Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/US4nvokbGeypvOtT5NwjfFo1Vpc.mft
File: US4nvokbGeypvOtT5NwjfFo1Vpc.mft (raw, json)
Hash identifier: YOJskVMw9egitL+K8rNYyOL0rf+FuQA1D1vsvjolt44=
Subject key identifier: 0F:2E:A6:FF:13:9C:4A:EB:83:C6:2E:9B:59:BC:8B:9E:C6:B0:C4:E8
Authority key identifier: 51:2E:27:BE:89:1B:19:EC:A9:BC:EB:53:E4:DC:23:7C:5A:35:56:97
Certificate issuer: /CN=512e27be891b19eca9bceb53e4dc237c5a355697
Certificate serial: 01984708A6E993BDAE943C00B7D205596DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/US4nvokbGeypvOtT5NwjfFo1Vpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/US4nvokbGeypvOtT5NwjfFo1Vpc.mft
Manifest number: 0BFC
Signing time: Sat 26 Jul 2025 14:00:05 +0000
Manifest this update: Sat 26 Jul 2025 14:00:05 +0000
Manifest next update: Sun 27 Jul 2025 14:00:05 +0000
Files and hashes: 1: US4nvokbGeypvOtT5NwjfFo1Vpc.crl (hash: czsQNItUzYja2CsdLC4ZGk1wdqsN9zkbNf4etaykeaA=)
2: WNeWcYI--FrvgqVvkbFu12LIaYA.roa (hash: k8USa1JcWCZakgNPmvbG30Z+DpfHdvNnOH9UZ98bnDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/US4nvokbGeypvOtT5NwjfFo1Vpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/US4nvokbGeypvOtT5NwjfFo1Vpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/US4nvokbGeypvOtT5NwjfFo1Vpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:a6:e9:93:bd:ae:94:3c:00:b7:d2:05:59:6d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=512e27be891b19eca9bceb53e4dc237c5a355697
Validity
Not Before: Jul 26 14:00:05 2025 GMT
Not After : Jul 27 14:00:05 2025 GMT
Subject: CN=0f2ea6ff139c4aeb83c62e9b59bc8b9ec6b0c4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:40:40:3e:73:ff:ec:97:99:2b:95:76:e7:
11:9b:23:80:a3:8c:8c:ca:31:0f:2b:2d:7b:9f:5f:
d2:71:c1:3c:95:15:c2:b2:12:71:01:41:70:61:61:
6b:9e:f6:dd:18:b3:83:07:d4:80:df:dc:d1:ca:4a:
f1:e0:31:11:81:e0:93:3a:23:6c:bb:23:97:81:55:
89:c8:84:01:d9:ba:5e:1a:f6:b9:d7:81:3a:88:a7:
85:ac:2d:d0:68:f6:38:e8:2c:d5:ae:d8:12:bd:8b:
28:50:6b:6d:13:e1:d8:2c:56:1b:f3:bf:af:33:7d:
ba:65:8d:ee:22:5c:45:a2:54:42:52:f4:8e:80:ae:
5d:3e:88:12:35:ad:2c:85:bd:b1:e2:97:79:54:87:
da:1f:36:8a:3f:49:58:6a:cf:18:80:30:12:47:a1:
45:03:9c:f5:1f:46:3a:69:c6:58:2f:e1:bc:63:3a:
a6:9f:83:7a:f5:83:2a:17:33:26:90:5f:a4:f6:d8:
b7:8a:43:91:67:c1:83:3e:d1:bb:d7:e5:78:61:ea:
e8:f7:5c:37:9c:0b:c7:29:24:02:de:37:af:eb:93:
e4:41:de:3f:04:1c:bb:35:f4:e5:a4:8e:1c:8a:96:
ef:06:58:63:73:a4:dd:d0:70:31:22:89:1e:31:07:
67:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2E:A6:FF:13:9C:4A:EB:83:C6:2E:9B:59:BC:8B:9E:C6:B0:C4:E8
X509v3 Authority Key Identifier:
keyid:51:2E:27:BE:89:1B:19:EC:A9:BC:EB:53:E4:DC:23:7C:5A:35:56:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/US4nvokbGeypvOtT5NwjfFo1Vpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/US4nvokbGeypvOtT5NwjfFo1Vpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/US4nvokbGeypvOtT5NwjfFo1Vpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ba:e8:13:02:f3:1c:b5:69:97:19:14:62:19:3f:0e:f7:8f:
1d:9c:d5:54:81:55:d8:d3:48:82:f9:f7:cb:0d:f0:22:f6:07:
fb:0e:74:60:5a:a4:86:56:de:d2:1a:66:3b:36:b8:66:76:58:
5a:73:1c:31:7d:2f:1d:0b:c0:d9:4d:cc:60:31:ef:32:9e:c1:
ce:68:65:5f:20:90:77:d3:f3:d0:64:4b:a1:21:e5:23:2e:c5:
73:14:03:a2:c2:9d:4e:b2:e9:2e:e4:92:f0:3d:d0:e3:92:61:
6d:01:b1:7c:af:69:91:8a:58:1c:32:f3:5d:6e:11:c3:67:d6:
c7:e2:61:ba:85:cb:ea:12:ed:72:8a:90:19:14:35:ea:e2:e2:
b2:2e:71:00:a7:c6:70:a8:52:68:a2:97:24:f1:85:37:a9:c7:
7b:b5:79:21:30:ce:e6:18:ba:1f:e5:17:ec:87:52:4f:05:0f:
45:59:96:1b:fc:f6:45:2c:4d:e6:fe:5c:26:1b:71:96:79:e0:
7a:16:f7:9c:2f:ce:1d:29:8e:88:a0:83:f5:3c:23:1d:c0:3d:
d0:3b:b3:9f:ce:ae:de:14:31:d7:a3:40:b8:0a:f1:54:1d:80:
b3:c9:f7:44:d5:71:5a:82:cd:7c:ec:e7:e9:e9:77:48:0e:ab:
a5:65:00:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:48:45 2025 by rpki-client