Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
File: 84BJvoAaE244erwUSY5IYETZYng.mft (raw, json)
Hash identifier: wLyey+Ptt7HXyP2iyXMWuyuDcq43oPhU+E4z8AEo7c4=
Subject key identifier: 6E:27:FF:07:18:F1:13:12:0E:65:62:03:B7:97:29:97:3D:06:F4:51
Authority key identifier: F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
Certificate issuer: /CN=f38049be801a136e387abc14498e486044d96278
Certificate serial: 0198507AE44A26FE5961DA6AE6701EE95425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
Manifest number: 0350
Signing time: Mon 28 Jul 2025 10:01:27 +0000
Manifest this update: Mon 28 Jul 2025 10:01:27 +0000
Manifest next update: Tue 29 Jul 2025 10:01:27 +0000
Files and hashes: 1: 84BJvoAaE244erwUSY5IYETZYng.crl (hash: IPf3Vbpz0qL497yYJkCOYx8VP2MSXMleKxkMFrEOnag=)
2: Iu2chtpqWcHWj5ICMYSAAIfiajQ.roa (hash: V17YrAyWPucLnXshp6FV+qrXZ0uT+XGK95n0G3fUe08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:7a:e4:4a:26:fe:59:61:da:6a:e6:70:1e:e9:54:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38049be801a136e387abc14498e486044d96278
Validity
Not Before: Jul 28 10:01:27 2025 GMT
Not After : Jul 29 10:01:27 2025 GMT
Subject: CN=6e27ff0718f113120e656203b79729973d06f451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:e6:09:86:1c:4c:58:63:5d:a8:c2:7d:89:
3e:e2:f0:4d:d1:9d:c3:71:2f:6b:3a:e0:a9:fe:90:
e6:e3:e9:ec:84:6e:6b:50:08:df:b1:f9:05:e8:e3:
51:9c:a3:58:20:da:e1:d5:fc:e8:24:d3:f0:af:64:
75:9f:5f:fc:9c:fc:86:c9:e8:af:38:ea:de:a4:2c:
f7:55:97:9a:f9:3f:77:2a:24:75:5a:75:ec:94:c5:
06:4a:e3:fc:22:2c:a7:fe:a4:21:b7:0b:9d:90:9a:
9d:fc:81:0f:6d:87:05:5e:10:03:23:b9:56:0d:55:
66:ec:52:33:a6:17:c0:82:4f:2b:ee:f7:3e:15:18:
09:9e:cb:34:77:f7:09:d6:43:d7:53:e9:ff:d9:d8:
82:1b:07:51:51:d3:d4:80:74:10:2b:1b:c9:15:a1:
5d:c4:19:30:da:5c:57:3c:0b:de:62:f1:ff:28:ce:
9c:5b:17:4f:52:06:f0:7d:1e:0c:e4:99:e7:cb:03:
be:75:84:41:ec:27:4d:c2:a2:92:72:20:15:63:0e:
62:6b:2b:78:5e:9c:e1:3b:ee:b9:59:87:18:02:39:
ec:12:f7:54:4a:f8:1e:6c:df:f7:d3:d8:a8:c7:82:
1e:70:92:ac:e8:49:8d:f4:fe:44:b1:1c:86:b7:5a:
8e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:27:FF:07:18:F1:13:12:0E:65:62:03:B7:97:29:97:3D:06:F4:51
X509v3 Authority Key Identifier:
keyid:F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:14:dd:f5:ac:0c:1c:19:fc:c2:d5:1a:43:cb:54:05:f0:86:
50:38:7a:dc:98:79:d7:e6:21:f9:38:bc:08:12:88:57:5b:f7:
bd:bb:2e:ac:4f:ce:0b:c7:3e:c3:70:f2:cd:b3:9e:af:a9:1c:
b8:10:2c:90:23:18:09:9f:53:77:c9:ba:1b:fc:8a:27:21:0c:
09:9a:2a:11:fb:9f:7b:04:ac:64:59:e4:77:06:81:28:09:94:
7e:d4:a4:cc:07:43:34:22:b3:08:0a:1d:4b:9c:46:3b:d5:02:
b3:47:cb:fb:2f:47:a1:fa:b1:7f:75:fa:9d:79:b6:fc:fe:54:
10:06:f7:a2:70:12:09:6f:04:1d:f1:2f:ed:cc:91:c3:e0:c2:
68:74:67:dc:11:f3:4b:a5:a1:04:1f:3c:3d:bc:57:31:bc:fc:
a0:ea:58:fb:69:fa:eb:5c:02:a4:67:ba:9b:13:7e:82:5c:a1:
65:d0:ac:a6:81:49:6e:b6:a1:59:6c:d8:a9:d2:b6:e7:ff:9f:
27:f5:e1:9f:c0:5f:52:6d:66:cc:5d:94:74:dd:39:6b:17:45:
f9:db:7d:a9:8d:77:09:d6:a2:90:dc:86:6a:6c:20:e6:63:da:
90:97:dc:9a:57:8f:72:d6:33:47:19:22:04:0a:c3:5e:be:35:
24:22:3e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 17:36:25 2025 by rpki-client