Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
File: RDSBQfxG3AGHCHy8hlVumkSe4ec.mft (raw, json)
Hash identifier: erF+rlukK1L5oIqMBq63vM6aMoMGLtf6F7gGPb+IEpY=
Subject key identifier: 18:4D:8F:D5:D0:CC:46:27:08:C5:BB:82:21:16:1C:12:02:7F:AB:09
Authority key identifier: 44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
Certificate issuer: /CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Certificate serial: 01984708EFC646098748F65877DD6351B7A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 14:00:24 +0000
Manifest this update: Sat 26 Jul 2025 14:00:24 +0000
Manifest next update: Sun 27 Jul 2025 14:00:24 +0000
Files and hashes: 1: HUIjR9WK2Lr5ogt7lVoiyA1Q06s.roa (hash: PMZpn3mSe7dzqUCZsgF/pY1r/L52E+g3ibBHFvHVhL0=)
2: RDSBQfxG3AGHCHy8hlVumkSe4ec.crl (hash: cFocenpSDPD0GYT6lkBMX0JMP0DbmNjdmE3b+yCIX1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:ef:c6:46:09:87:48:f6:58:77:dd:63:51:b7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Validity
Not Before: Jul 26 14:00:24 2025 GMT
Not After : Jul 27 14:00:24 2025 GMT
Subject: CN=184d8fd5d0cc462708c5bb8221161c12027fab09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4e:ca:f9:e1:41:ab:29:a6:86:e0:27:b2:b8:
64:11:9e:41:77:90:76:4f:84:af:0e:b3:16:4f:aa:
36:74:58:d9:ba:58:6a:c0:54:84:46:53:06:e7:98:
ce:db:ed:0a:b7:49:a8:45:5a:44:62:3e:54:1c:87:
39:52:93:b6:15:3d:bc:b8:9c:ec:47:c7:71:c4:eb:
df:83:9d:3a:6d:84:f8:b2:d3:a7:49:b2:af:7d:09:
01:82:00:22:40:85:5d:a9:a2:b1:a2:ff:5c:63:59:
d6:43:46:f6:ff:bd:21:45:e3:84:44:c6:c4:b2:ae:
43:2f:3c:11:b8:c5:d1:29:0c:61:7c:6f:68:c2:39:
93:95:d6:d6:eb:80:ed:f7:11:1e:4b:ff:06:6c:c5:
0e:0b:55:92:ab:ff:a8:8a:ba:0b:96:8a:72:02:6c:
a4:e4:cf:ae:b1:ad:56:79:58:3a:76:96:7a:3d:93:
3f:67:1c:fc:0e:6c:c4:12:8e:a8:dc:54:02:67:b5:
a4:77:8c:32:17:8f:d8:e4:c3:08:05:6f:d1:27:54:
78:fe:d1:bc:e3:6f:9e:ff:2f:c3:52:c0:df:ce:91:
a2:8b:bd:fe:c8:8f:bd:51:f2:9c:4f:b1:f7:2b:f9:
b5:c7:9f:4f:7f:02:f4:92:22:0e:df:d5:4d:90:0c:
47:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4D:8F:D5:D0:CC:46:27:08:C5:BB:82:21:16:1C:12:02:7F:AB:09
X509v3 Authority Key Identifier:
keyid:44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2e:d2:19:14:8e:21:6b:b8:15:a8:01:63:ff:2f:18:8f:6a:
53:95:c9:29:8a:52:9e:e5:cb:b2:81:55:1d:54:be:5c:90:7c:
35:e6:31:b1:9b:ea:8e:6a:c6:4d:a1:18:bf:18:b0:8a:07:44:
d6:09:58:de:87:28:0a:2a:27:93:11:01:c8:45:42:15:20:b9:
41:93:b2:1a:8b:e7:ca:ab:77:72:cf:15:ad:8c:fe:bb:92:0b:
43:42:4f:a6:4e:5b:f1:8f:ac:55:c9:d6:ca:7e:b3:99:b9:b4:
51:58:af:9a:8c:97:78:f1:c3:15:ab:2c:cc:38:61:2f:f2:5d:
b2:aa:cd:9b:77:3d:72:8a:82:c5:92:13:dd:78:7b:94:e0:67:
46:b4:2e:e9:69:29:2e:9a:bf:8e:95:9d:c5:a3:48:96:f9:33:
53:c0:b8:b5:78:06:33:b2:d2:c6:b7:53:75:b5:48:84:87:cc:
58:b8:6f:14:8f:dc:fb:da:39:b1:8c:37:80:8a:14:bc:71:cb:
c5:99:ac:92:02:47:db:d8:ae:50:b3:16:5c:06:05:05:bd:40:
14:80:88:05:88:cc:37:4e:b1:0a:2c:59:da:72:15:20:a5:c5:
b1:39:6e:ef:c7:b1:27:c6:f7:fb:d0:76:b3:2d:4b:a8:6b:4f:
45:73:79:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:27:02 2025 by rpki-client