Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
File: S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft (raw, json)
Hash identifier: iZ6rvM+BNsfRCjQND5vGAxzM27zgaHD9lx0XxFSKaHU=
Subject key identifier: 54:A6:5A:11:B0:DF:F0:53:6A:54:B0:B9:0F:BA:02:95:19:DA:5D:50
Authority key identifier: 4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
Certificate issuer: /CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Certificate serial: 019849D31B7E65A8B273C580EAD763A4DD9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
Manifest number: 160D
Signing time: Sun 27 Jul 2025 03:00:28 +0000
Manifest this update: Sun 27 Jul 2025 03:00:28 +0000
Manifest next update: Mon 28 Jul 2025 03:00:28 +0000
Files and hashes: 1: IMyen03Z3kYW501dGBJKRvVCnYU.roa (hash: iucT9aE10m3DuQgfsaO8fZMDF0JO/83+1ytDh6dNspg=)
2: S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl (hash: olOgtuG5wk4JDBPaA2GB1Nxqcn2/+E+/bQt5n5Kgc24=)
3: _70B8nLCrCvW6ACV30Y-ItPOrFA.roa (hash: cBDWH8z972r2xnPCEsRs0ukVbID+nL6L8yt1uckQ37s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:1b:7e:65:a8:b2:73:c5:80:ea:d7:63:a4:dd:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Validity
Not Before: Jul 27 03:00:28 2025 GMT
Not After : Jul 28 03:00:28 2025 GMT
Subject: CN=54a65a11b0dff0536a54b0b90fba029519da5d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:31:35:85:50:e1:0e:09:d4:1a:5c:a3:b6:
b3:66:5d:ab:9d:ec:b5:89:21:da:6d:7d:73:3b:3a:
da:1d:50:0c:75:d8:4f:df:9c:b4:83:8e:8f:2f:f6:
23:b5:65:c6:a9:d5:e5:84:0d:7e:f0:fd:68:06:75:
22:c0:40:f4:08:4c:56:72:17:a7:18:ff:bd:56:d9:
79:bd:41:5a:61:1b:a0:c7:41:fa:a7:3c:ea:2b:30:
f9:19:ce:a5:77:f7:22:f1:32:36:dd:f1:69:43:aa:
54:94:f2:ee:e4:80:70:6d:05:d4:a9:ca:5c:83:4e:
22:0b:ed:dc:e3:cb:20:e5:c2:a0:53:8f:48:f2:51:
cf:6a:f6:c8:21:30:a3:0e:5f:b8:9f:3f:d6:d4:9b:
54:cd:7c:c9:4b:60:98:2a:ac:cb:ed:dd:24:85:88:
43:32:c2:2b:73:8b:81:e9:0f:65:6f:c4:75:fe:81:
5d:88:22:5a:04:7c:21:68:d7:a8:1c:74:91:73:bf:
8a:b5:6c:ce:bf:19:2f:36:4b:61:c0:26:eb:43:27:
c7:80:f2:2a:cf:aa:be:b7:82:06:32:08:fd:2d:ea:
94:8b:fd:00:b6:52:ee:0d:c7:fd:e4:8a:f2:5f:9e:
38:ae:aa:44:84:e7:ec:da:88:bd:a3:98:54:30:40:
87:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A6:5A:11:B0:DF:F0:53:6A:54:B0:B9:0F:BA:02:95:19:DA:5D:50
X509v3 Authority Key Identifier:
keyid:4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5b:78:92:f4:71:b2:c1:82:32:fa:77:c2:90:7f:e5:fb:e1:
9d:04:47:6d:15:ec:0a:30:cb:d9:eb:48:94:f6:c0:73:98:51:
29:dc:ad:e9:11:8d:c3:3f:09:45:0c:04:15:60:05:c9:f2:b8:
f6:84:bd:f0:3b:77:8e:a7:54:2c:b4:b7:29:2e:de:ae:bf:4b:
05:39:59:96:7c:55:30:9d:7c:00:50:0f:bb:d2:b0:ff:92:a3:
9b:0f:6e:24:a0:3f:1b:86:ab:c7:1b:7a:fc:6e:09:06:dd:51:
27:c2:33:0f:e5:48:f9:93:31:52:8d:7d:b7:7f:bd:e4:7e:aa:
8e:0c:30:3f:ba:0a:1b:6a:44:50:e0:a7:64:66:22:7f:dc:e2:
84:b8:7a:a4:b5:ce:eb:ae:bb:17:19:8e:0d:fc:34:0c:d8:83:
18:cc:8c:29:8a:1f:97:6b:d3:d3:56:17:0b:fd:9d:a7:28:be:
56:2a:f5:17:01:a8:8c:60:b0:c3:d3:ee:05:ce:2a:68:d9:41:
4b:9c:77:4a:ef:fe:44:63:fc:bf:e5:c7:29:6e:2f:09:3e:86:
20:1f:02:84:e2:8d:fc:be:f7:51:24:e4:80:b2:c5:77:45:fe:
6e:1e:4d:d1:c5:e3:be:d4:16:db:e6:5f:bd:76:76:a4:e1:12:
c8:dd:c8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:24:43 2025 by rpki-client