Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
File: 5OF-B7BNx2ydbJH6_C1ahALGS44.mft (raw, json)
Hash identifier: I2f0ypdPPvRz8nz845HbwZn4Xkuz0xQwLwj85zeA7G8=
Subject key identifier: 1F:13:0D:E3:D3:21:B9:60:4A:5D:62:6E:FE:26:68:B3:CE:AF:E0:94
Authority key identifier: E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
Certificate issuer: /CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Certificate serial: 01984A77B17B87FFF32804F30AE409F88272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
Manifest number: 138A
Signing time: Sun 27 Jul 2025 06:00:14 +0000
Manifest this update: Sun 27 Jul 2025 06:00:14 +0000
Manifest next update: Mon 28 Jul 2025 06:00:14 +0000
Files and hashes: 1: 5OF-B7BNx2ydbJH6_C1ahALGS44.crl (hash: y7EMmVOL9dmuvROICzmvGhofVZ/zY1Ar0PlKSG+rZLY=)
2: c7QJZpcKw5JtI5FMoVTzm0WUSCk.roa (hash: eFh5B28aZqPEyGFrbmBU9Qj8kztn04oOd68LadOBOHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:b1:7b:87:ff:f3:28:04:f3:0a:e4:09:f8:82:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Validity
Not Before: Jul 27 06:00:14 2025 GMT
Not After : Jul 28 06:00:14 2025 GMT
Subject: CN=1f130de3d321b9604a5d626efe2668b3ceafe094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f3:e0:4f:df:73:26:01:e0:9d:31:90:fe:f9:
5f:9d:10:b3:75:40:5f:4a:5e:b1:7f:9f:75:10:44:
7a:e6:03:fc:b6:1f:5d:5d:06:c0:57:c5:b9:8c:60:
06:8d:b8:79:97:24:6d:c0:17:6d:cb:b5:8c:e2:ea:
eb:70:d6:61:79:be:32:b3:45:3b:8d:c8:57:3a:ba:
9b:2e:f2:59:6b:31:14:6e:94:23:9b:71:55:24:a2:
ba:1e:6b:95:ca:53:b3:fa:d8:72:60:55:bc:24:b1:
43:5a:21:b9:86:18:22:54:ee:ea:e4:9b:65:c8:1e:
ad:99:d7:de:58:16:b6:61:6a:97:dd:3b:1b:5c:45:
23:34:02:08:4c:46:0a:5b:09:01:e1:d9:dd:99:ee:
f5:c3:0c:5c:0f:ce:c9:eb:c5:88:d4:54:b7:da:2c:
6d:d1:9c:42:55:71:f4:89:82:22:70:39:e1:43:47:
53:4d:cf:8a:11:3e:4f:56:3b:23:92:48:04:4a:80:
3d:e8:0f:eb:76:6d:97:93:26:29:3f:c4:a9:7e:91:
3a:62:38:c6:7f:f2:da:e3:be:fb:32:1b:20:b1:bc:
57:7c:b4:87:4c:79:74:21:84:21:d6:a3:d7:4b:7c:
53:ca:27:30:eb:ea:b9:5b:a3:52:47:82:8c:44:77:
d1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:13:0D:E3:D3:21:B9:60:4A:5D:62:6E:FE:26:68:B3:CE:AF:E0:94
X509v3 Authority Key Identifier:
keyid:E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4e:75:52:40:19:d6:42:83:5f:ad:93:2e:16:3c:c9:9a:b6:
f2:5c:71:62:0f:07:36:02:38:7f:b2:d3:98:a8:72:44:f5:f1:
5a:4a:c2:c1:82:81:dd:b2:b3:9d:b3:d4:12:ec:ae:55:9b:fe:
26:77:af:f5:eb:c3:2f:f0:03:ae:94:fe:3d:33:d0:fc:ff:8f:
ed:a4:75:a8:dd:15:00:ed:74:49:8c:74:fe:30:81:73:f1:45:
1a:fd:c4:03:e2:12:5e:66:6a:47:9a:b9:86:7e:7f:ca:44:f0:
38:07:bc:05:f1:67:60:bd:2f:41:9f:7a:24:39:33:22:f0:21:
b3:0e:c3:ea:ab:f6:77:5d:fb:94:6f:f4:ff:05:70:5f:21:a9:
c6:6a:dd:80:4c:88:00:e6:d0:dd:27:4e:7d:f6:51:b8:2b:2e:
e9:30:29:49:b4:ad:01:0f:6f:68:8c:34:80:4c:6a:6f:07:1c:
61:e5:dc:e6:48:d4:56:5a:ca:b2:47:60:9b:de:9c:01:f3:83:
20:25:85:fc:36:af:80:27:64:dd:42:ae:0f:f6:49:7f:94:f3:
be:fa:2e:d1:5c:d5:f5:59:ce:40:eb:18:01:c8:09:8f:ed:a4:
5a:69:d8:3c:25:e3:5a:5a:9c:5f:4a:59:78:75:8a:d4:ea:6f:
1c:b4:5e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:06:03 2025 by rpki-client