Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
File: R01HT5RpSoEE9eQTqyucCVWbefA.mft (raw, json)
Hash identifier: E5BXGeVuILaj2dMye1pIJJQ5HWNbU+QERNN0UlCr/c4=
Subject key identifier: A4:6D:06:74:8D:93:83:28:1E:57:1A:5B:8D:DC:87:60:7E:36:2D:05
Authority key identifier: 47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
Certificate issuer: /CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Certificate serial: 019842BE1315028652B8D7556961AB76361C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
Manifest number: 0220
Signing time: Fri 25 Jul 2025 18:00:09 +0000
Manifest this update: Fri 25 Jul 2025 18:00:09 +0000
Manifest next update: Sat 26 Jul 2025 18:00:09 +0000
Files and hashes: 1: K09nrG0KqTizFLHUaMNyxM0z2ro.roa (hash: cExkaCJNm1PmYW065hiBGP/O4kugBu6fZ2Nczp2MsYg=)
2: R01HT5RpSoEE9eQTqyucCVWbefA.crl (hash: 4M43vIV1sqfiBMjptlQsOISdNPUPhVyMyzpzdItQAq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:be:13:15:02:86:52:b8:d7:55:69:61:ab:76:36:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Validity
Not Before: Jul 25 18:00:09 2025 GMT
Not After : Jul 26 18:00:09 2025 GMT
Subject: CN=a46d06748d9383281e571a5b8ddc87607e362d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:86:19:d8:39:37:af:86:78:96:ec:b8:3f:
d3:86:e9:a2:d0:e5:8b:cb:90:8f:b4:47:0e:62:1d:
07:95:ef:98:19:f3:be:3b:77:ee:9d:aa:7c:a6:d6:
ac:43:aa:cd:fb:72:df:56:2a:09:b9:cb:54:eb:16:
d1:db:4d:5f:da:0a:c3:48:3c:96:cb:89:2d:61:b8:
0a:4f:c7:71:e0:a0:32:55:1e:f8:83:27:8b:db:e2:
46:6d:e2:5b:9a:72:5f:f4:50:c6:1f:88:45:4b:2d:
44:cd:f0:93:1f:b0:f5:73:dd:cf:e5:ed:40:3e:c5:
4a:c9:dd:83:ab:ca:a9:53:fd:e0:0c:21:79:0c:1d:
ab:6f:5f:3e:ba:95:cc:fe:63:e0:e6:47:95:68:c9:
5a:3d:7a:52:34:e9:e6:6f:da:2d:6b:72:d1:1a:18:
f8:7c:73:96:36:c0:3a:27:5f:97:93:6c:75:2e:bf:
d7:e9:83:20:84:ba:a2:9a:c7:bc:a8:dc:8b:9f:04:
c7:1e:3b:98:f5:aa:41:76:a3:92:37:0f:91:28:b8:
83:2a:63:a3:41:9f:28:d0:97:28:f8:92:30:1e:47:
e1:61:e5:57:24:72:6a:c6:31:a5:06:25:dd:3e:1e:
98:9c:9f:b2:44:37:e8:9b:8e:6c:37:d2:8c:87:d1:
3c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6D:06:74:8D:93:83:28:1E:57:1A:5B:8D:DC:87:60:7E:36:2D:05
X509v3 Authority Key Identifier:
keyid:47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2a:4a:d3:29:c6:09:ed:20:36:52:82:d0:81:78:e4:3c:45:
83:18:fc:47:aa:09:62:8f:61:43:9f:0f:35:02:2e:9f:be:0a:
bd:3a:2d:1c:f6:50:b8:53:cf:55:8e:bb:bf:8e:d8:bc:78:7e:
00:0f:82:70:b4:99:31:b3:e6:af:ac:70:4d:60:a6:aa:23:e0:
a1:c8:56:df:57:e1:41:c6:6a:cc:56:db:75:56:5f:04:65:bd:
7b:2c:ca:36:51:d7:3f:f2:42:67:0e:40:4a:a8:b9:d8:c1:c0:
0d:03:0c:5d:00:a6:11:e0:60:5b:4a:53:1d:ab:0a:c7:30:17:
38:00:0d:3f:6a:6e:c3:22:0a:5a:13:76:c1:c6:66:4c:ca:56:
a7:d6:a8:4f:18:29:b0:98:7c:54:82:4b:ae:e2:da:c2:b1:bf:
3f:98:a8:82:3f:a5:47:ba:fd:fa:b8:0a:28:6c:35:b2:a5:dc:
8a:aa:bc:d3:07:53:90:bb:0a:f1:86:cd:aa:e0:7e:95:f0:20:
ca:08:a2:c3:2b:fb:8a:7b:67:42:ce:e8:88:45:92:ad:b4:c8:
29:38:87:0e:66:39:09:e5:c1:f0:f7:3b:07:3c:9b:b2:8d:94:
a6:24:51:01:a0:11:52:86:9f:d1:bf:c3:65:df:24:44:51:86:
3a:8a:62:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 02:54:56 2025 by rpki-client