Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
File: sKEzNsOO66EMusnCjK8e_PRKyGM.mft (raw, json)
Hash identifier: yslItXv5gUOUZvu5w8FU4fYTNPs04qvbIB0steeN/3c=
Subject key identifier: EA:44:B7:15:90:5C:33:D8:EE:8B:BD:95:5D:71:0B:C3:0D:95:8C:55
Authority key identifier: B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
Certificate issuer: /CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Certificate serial: 019848C0E81D4549BBE695A85809F01A259E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
Manifest number: 08CA
Signing time: Sat 26 Jul 2025 22:00:58 +0000
Manifest this update: Sat 26 Jul 2025 22:00:58 +0000
Manifest next update: Sun 27 Jul 2025 22:00:58 +0000
Files and hashes: 1: sKEzNsOO66EMusnCjK8e_PRKyGM.crl (hash: XWQHyWoRSoXBeWCmbedLy77X4xqxgflxKennzQkWg2c=)
2: y3LlHCcHKFo-BQ_p86jxyc013sQ.roa (hash: 70W6ragDKntXJcQVl89iuaUr+4h8ye/EbsXthKhbWqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:e8:1d:45:49:bb:e6:95:a8:58:09:f0:1a:25:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Validity
Not Before: Jul 26 22:00:58 2025 GMT
Not After : Jul 27 22:00:58 2025 GMT
Subject: CN=ea44b715905c33d8ee8bbd955d710bc30d958c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:a0:d2:4f:a7:1a:c8:0b:b2:c9:d1:9d:03:
e1:06:2b:3a:de:1b:11:00:63:fc:dc:e2:5d:6a:36:
8c:54:61:8d:02:4d:5f:c0:87:e1:82:aa:82:47:2b:
00:a0:44:ac:42:e4:32:e4:79:54:29:c2:85:29:b2:
ee:2d:1a:0c:42:c1:03:4d:15:0b:bc:81:f6:57:e9:
1c:90:cb:2b:7d:b4:b5:02:ea:00:bc:69:36:8f:ee:
fe:ec:38:48:3f:ca:04:e9:aa:d9:97:67:14:f4:f9:
86:e7:ff:4b:d0:f5:cd:2e:9a:22:d3:6e:50:2d:fa:
88:3f:f2:7e:a9:3a:a5:e1:8a:92:d8:d3:7c:16:33:
92:24:86:92:75:37:63:23:db:4d:1d:20:cc:9c:e0:
89:67:9b:12:8f:8a:18:3a:34:c4:fa:e0:cd:45:9b:
e6:4b:22:0a:4f:b8:ca:e2:15:93:e0:4d:b9:23:0e:
c6:a0:1c:9b:ff:40:8c:fa:93:78:f3:6b:c5:55:13:
f7:13:bd:5a:d1:ef:39:72:ac:84:73:e5:e1:dc:22:
93:f7:52:63:92:ab:e4:51:e9:fb:0c:df:6d:f3:e5:
c6:cb:2d:98:64:63:ff:0f:21:67:45:fa:49:21:8e:
f1:5b:29:1e:be:db:12:41:97:d1:a0:90:eb:49:cd:
03:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:44:B7:15:90:5C:33:D8:EE:8B:BD:95:5D:71:0B:C3:0D:95:8C:55
X509v3 Authority Key Identifier:
keyid:B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:12:73:07:70:8c:0c:eb:58:78:a4:3b:0b:b7:75:52:20:df:
f3:85:0b:7c:fb:11:c0:ae:02:64:a4:0b:fb:13:d3:53:c4:ff:
8e:a8:dd:98:d8:83:ec:e7:f3:0e:39:6b:12:87:a8:05:eb:68:
98:c3:e3:60:81:1e:c1:da:8d:23:ba:fe:df:a2:36:13:d2:7e:
ec:a3:41:60:d8:38:c9:7a:3d:0a:ad:94:84:1f:1f:bd:83:c1:
01:d7:09:be:f8:85:a0:1c:42:b3:bd:4b:21:cb:91:25:81:6d:
c4:65:ba:3a:44:a3:1d:e4:a5:12:1b:4b:75:13:59:e2:48:3c:
8f:90:a1:49:9c:5d:57:90:84:e9:9b:20:fe:4a:a8:73:3a:2c:
cf:91:45:be:5e:4c:de:f3:1e:d3:3e:49:cc:77:81:52:ba:d5:
a0:8b:03:38:54:65:01:27:1a:d2:88:85:f4:7c:9e:01:f3:ef:
96:a2:78:58:08:42:78:c5:55:db:5d:65:ca:92:03:09:c8:be:
1b:1c:c5:0c:e6:4f:0a:01:b4:8a:c1:ef:db:9c:d2:02:3a:fd:
3a:f3:dd:7c:87:e1:52:3d:8c:6b:76:33:2a:3c:5e:f8:b5:92:
34:d8:f1:6d:85:22:19:4d:a9:13:62:17:fb:a2:77:a1:ce:90:
d7:b4:08:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:57:34 2025 by rpki-client