Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft
File: sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft (raw, json)
Hash identifier: mtcOj7O0j5S0bRRAYvZRq7AS4QncHZjijvdzmuUQkeI=
Subject key identifier: 9B:53:E4:80:2D:76:29:B9:E7:D5:54:F2:7B:88:72:6F:53:1E:9C:91
Authority key identifier: B0:75:8E:88:C2:07:02:13:1B:91:7A:4D:FD:B2:37:4B:C3:65:55:87
Certificate issuer: /CN=b0758e88c20702131b917a4dfdb2374bc3655587
Certificate serial: 01984A09CB8167E3C36E0E1B0700B10623AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHWOiMIHAhMbkXpN_bI3S8NlVYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 04:00:12 +0000
Manifest this update: Sun 27 Jul 2025 04:00:12 +0000
Manifest next update: Mon 28 Jul 2025 04:00:12 +0000
Files and hashes: 1: SjIkpyQ7a466hqkgdpcQ1k2IFnM.roa (hash: Ka4bOW3Lwex81O0FRlMpa0sWUNlOOrrrXHeIztmbIBM=)
2: sHWOiMIHAhMbkXpN_bI3S8NlVYc.crl (hash: p+NEole7cfxxURhnQ1bkGKDxtT2+T9JrjHNZ6ZQCzW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sHWOiMIHAhMbkXpN_bI3S8NlVYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:cb:81:67:e3:c3:6e:0e:1b:07:00:b1:06:23:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0758e88c20702131b917a4dfdb2374bc3655587
Validity
Not Before: Jul 27 04:00:12 2025 GMT
Not After : Jul 28 04:00:12 2025 GMT
Subject: CN=9b53e4802d7629b9e7d554f27b88726f531e9c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:76:0f:05:84:c4:97:36:d5:6d:00:1f:2f:
3e:dd:57:2f:c7:de:e4:a9:10:d1:54:5c:b1:15:2d:
5d:7e:44:a2:8d:4d:0c:79:56:b3:70:cf:39:32:25:
1c:50:04:b0:c3:70:72:33:5e:0a:93:ce:85:d4:0d:
81:7b:d8:d8:f4:ca:c4:14:83:10:69:52:e1:57:a5:
81:0a:71:53:8e:80:f8:29:49:06:5f:7a:5b:77:97:
80:a0:b9:30:7f:57:1b:17:d9:96:e1:5c:a4:b6:b3:
fe:df:05:ff:5a:af:15:dc:dc:00:d2:b3:a2:99:e9:
f3:63:d3:d6:ad:57:dc:6f:4c:d6:ae:b2:60:c2:65:
31:05:ee:87:37:da:70:07:86:d9:b5:45:97:53:aa:
47:e5:10:6d:95:27:c9:f5:1c:56:59:1b:36:60:41:
b5:21:4b:03:31:b3:7d:8c:ab:90:63:19:7d:ff:e4:
08:a3:5d:3a:91:4b:d4:03:1b:20:c9:b1:bb:8b:5d:
5b:77:de:4e:54:e9:2e:8e:9c:95:80:e0:55:de:07:
3a:cf:df:06:8c:da:ee:9a:29:b6:7a:4c:52:37:9a:
1e:82:c7:da:38:83:ac:15:e8:a2:f0:6e:c3:8a:8e:
0f:ac:26:5c:18:7a:d7:64:c6:bd:7e:e9:e2:84:88:
00:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:53:E4:80:2D:76:29:B9:E7:D5:54:F2:7B:88:72:6F:53:1E:9C:91
X509v3 Authority Key Identifier:
keyid:B0:75:8E:88:C2:07:02:13:1B:91:7A:4D:FD:B2:37:4B:C3:65:55:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHWOiMIHAhMbkXpN_bI3S8NlVYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:84:aa:42:b7:2a:c5:db:a9:d2:a4:cc:be:73:41:2c:85:35:
5e:c7:fc:fd:b2:0b:e7:fc:e4:73:ff:44:2c:22:28:5e:8c:d8:
9d:5a:de:af:7a:ac:4d:3c:d2:e8:61:e0:81:13:76:92:e8:d3:
55:cf:16:03:3a:89:4b:e3:a0:39:15:81:d3:1d:88:24:83:6d:
82:62:90:2d:99:0c:e1:52:2d:4d:a3:1a:b5:c4:8a:c7:7b:15:
03:a7:a9:d1:3e:28:2b:9e:66:71:aa:af:c1:74:bc:07:ff:d8:
98:06:9b:4c:29:ac:fa:c5:d8:ca:0b:e8:49:10:10:5e:72:e9:
86:22:67:48:3a:c5:d5:ea:48:72:48:e1:2d:05:5f:cd:d6:4b:
d1:6f:5d:ec:23:2a:c6:98:28:7a:9b:e2:a9:1a:49:c8:0c:1a:
23:b1:d2:42:32:bb:70:a9:c8:dd:a4:aa:ac:b9:d8:fa:06:aa:
35:a2:02:a2:b0:69:2d:39:19:f3:ed:ae:55:94:e7:f1:b6:04:
4f:ef:cd:f1:71:f1:70:14:6e:95:8f:de:f2:67:61:6a:cf:73:
9c:9f:66:87:8e:95:29:e5:db:4e:7e:ed:fd:42:15:4a:92:af:
a7:56:dd:87:a5:ed:44:ac:53:a5:45:ad:34:0c:1c:a6:e9:c5:
40:40:ac:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:37:38 2025 by rpki-client