Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
File: sDQCUfGCY0f06WRfaCTTuT9H5d4.mft (raw, json)
Hash identifier: B+iZGwhSQI6GKJQ9VpQWfLmX1BDj8DA28VN+rHhKWgo=
Subject key identifier: F1:8B:34:77:D3:03:DA:0A:B8:8C:27:1D:78:5D:FD:C0:52:5C:76:C2
Authority key identifier: B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
Certificate issuer: /CN=b0340251f1826347f4e9645f6824d3b93f47e5de
Certificate serial: 01984A0A4064A439A42CB31981DDEE0F39B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
Manifest number: 0C05
Signing time: Sun 27 Jul 2025 04:00:42 +0000
Manifest this update: Sun 27 Jul 2025 04:00:42 +0000
Manifest next update: Mon 28 Jul 2025 04:00:42 +0000
Files and hashes: 1: qrqtK-ZhNnqsmvUdjEvFxU-EYdM.roa (hash: w1CKR1mGTdMnfdWKUqyIUV2nyHBupF+j5wpw/8wUJ44=)
2: sDQCUfGCY0f06WRfaCTTuT9H5d4.crl (hash: 9aARXFF46YBlBnQwG1pCz6bOLP/4rWJhrZYTbVMCwR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:40:64:a4:39:a4:2c:b3:19:81:dd:ee:0f:39:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0340251f1826347f4e9645f6824d3b93f47e5de
Validity
Not Before: Jul 27 04:00:42 2025 GMT
Not After : Jul 28 04:00:42 2025 GMT
Subject: CN=f18b3477d303da0ab88c271d785dfdc0525c76c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:72:d1:a7:bf:79:33:c7:28:06:9b:6c:72:ce:
bb:68:5e:16:40:28:86:4f:c3:0b:8d:85:6d:11:47:
cb:0e:20:8f:3c:4a:aa:8f:e4:0c:79:bb:dd:91:fd:
aa:64:34:53:89:8d:f4:e1:11:18:b0:db:f2:5a:75:
fb:54:29:96:ab:ce:f9:ce:35:56:ee:aa:81:6d:e1:
c4:ab:8c:a7:d8:2a:92:7c:b2:8c:a8:c4:b1:74:23:
23:6a:ef:23:ba:9b:c1:33:5e:38:f6:21:11:5f:fd:
6c:c0:54:1a:31:fe:1d:23:6f:c2:e7:ed:e5:19:83:
3f:40:85:86:e2:93:64:a0:97:19:fe:45:51:b1:13:
ae:07:91:0a:9c:0c:36:92:79:74:f8:90:48:7c:f0:
d5:02:b9:4c:d1:90:d4:28:c7:fc:c7:87:d0:00:f9:
d8:a0:cf:2c:72:15:fe:65:1a:32:84:e2:f3:23:08:
5f:a7:61:6b:d4:a7:16:fc:d1:ff:e2:5d:06:04:f2:
2f:95:d0:9f:5c:76:56:c5:68:fa:a4:be:16:f4:63:
67:2b:d1:fd:6f:b1:09:52:2a:e6:bd:44:67:03:72:
2d:3f:80:8c:5d:86:a6:75:1b:b8:0c:01:67:1a:71:
5f:67:14:cd:f7:25:d1:49:ae:23:5f:7d:6d:5b:3b:
e0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8B:34:77:D3:03:DA:0A:B8:8C:27:1D:78:5D:FD:C0:52:5C:76:C2
X509v3 Authority Key Identifier:
keyid:B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1a:c2:20:a6:96:f6:84:a7:61:98:6a:15:6f:ac:6b:ff:2f:
1e:af:64:ec:1c:ec:bc:29:28:d7:fe:4c:71:1e:4e:86:7c:a5:
0a:27:b3:75:9e:46:2d:87:c3:46:e5:0c:6e:ea:1d:92:70:13:
68:b6:42:95:7d:02:ae:34:22:6a:26:09:2e:c1:80:83:0b:b4:
11:c6:b3:eb:5a:d4:15:a3:8c:20:26:6e:91:e4:25:d1:0d:13:
44:3c:c1:93:4d:2e:b9:64:b0:f9:20:55:5b:5d:47:20:fb:81:
63:64:8d:ac:7d:13:66:98:9e:85:7e:60:05:89:bd:2e:10:33:
53:ce:17:c0:7d:67:be:1d:51:15:ea:1b:9e:96:43:a8:d3:75:
ba:95:11:93:d7:8d:d5:f0:bf:74:13:3a:5a:63:81:fc:5c:a7:
6c:10:8d:35:62:62:14:0d:67:e2:5b:41:3d:19:41:31:fd:7f:
1e:cc:66:63:79:e2:a1:fb:3f:3c:1f:2e:16:b7:d0:bc:a3:8b:
b9:59:5f:7a:3f:ad:f9:43:a4:ff:99:dd:d1:89:b9:e6:f9:42:
93:0c:f0:b4:4b:2c:06:4c:5e:42:3a:db:32:64:31:6a:d1:6c:
e1:3b:ee:3d:82:08:2e:0e:89:d1:fa:04:27:c2:20:be:19:9d:
62:77:fb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:19:08 2025 by rpki-client