:e1:82:59:bb:64:
13:2f:ab:82:05:22:22:b6:c7:39:9e:f3:7e:ce:b5:
91:43:cf:27:31:51:6c:68:b3:2f:fa:5c:93:68:a3:
a9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C9:7E:D0:21:EE:08:82:12:63:7B:35:9A:75:1D:CA:80:30:54:24
X509v3 Authority Key Identifier:
keyid:AD:46:63:69:F3:92:7D:A0:C8:9F:B5:F4:B3:EA:9E:32:4F:92:8A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUZjafOSfaDIn7X0s-qeMk-SioQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:09:99:8a:f2:01:70:c4:b4:95:4f:aa:0d:c4:82:64:63:c2:
66:bd:3c:43:2e:76:4c:aa:4b:e7:4d:16:11:e9:6a:97:e1:f3:
5e:18:97:85:bd:88:49:b0:a8:e2:0c:57:2e:47:1c:77:c4:22:
76:d6:e7:8b:9c:b0:a7:42:1c:d5:66:c1:97:f6:d5:13:c8:b0:
87:d1:2f:6d:d0:f1:16:0a:85:7f:bd:9a:e7:a1:46:83:6d:ac:
20:de:31:c2:b8:a4:03:51:99:df:ef:6e:f0:c4:74:08:53:45:
6d:6f:57:00:05:2f:e5:1d:b7:c6:fd:c8:7e:bb:9d:04:d1:db:
d0:df:88:98:1a:8e:a0:14:0a:44:75:3a:1c:7e:fb:a6:7a:b5:
65:d2:33:c2:70:ef:a4:09:76:42:b7:b7:e6:46:96:5d:8d:3e:
87:0c:f9:74:84:21:03:6f:df:ba:55:9c:19:06:8a:2a:8c:25:
67:dc:ef:9d:76:91:c8:50:2b:96:99:de:b5:5d:90:4c:b7:cf:
83:94:ee:e7:4c:84:31:48:87:ab:79:86:20:77:27:c2:64:a5:
5b:a4:5a:6b:8f:ab:74:79:4a:93:9b:75:a5:60:c2:6a:56:a8:
d7:df:90:57:ab:ec:48:20:ed:e3:5c:4e:b8:c6:61:af:ac:b6:
49:95:a6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:00:51 2025 by rpki-client