Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
File: 43HOIIaAX5EvhRK3nF5mqcn01NI.mft (raw, json)
Hash identifier: 4iIPcUPfstiUVCz0Nt74ViSy9idu+aqyOS0/CNekU/w=
Subject key identifier: 2E:63:1F:FC:2F:89:A8:C1:29:0E:70:4D:72:7D:CC:C4:68:2B:6F:3E
Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
Certificate issuer: /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Certificate serial: 01984B8A7E2D439C25B4C5089C8D81D89A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
Manifest number: 0A5B
Signing time: Sun 27 Jul 2025 11:00:24 +0000
Manifest this update: Sun 27 Jul 2025 11:00:24 +0000
Manifest next update: Mon 28 Jul 2025 11:00:24 +0000
Files and hashes: 1: 43HOIIaAX5EvhRK3nF5mqcn01NI.crl (hash: mUs80MLa+0HqynbjKY9bC0RvzfFqxMfE77tq8JFUI0I=)
2: oNzr7e9N0_nB7NG8uVVH1YFW8SA.roa (hash: E5UVvjB7YIozDhZ03PLtgPckm/pTCCT/ml1aJ8kENsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:7e:2d:43:9c:25:b4:c5:08:9c:8d:81:d8:9a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Validity
Not Before: Jul 27 11:00:24 2025 GMT
Not After : Jul 28 11:00:24 2025 GMT
Subject: CN=2e631ffc2f89a8c1290e704d727dccc4682b6f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:90:f0:70:5e:b9:35:af:ee:9b:aa:63:1a:
33:49:31:f9:5a:a6:a4:75:6f:82:35:27:51:62:cc:
ec:fe:fb:b7:3b:b9:20:aa:a2:b6:55:45:28:d9:bf:
1f:6b:0f:8b:e3:ae:04:0c:cc:66:63:88:16:3e:a1:
f3:f8:19:7f:de:f9:46:27:76:97:e7:60:0a:a1:9a:
52:30:bf:0e:8f:09:ed:e9:17:fe:dd:2c:20:51:b5:
6d:bf:80:26:76:a9:3a:f2:b4:74:a5:52:19:a3:93:
37:f2:9d:c6:d4:a7:e8:09:7c:1c:e6:cf:cf:82:4e:
7c:94:7c:c9:82:cd:fc:26:48:a0:20:52:40:63:2e:
5c:f0:b2:17:51:63:4b:71:82:01:b1:24:63:08:25:
41:2b:d7:8f:5b:2d:3a:17:4a:a9:c9:b9:49:b8:c2:
5b:43:b4:18:af:5d:9d:ef:6f:ca:0b:94:83:52:e7:
0b:c4:07:e1:fe:c1:d6:d4:86:b0:db:48:25:36:28:
f1:6a:29:55:f0:a3:76:59:2a:91:e4:fc:79:ad:a2:
c8:e7:1d:a6:a8:00:9c:c1:18:76:56:56:14:d7:3f:
d1:7a:2d:e4:bf:98:89:11:d3:64:73:02:85:aa:98:
94:00:ec:8d:a1:ec:1b:c7:56:16:dd:47:5a:01:ee:
61:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:63:1F:FC:2F:89:A8:C1:29:0E:70:4D:72:7D:CC:C4:68:2B:6F:3E
X509v3 Authority Key Identifier:
keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:dd:2f:46:e1:ad:03:a5:d2:7b:de:d8:b4:bb:26:b5:a9:44:
42:63:b7:ef:f1:a4:a4:cd:f0:83:f6:cc:54:c3:76:73:db:c1:
88:9b:6f:1d:08:de:27:b8:e0:19:11:ea:8e:5a:b5:94:5e:a3:
37:62:14:36:97:e2:bf:c8:38:47:b1:d4:b5:22:1b:3f:d7:2f:
ea:0f:2b:7d:ca:ad:d7:86:b7:c0:d9:04:ed:e6:3d:1f:64:e2:
db:16:02:4f:a6:5f:23:37:3e:7d:e1:52:da:e7:58:6d:7c:9b:
45:65:ff:0a:da:4a:f5:2b:d8:3f:a6:1a:b7:fd:94:55:02:6e:
2a:b7:48:a9:c4:56:35:f0:00:96:fb:70:d3:70:4f:80:7d:06:
6b:b5:d3:6b:1e:80:a9:a0:60:2e:5e:5b:67:07:dc:90:d0:9d:
22:28:e5:de:37:f1:fe:bc:29:be:f7:39:3e:33:89:29:14:2a:
ff:ae:20:29:fe:5f:98:67:40:da:44:08:70:fc:84:81:f1:78:
46:eb:3d:5e:82:c8:c6:87:b3:5f:e1:76:8a:b0:d2:74:3c:f6:
3a:1c:a3:2b:60:0a:88:6a:b2:8f:f0:3f:52:bb:1c:45:33:bb:
60:98:88:38:94:12:8f:4a:89:d4:75:f4:68:66:55:8d:54:d5:
0c:da:69:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:55:08 2025 by rpki-client