Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
File: A554tFtfWVlOuBHzrGkGKWfyjHc.mft (raw, json)
Hash identifier: eGVgtLNS4fO5Coc0jDgHQUe8s146jwuLMMZGqWndReA=
Subject key identifier: 63:34:BF:D2:8A:1F:08:A7:E8:28:4A:ED:A4:50:D0:33:04:40:61:BE
Authority key identifier: 03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
Certificate issuer: /CN=039e78b45b5f59594eb811f3ac69062967f28c77
Certificate serial: 01984B54782247B9ACCDAFC9086D062322AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
Manifest number: 0476
Signing time: Sun 27 Jul 2025 10:01:23 +0000
Manifest this update: Sun 27 Jul 2025 10:01:23 +0000
Manifest next update: Mon 28 Jul 2025 10:01:23 +0000
Files and hashes: 1: 7h2grz8OfZg3_f3qnvjsQOWeT0M.roa (hash: F0gJrE4+UT2zrGrF6oXGx/pjZ35hmL1zwnN5iPSHMCs=)
2: A554tFtfWVlOuBHzrGkGKWfyjHc.crl (hash: oD9CzMlkof5GtB/PykxfF9MBHMUFG0No7V4IM7GAUKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:78:22:47:b9:ac:cd:af:c9:08:6d:06:23:22:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039e78b45b5f59594eb811f3ac69062967f28c77
Validity
Not Before: Jul 27 10:01:23 2025 GMT
Not After : Jul 28 10:01:23 2025 GMT
Subject: CN=6334bfd28a1f08a7e8284aeda450d033044061be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f3:af:42:f4:94:97:4b:b7:5e:a4:13:23:a8:
8b:38:ba:ad:a9:f9:30:4f:14:3d:c9:62:b4:99:6a:
fe:7c:cf:1f:1d:8f:1c:dd:d6:22:73:ea:6e:16:7e:
7a:ac:de:98:1f:06:ea:8f:34:c2:61:94:0e:20:e2:
98:31:74:6f:0e:18:d4:91:15:cd:d5:72:e8:93:e8:
f6:07:e6:22:85:70:26:09:0b:91:c1:09:ef:61:93:
a4:2a:87:e1:f1:97:8f:78:9e:5f:f3:f0:a0:f6:2a:
d1:d5:7f:15:fe:84:ea:e0:ef:32:1a:5e:09:33:bf:
48:26:34:a9:31:33:6f:22:63:10:36:c2:03:cc:2f:
f1:2d:a5:5a:7f:5f:8e:e7:eb:14:9f:f3:0f:c1:33:
9b:b9:40:31:11:30:bf:99:1b:ab:5f:ae:7f:42:87:
20:2e:57:c0:93:c3:17:df:2a:8b:b3:ec:f3:a0:75:
e7:34:bf:4e:da:44:cb:4e:35:c9:55:04:92:10:f2:
16:fd:e4:33:89:7a:ac:7c:45:3c:a1:99:39:cc:41:
01:bd:4d:ee:1c:6a:94:47:1c:6a:f2:d9:7e:ba:62:
81:4c:7d:94:80:f8:a7:c1:f2:6b:d1:e4:66:b1:fb:
0b:f2:03:74:ef:9c:c8:8e:ca:c5:ba:80:be:ea:ca:
f6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:34:BF:D2:8A:1F:08:A7:E8:28:4A:ED:A4:50:D0:33:04:40:61:BE
X509v3 Authority Key Identifier:
keyid:03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c4:31:ce:0f:39:bb:76:11:bc:fb:d5:b0:b8:09:e6:9e:6e:
7a:f5:b8:10:34:09:de:07:d3:10:ce:2a:5e:73:cb:9f:90:17:
20:86:33:68:99:95:51:b9:be:d5:d1:6b:71:97:86:ee:bf:d8:
61:1e:69:29:a1:3d:e9:29:cd:6c:70:5d:49:36:56:d1:1d:25:
38:53:2a:9c:2e:c8:53:38:ee:96:fc:e8:a7:4e:42:8c:b6:b4:
45:af:82:62:51:74:9f:a1:74:e8:da:95:e9:35:fb:ea:89:e1:
e7:5f:80:fb:40:d6:42:91:40:b5:27:40:e6:58:2b:8f:47:2b:
95:65:c2:dc:29:60:21:50:6e:49:d4:a0:da:7e:89:24:ea:d3:
05:e6:11:38:7b:92:41:25:3c:98:88:6d:e9:cb:52:04:94:f8:
8c:41:73:47:46:09:bb:10:c1:f6:b4:39:88:3d:6b:6a:fd:cf:
a0:00:8d:c2:96:b2:75:74:7f:42:b4:88:f8:36:32:3b:0e:99:
90:7a:b6:0a:c3:92:c5:fc:7c:b8:e2:2e:c1:fa:26:aa:7c:5d:
fc:b5:4c:af:59:30:8f:c9:4d:19:d6:f7:b5:c7:d5:1e:b7:be:
5a:e8:d6:ce:f4:8d:39:50:41:d3:83:1e:d2:03:e3:fe:b8:c4:
1e:99:6c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:37:18 2025 by rpki-client