Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
File: sXtEkEx2lKVAig0pcsOf8LGwPqU.mft (raw, json)
Hash identifier: ex5S2COOplt2kQyanlfu4tK33QUmAIDuhjm0bVxLAGA=
Subject key identifier: E4:1B:1B:09:AC:BD:7C:72:C9:50:64:9B:48:FD:00:92:97:41:80:C5
Authority key identifier: B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
Certificate issuer: /CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Certificate serial: 019849D352013BE31C7CF417DC45F3C90A07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
Manifest number: 0E4B
Signing time: Sun 27 Jul 2025 03:00:42 +0000
Manifest this update: Sun 27 Jul 2025 03:00:42 +0000
Manifest next update: Mon 28 Jul 2025 03:00:42 +0000
Files and hashes: 1: UDhX8BuvHOYMS5e9vYOFjWjGBYk.roa (hash: C1cyztzqKdd1lIZCQFArU9xrG3gU6hCt1VPEU5YkilM=)
2: sXtEkEx2lKVAig0pcsOf8LGwPqU.crl (hash: R0na6WtYwZTBPhIBhcQZ+8QtoyrfWbmWGMbmx/Pol6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:52:01:3b:e3:1c:7c:f4:17:dc:45:f3:c9:0a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Validity
Not Before: Jul 27 03:00:42 2025 GMT
Not After : Jul 28 03:00:42 2025 GMT
Subject: CN=e41b1b09acbd7c72c950649b48fd0092974180c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:95:74:14:38:18:5e:d3:ed:c0:db:c1:8c:6f:
23:2f:96:a3:e4:e4:1d:d9:34:0e:ba:93:f1:ea:73:
79:de:77:e6:ad:d8:af:bb:3a:c1:b6:a7:66:29:06:
39:51:a4:21:b8:ed:33:49:9b:c9:94:52:1d:c0:22:
89:e4:60:1e:b4:53:0c:68:f5:f8:6c:45:83:0c:69:
47:1c:68:a7:2d:04:96:9c:0a:53:99:0d:b4:95:53:
6f:0b:24:71:03:13:27:46:5f:eb:38:9a:c0:ad:9c:
88:09:34:e7:e7:64:57:27:5f:44:00:e6:c7:d7:73:
88:02:fc:d2:dd:8e:fe:56:e4:66:96:4a:13:a1:d2:
b3:d4:d5:30:a5:f9:b7:6b:6f:68:7e:7c:91:22:c3:
35:17:1a:a4:ff:f9:a4:3c:74:54:25:b6:44:f3:91:
14:95:e3:be:ff:5d:85:50:61:ae:ce:0f:95:16:df:
16:e4:c2:5a:2b:cc:f9:ee:a1:5d:b0:c4:6c:d4:09:
9b:15:70:8b:d4:e1:44:c9:70:e9:10:c5:06:2b:92:
61:01:1b:e5:41:69:97:f3:f5:15:68:ac:ba:88:9e:
64:14:44:24:ff:b3:cf:71:7d:65:99:84:2b:43:48:
6c:f2:24:7f:e4:25:2a:0b:27:2b:61:91:37:1e:49:
be:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1B:1B:09:AC:BD:7C:72:C9:50:64:9B:48:FD:00:92:97:41:80:C5
X509v3 Authority Key Identifier:
keyid:B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b6:06:c7:ca:a3:70:55:71:73:73:9c:ba:7f:d8:f7:bb:26:
54:ee:93:bb:0c:9c:9e:96:dd:d0:b2:55:cd:e1:df:51:c6:63:
28:d4:42:94:0b:b6:0c:2a:d3:7a:e6:66:90:38:da:b3:1e:75:
45:50:c6:bf:e4:b7:3a:dc:ba:88:70:a1:3a:24:f6:d9:1b:b9:
bd:9a:81:e4:6f:16:89:98:4b:0c:bc:08:ce:d6:b0:d4:0d:2e:
f6:39:d2:1d:3c:49:62:49:01:52:55:bf:5d:ca:90:2c:30:34:
1b:14:94:5d:f1:b6:5b:12:fe:58:bc:3c:2a:21:c6:50:ce:87:
16:07:97:fb:20:45:ca:c0:f8:88:af:10:ac:5c:75:9b:11:b6:
bf:7b:fd:5e:1a:78:4b:fe:fa:e5:42:f4:f8:d1:ae:5f:89:62:
c3:d3:bc:b7:8b:97:12:b1:aa:17:3d:9d:1f:32:84:84:5b:4d:
6f:a3:37:c8:eb:64:59:bd:36:7e:aa:66:32:8a:ae:62:6c:23:
51:a1:b1:fe:df:9f:99:29:24:cb:13:ac:81:05:7a:bb:01:4e:
ce:78:ca:4f:9a:c5:aa:97:aa:5e:53:c2:6f:b4:79:81:d7:78:
ce:9f:e2:39:b3:78:f6:32:da:df:60:f4:c0:63:f4:f2:20:22:
e9:30:ed:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:02:12 2025 by rpki-client