Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
File: rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft (raw, json)
Hash identifier: glwSM0kowl75DN3L7nkuQpLXrbC892gr7RG3WJAHK2E=
Subject key identifier: 6B:EE:13:04:62:4B:45:A3:47:89:67:61:12:7B:FB:B8:76:C1:DA:B9
Authority key identifier: AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
Certificate issuer: /CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
Certificate serial: 01984EC27194E55B30ED51FC34A03D60A711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
Manifest number: 1604
Signing time: Mon 28 Jul 2025 02:00:22 +0000
Manifest this update: Mon 28 Jul 2025 02:00:22 +0000
Manifest next update: Tue 29 Jul 2025 02:00:22 +0000
Files and hashes: 1: 7oGA-c6QRj7wEtUqcKNVQeiPaKA.roa (hash: MiRDhCNZZYXqTOB7AxjOweIsafby8dLcnJ/tR0Eay+E=)
2: rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl (hash: o41Gh5mb0M80jbr4IO03WAzgN8NzitaQkak7deLQfdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:c2:71:94:e5:5b:30:ed:51:fc:34:a0:3d:60:a7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
Validity
Not Before: Jul 28 02:00:22 2025 GMT
Not After : Jul 29 02:00:22 2025 GMT
Subject: CN=6bee1304624b45a347896761127bfbb876c1dab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a9:19:7d:d5:57:f2:ab:89:87:cb:5f:f9:58:
05:7a:a7:d1:82:b0:76:bb:76:54:25:13:51:16:35:
99:6c:ad:c7:c6:1f:c9:b2:45:66:32:b5:b2:3f:6e:
b1:eb:05:b3:d8:eb:c0:40:1e:98:23:00:14:96:12:
7d:e8:99:1b:f7:a9:2e:e5:7c:33:0e:69:e8:84:09:
94:31:fa:99:16:88:24:7b:6b:4c:5c:35:c2:bc:c1:
82:51:a4:bc:44:bb:83:d7:07:10:0b:1e:44:7a:74:
68:9c:63:6f:99:1a:4f:9f:a3:02:6d:4f:1f:6b:f1:
d7:7b:a8:ea:09:96:2c:df:19:37:cc:e6:e4:e8:22:
a2:d2:9d:0f:08:ce:64:05:f9:88:cd:c0:8a:e5:97:
a7:aa:9d:50:ce:18:d3:45:e7:ce:0f:a4:0d:ff:8e:
c1:a9:54:9d:bf:2a:32:4e:5b:fb:11:37:46:95:fc:
1d:d9:e0:32:39:3b:63:01:d6:7a:40:b7:83:30:d4:
5e:03:69:b9:fc:98:09:95:ef:04:b1:eb:97:a9:a1:
e6:3c:36:17:8f:ed:24:00:e7:2d:4b:b6:54:f9:c4:
8c:5a:66:8b:5a:3b:fc:c6:e4:6d:fe:6e:58:19:75:
19:35:1f:da:99:37:66:7d:cc:d4:74:47:7a:8e:18:
ab:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EE:13:04:62:4B:45:A3:47:89:67:61:12:7B:FB:B8:76:C1:DA:B9
X509v3 Authority Key Identifier:
keyid:AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e9:fc:e6:17:05:50:e7:3b:bd:3b:55:56:41:de:b7:05:90:
d0:1b:ff:cf:4e:5c:ed:c8:74:db:99:46:3e:1d:11:b0:50:51:
98:ae:d9:10:f2:e1:76:5c:89:2c:6e:cb:e8:cd:79:a5:24:2f:
15:b9:a9:9f:b4:51:8a:83:c6:de:fe:f3:35:a6:13:ea:fe:58:
5b:43:db:af:47:40:b1:07:f4:e3:fd:03:fc:85:1d:b2:64:fa:
e4:bd:d4:3e:da:29:d4:7d:e3:cf:1e:c4:97:42:c6:57:78:9d:
05:23:d5:ac:78:00:eb:6b:b8:46:94:48:a6:a3:1b:b0:b0:6f:
59:ad:03:01:8d:78:2c:87:f0:d6:85:d4:c6:23:32:19:36:fd:
e7:72:87:1f:f0:73:1e:fe:ba:37:d1:3d:61:69:6f:67:e9:a3:
5f:da:c0:b2:87:db:17:13:81:01:8e:d4:fb:30:55:64:24:5e:
9a:bd:b9:ee:a4:50:f7:14:31:db:a8:e1:1b:7f:a2:8d:77:27:
78:d2:8a:42:9b:78:51:41:dc:84:9f:33:53:da:b8:fd:c5:c4:
a4:4e:db:d8:97:6a:79:71:3d:50:1b:b5:85:b0:e2:12:87:95:
8b:6d:63:a9:65:bd:e2:08:62:81:95:ea:43:62:e4:cf:2b:c5:
a0:0e:6a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 08:10:09 2025 by rpki-client