Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
File: EXdPipmODyrxj3UnnjJlSBNpRIg.mft (raw, json)
Hash identifier: QXq5m8aRBMm5+sRSIiu7fDPGA1yBvHIjrzqJtxVKhQo=
Subject key identifier: 1D:BC:82:19:C5:E0:E0:20:0C:D6:0D:C0:C3:D5:59:0A:E4:B8:E0:9E
Authority key identifier: 11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
Certificate issuer: /CN=11774f8a998e0f2af18f75279e32654813694488
Certificate serial: 019849D38B0032ECE59A2140F4F55D2D81FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
Manifest number: 0445
Signing time: Sun 27 Jul 2025 03:00:57 +0000
Manifest this update: Sun 27 Jul 2025 03:00:57 +0000
Manifest next update: Mon 28 Jul 2025 03:00:57 +0000
Files and hashes: 1: EXdPipmODyrxj3UnnjJlSBNpRIg.crl (hash: HKnMdsfgBfddE6I9hroDKxqynlaaT6xTgHSk9J/1p8Y=)
2: lEOnyeTSrhVKx1TLByVlPzDKz8w.roa (hash: n8RWZqmzmommBj8oDYR9O53K32j7DKyp4tQyqLf5eY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:8b:00:32:ec:e5:9a:21:40:f4:f5:5d:2d:81:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11774f8a998e0f2af18f75279e32654813694488
Validity
Not Before: Jul 27 03:00:57 2025 GMT
Not After : Jul 28 03:00:57 2025 GMT
Subject: CN=1dbc8219c5e0e0200cd60dc0c3d5590ae4b8e09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:79:ab:96:8e:8e:9d:af:cf:99:e1:8a:61:fe:
23:41:d9:a2:c4:f7:1f:63:b3:1a:85:cb:53:5a:49:
f6:c8:96:93:cb:4f:74:44:ec:d8:c7:cf:0b:ba:77:
be:c2:5c:bf:ed:65:9a:be:e8:38:e1:ad:23:c8:a1:
67:18:ed:f8:a2:4f:fd:86:a7:99:b8:d8:67:6a:5a:
dd:a3:e1:69:d1:9d:8f:80:1e:2f:60:21:7d:e9:79:
cf:6d:45:c7:6d:5b:a8:2a:2c:33:58:0e:32:74:cd:
67:04:5a:96:af:f2:ea:82:84:7c:2f:60:a1:76:d5:
87:c7:1a:eb:51:a4:2d:bd:e7:eb:72:9e:34:7f:d0:
65:92:f9:4a:e2:b9:91:de:72:f6:e8:55:39:eb:14:
18:2d:d2:db:e7:8c:59:ca:eb:e9:e9:3f:c8:cf:9a:
dd:99:35:1f:7f:43:2a:c6:3a:88:cd:e4:a1:27:6f:
69:71:03:81:ec:91:ea:fe:39:ec:bf:65:ba:10:dc:
3c:da:e2:20:a3:68:59:9c:36:bc:a3:ef:ed:d5:0d:
c0:3e:5e:98:e1:b9:ea:5c:f7:cc:6a:16:7c:5c:88:
9b:f9:3c:cd:39:64:9b:66:0a:1c:cb:93:d6:41:b9:
bb:87:20:e4:c6:46:5c:4a:ec:7b:ee:72:09:1f:86:
09:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BC:82:19:C5:E0:E0:20:0C:D6:0D:C0:C3:D5:59:0A:E4:B8:E0:9E
X509v3 Authority Key Identifier:
keyid:11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f2:28:15:c9:53:45:ff:6a:3d:13:95:98:c1:6f:20:83:14:
db:b4:bc:cb:5b:5d:58:0e:10:5b:51:94:74:d3:8e:a8:dd:98:
a4:50:f9:40:29:8b:56:8e:cd:51:1f:50:7d:02:ca:9c:3d:41:
47:8c:97:e4:fd:7b:f5:dc:81:4d:da:12:66:f7:fb:05:ff:fb:
b5:66:3f:63:36:ea:26:1a:d0:88:02:a2:33:03:1d:9a:2e:fb:
d4:dc:2d:2c:bf:3f:f9:cb:52:e3:fc:b7:3c:17:7d:b4:8b:5e:
b5:b6:25:7d:6f:31:c6:89:dd:8a:80:56:54:5d:6b:7b:be:a4:
b2:bc:80:f7:13:49:82:f0:7d:b9:8b:6d:64:45:63:33:36:e2:
05:28:73:72:9b:64:8b:74:5b:68:74:e6:db:ab:29:ca:7c:a2:
a3:83:61:66:7a:fb:3e:24:a2:52:5b:fc:53:b8:87:88:1d:f3:
3c:58:1a:85:52:51:32:b6:4e:a6:0a:cf:50:f1:d0:89:b0:a2:
52:22:18:5a:7d:a6:ea:22:2d:b3:0e:68:8c:3c:12:41:fc:ab:
9f:f1:d1:30:91:df:2e:3d:cb:20:97:ed:96:d0:3d:64:58:15:
c6:58:ba:3d:64:84:13:d4:07:b8:18:3a:9f:63:e1:f7:da:13:
c1:a0:0f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:48:11 2025 by rpki-client