Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
File: 557xnCc97e0ZzvazaDmzzrAe3v0.mft (raw, json)
Hash identifier: gIfyvxtjYhoA94Pdw0GHRSOvQyNEIKmYCd2vy+3eR7g=
Subject key identifier: B1:D1:4A:29:55:B3:A4:E3:77:AA:19:F8:32:EF:96:03:29:E2:96:39
Authority key identifier: E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
Certificate issuer: /CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Certificate serial: 019849662888B934F1B942038B001DB30E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
Manifest number: 0AD2
Signing time: Sun 27 Jul 2025 01:01:28 +0000
Manifest this update: Sun 27 Jul 2025 01:01:28 +0000
Manifest next update: Mon 28 Jul 2025 01:01:28 +0000
Files and hashes: 1: 4T7ohvim9PbetIc4Qlo9d9QA59Y.roa (hash: mTKqtI5PGB6Qq88qvBp2p7P3TnbGVtFteHmcAmCxgPg=)
2: 557xnCc97e0ZzvazaDmzzrAe3v0.crl (hash: 6TuWKzYdd8iRuupS5pYzrzZ3aXzWRuGB8M33emvVk6w=)
3: hoeiky0Yvquu-vh4T1lTnZlhbwc.roa (hash: TG3DycSrjgCYww4lJAKepUSf5xECf8vQNK+sCZjEIS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:28:88:b9:34:f1:b9:42:03:8b:00:1d:b3:0e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Validity
Not Before: Jul 27 01:01:28 2025 GMT
Not After : Jul 28 01:01:28 2025 GMT
Subject: CN=b1d14a2955b3a4e377aa19f832ef960329e29639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:c8:ee:e3:6b:b9:15:d5:06:b1:8b:15:60:
36:ee:79:27:31:3a:97:1c:c3:8a:9a:3f:cb:bd:68:
bf:38:90:49:ab:25:3f:de:82:59:ec:25:60:80:23:
80:ea:05:d5:d7:ce:39:be:00:70:03:9b:4f:ed:ec:
e6:7d:c1:36:3a:f1:cc:ca:e0:fd:c9:cc:3d:18:d0:
de:78:2a:8d:a8:21:a9:b7:f7:cb:6a:14:d3:e7:76:
9f:d6:da:dc:59:8d:84:14:50:35:78:bd:25:b8:79:
7d:03:a2:ca:df:75:68:84:2d:7d:6b:a4:f5:58:d8:
51:c0:25:b6:a2:60:4f:4b:48:9f:6e:1c:6f:0f:a3:
e4:75:b4:17:28:81:8e:a1:a5:58:88:92:50:2d:04:
30:61:f7:a4:74:b2:09:aa:5a:bf:d6:74:2c:1d:97:
12:20:6b:03:7d:62:48:87:0b:1d:99:94:d8:b1:a2:
58:24:45:ae:01:37:cf:75:bf:f0:30:52:03:1e:ed:
45:d1:38:07:55:5f:49:62:a6:79:24:c0:f4:66:1a:
17:55:36:3c:5f:54:b7:1e:44:57:e3:03:be:60:4b:
5d:8f:18:0d:f4:9f:b3:41:db:d1:bb:99:1a:0f:ba:
05:ba:0f:76:4a:4d:33:e2:9a:ab:a4:7e:a3:7a:be:
fb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D1:4A:29:55:B3:A4:E3:77:AA:19:F8:32:EF:96:03:29:E2:96:39
X509v3 Authority Key Identifier:
keyid:E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:7b:ff:98:60:4e:1a:d8:2d:6f:e0:ca:33:27:8a:71:5f:5a:
89:d7:55:66:ed:9a:66:51:63:59:5e:19:32:95:ef:19:80:fc:
3b:36:16:56:74:6b:e3:71:e6:75:1f:28:8c:54:11:d4:bc:f0:
ee:da:ec:c4:7b:8a:09:53:fc:f9:40:2c:b9:ee:63:e4:70:c1:
6f:f6:c6:53:c7:ab:7a:1b:b9:3a:b5:63:32:d0:8a:89:2b:0c:
4f:11:d5:c9:c4:9f:d2:9b:8d:45:bd:b4:24:75:82:09:6b:6a:
35:03:bb:5a:af:33:96:c9:a5:2b:2d:88:f0:10:aa:60:8b:6b:
f2:72:8b:e8:85:2a:97:2b:58:8f:73:92:e0:3f:38:31:d6:35:
8d:38:07:c6:aa:3f:b8:f0:32:f5:b9:9c:ef:b9:72:47:f2:2f:
f5:c7:58:e8:b5:24:b3:83:fc:e9:11:3b:88:6e:bd:e9:49:af:
a8:02:c1:30:45:70:b5:e2:3e:41:73:ff:8b:b8:ea:2b:d0:e2:
76:3a:a0:5d:bc:18:6a:73:a2:8a:ab:89:d3:93:3b:ef:bb:ef:
1c:46:64:c4:a0:5a:ab:e6:d4:06:02:e4:09:7f:69:ae:c8:78:
fe:44:dc:df:e3:d3:4e:13:bc:a0:3e:07:ef:a4:ce:07:6d:db:
a4:e5:98:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:55:56 2025 by rpki-client