Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
File: sDHiyoJMqNVWJAanAhrjwToUJdg.mft (raw, json)
Hash identifier: D2xpjgqWGHq6LHAlAB6IwudkWSA2ToPwdnGemQBgfvA=
Subject key identifier: E9:03:E6:FD:F7:BA:B8:74:7A:04:3C:82:8F:25:00:4A:70:EF:A3:0E
Authority key identifier: B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
Certificate issuer: /CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Certificate serial: 01984287BCBF6FDCF4C4B8164C6203F445AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
Manifest number: 15FB
Signing time: Fri 25 Jul 2025 17:00:48 +0000
Manifest this update: Fri 25 Jul 2025 17:00:48 +0000
Manifest next update: Sat 26 Jul 2025 17:00:48 +0000
Files and hashes: 1: 81hKxEsM-ATIhZx0nVrrb8xV2ZM.roa (hash: WpRdHBqETycwQ96u5D62eZXgBmAeqYPLVw7BxsplSoc=)
2: YJ0hIC0g4jRwPT2ffsWDri3U1BY.roa (hash: aRSOvWay4BgtDjCfPmINM1fcXP7qlHTJkbgxSvqFhJc=)
3: sDHiyoJMqNVWJAanAhrjwToUJdg.crl (hash: ZY+jLb1N4VckmHVS2ge8cNrtPOxO5fPd40az9Uegoxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 16:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:87:bc:bf:6f:dc:f4:c4:b8:16:4c:62:03:f4:45:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Validity
Not Before: Jul 25 17:00:48 2025 GMT
Not After : Jul 26 17:00:48 2025 GMT
Subject: CN=e903e6fdf7bab8747a043c828f25004a70efa30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:37:29:87:b2:da:9b:01:2f:b1:9f:5f:5b:
88:ec:b7:16:a3:38:fd:81:d8:b4:2a:18:7f:ec:2e:
7b:78:83:15:df:9b:60:c7:7e:8d:34:e4:7a:e1:48:
d7:20:27:6e:52:67:5f:b7:15:ea:7a:79:73:8c:b0:
7a:01:50:37:d4:4a:76:da:9a:0b:01:85:4f:f0:f6:
4a:b2:5d:8e:56:78:0c:7e:fa:10:bb:ad:bc:15:97:
39:37:8a:f3:be:05:ac:0f:d4:22:1b:3e:e4:04:36:
5a:91:e2:c5:8a:97:c3:89:4a:2b:84:25:74:78:06:
4c:a2:91:6f:df:50:62:c5:cf:32:4b:fd:b4:48:5c:
85:fe:4e:45:54:74:d6:ca:24:c3:22:46:e8:f5:fc:
34:ed:f2:20:a1:d0:cc:60:99:56:89:1e:05:4d:dc:
aa:44:b6:6a:7f:1a:53:bb:53:a7:e1:b1:45:c9:97:
da:3d:47:16:52:fc:7e:b5:14:bc:85:65:b7:2c:6f:
a9:f2:27:19:13:83:83:72:7e:f0:b3:0e:86:a6:cf:
d1:2b:66:0c:a5:ef:da:fe:17:68:99:d8:29:44:fc:
49:2d:3e:ed:1d:b7:7c:99:20:69:e7:66:10:4f:12:
e2:c8:49:8c:28:b8:45:4f:07:e3:3d:38:39:22:de:
e4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:03:E6:FD:F7:BA:B8:74:7A:04:3C:82:8F:25:00:4A:70:EF:A3:0E
X509v3 Authority Key Identifier:
keyid:B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:17:27:ea:d7:3f:84:98:f5:99:18:2d:88:4a:39:d3:ec:f4:
a6:c3:c1:0d:b8:68:b5:c5:14:86:17:41:2a:b1:76:e4:61:b4:
33:62:1e:57:05:70:e8:c6:58:41:8a:f3:14:b9:87:42:88:a8:
f9:82:9c:2d:f9:49:a6:64:a5:b2:ac:ae:91:a6:86:2c:d1:44:
05:cf:7b:7a:af:ac:2a:ce:23:77:5f:cc:21:86:20:24:6f:8f:
b6:35:4d:c7:32:33:47:73:27:aa:2c:f3:79:90:3b:ca:f9:df:
09:07:0d:83:ae:0a:91:13:c1:b8:fb:7b:04:60:77:d7:78:c8:
82:7d:f6:00:72:03:9a:4a:ea:3b:0c:6e:03:aa:6e:83:e9:15:
f8:59:e2:11:c0:83:1e:7e:9f:4a:da:ba:8f:13:ef:d7:7a:56:
a3:aa:7d:64:bf:b2:8f:80:b7:c8:a3:13:69:7b:cf:28:48:cd:
d2:ef:86:11:24:f9:fe:0a:dc:de:31:c3:5d:68:02:8e:55:10:
2c:bd:5c:9c:fe:8d:7b:b4:f9:85:80:7b:35:f6:24:c6:3c:af:
3c:a6:2e:9c:ee:39:c3:c1:08:f8:60:7c:a3:92:b5:6a:0c:22:
40:c5:30:02:0d:6a:5d:78:8f:a4:d8:f7:6e:7f:62:18:63:fa:
a5:bf:39:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 22:48:39 2025 by rpki-client