Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
File: raXVKzyodFRXW2W3IO74GiYqXzo.mft (raw, json)
Hash identifier: jyg4DjLKCo2gPuTPaEKZ9VsjEnA42DvTpZ5o4wbXk18=
Subject key identifier: 54:91:44:F0:27:5C:EE:D8:A1:C0:8A:1D:F1:1D:71:50:28:8E:8D:2C
Authority key identifier: AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
Certificate issuer: /CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Certificate serial: 019847E52F09FEC6511CB49F190DEF3FB2A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
Manifest number: 0F3F
Signing time: Sat 26 Jul 2025 18:00:58 +0000
Manifest this update: Sat 26 Jul 2025 18:00:58 +0000
Manifest next update: Sun 27 Jul 2025 18:00:58 +0000
Files and hashes: 1: YkyLNJe8eg5_ZWWXRqgb1FEedCU.roa (hash: yKbeF3cM/odTGzY3J6HPYew0I5seEJaLqL9iFLq9XbY=)
2: raXVKzyodFRXW2W3IO74GiYqXzo.crl (hash: tNYZHEhrLJCCv0lQBwLgDBKG29pLLQ7AInxeMnaSOnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:2f:09:fe:c6:51:1c:b4:9f:19:0d:ef:3f:b2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Validity
Not Before: Jul 26 18:00:58 2025 GMT
Not After : Jul 27 18:00:58 2025 GMT
Subject: CN=549144f0275ceed8a1c08a1df11d7150288e8d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7e:5f:1c:50:36:e3:6d:f2:46:6f:60:0b:bc:
c3:8f:c8:25:43:d2:49:80:3f:12:1c:15:cb:9f:a5:
0f:7a:f4:8a:d2:ec:84:64:30:53:bb:b3:73:88:3c:
94:4e:40:fa:40:95:09:c9:19:e5:4f:a7:34:ba:d9:
5e:df:df:84:75:ac:17:e1:e5:0c:38:1e:36:54:af:
e3:fd:b1:cd:db:4e:be:f4:5d:9e:f1:d6:64:1c:7c:
48:4e:ff:3d:27:2d:22:41:31:94:8d:79:e5:1f:04:
89:1c:f8:30:87:4c:b2:0b:f7:d2:b2:69:9a:0d:f9:
4f:2c:0c:0f:57:42:b5:59:d7:72:a9:ac:bb:fe:6d:
b4:ac:3a:a8:56:13:93:41:46:11:af:6b:c5:ae:b5:
46:fa:4f:5d:84:0b:52:7f:fb:3c:e7:14:b9:9f:fa:
60:4d:5a:68:db:e6:76:31:42:57:81:ba:4e:3f:67:
94:9f:4e:35:09:69:29:5e:4f:7d:c0:87:a0:4a:f1:
b3:6d:ae:1c:71:00:c6:54:36:9a:e6:fe:9e:09:29:
fe:7c:cc:0f:b5:92:00:0f:6b:cd:c2:18:d5:82:10:
39:de:83:d5:79:d7:a6:97:7d:f3:bd:a0:8e:a7:bf:
aa:44:eb:5b:6f:4e:06:8a:d3:62:1d:25:70:b0:aa:
58:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:91:44:F0:27:5C:EE:D8:A1:C0:8A:1D:F1:1D:71:50:28:8E:8D:2C
X509v3 Authority Key Identifier:
keyid:AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:01:f0:f4:27:ec:0a:64:b8:0c:05:81:17:b2:9a:3c:37:dd:
8e:33:3b:21:4e:68:92:7d:b0:87:68:8f:d4:22:5e:47:05:a4:
30:12:c1:a5:b9:ef:ec:3b:49:dd:1b:ef:eb:5b:dc:c4:52:38:
f5:c2:1d:74:88:44:b6:6f:3b:3e:69:17:57:46:23:7b:67:ee:
a9:33:fe:17:a6:2b:1a:57:08:0c:10:b2:53:db:bc:6d:b8:02:
41:ac:7c:8d:c7:78:b2:2b:15:61:62:78:ca:4b:3c:55:c3:fb:
7f:a1:96:b1:5f:c5:98:37:66:8b:cf:22:62:c3:59:be:e0:0c:
8d:5d:2f:ef:f3:05:04:c6:d7:94:0a:14:20:70:28:4b:82:e3:
1b:69:70:ed:ac:fe:48:f1:58:fe:6a:20:7f:b6:65:7a:0b:48:
e1:d8:e0:27:dc:c0:f7:3d:36:f3:27:8f:61:c0:43:5e:47:de:
1c:1c:34:eb:1c:0b:53:70:31:b2:3d:56:b9:b6:cc:f5:95:3a:
72:c7:80:fc:98:55:4b:24:5c:e8:b4:13:76:4f:33:17:a2:0f:
56:88:a5:5b:3a:e8:15:39:c8:2a:b6:58:6c:a1:ac:6b:e3:bd:
57:6f:9f:11:26:99:39:2e:ff:96:7d:99:d0:68:f7:70:3b:d9:
ec:a2:df:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:28:47 2025 by rpki-client