Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
File: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft (raw, json)
Hash identifier: Mz07D44vHHHbcmky9rtMOqhR2VVb8uBOD7d2//qy4SA=
Subject key identifier: 4C:4A:18:CE:D1:7F:27:4A:ED:81:12:BF:4F:55:6F:38:02:79:67:F8
Authority key identifier: 47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
Certificate issuer: /CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Certificate serial: 01984663FA714C644AD8C7B9436196F97492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
Manifest number: 0DDA
Signing time: Sat 26 Jul 2025 11:00:13 +0000
Manifest this update: Sat 26 Jul 2025 11:00:13 +0000
Manifest next update: Sun 27 Jul 2025 11:00:13 +0000
Files and hashes: 1: H-v5pinh1r0DqvUuZ4Dpr-LVv9s.roa (hash: MrFKT5HifVb8WtkT0D1HsRfweQopMnxqy5W6wHomHZU=)
2: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl (hash: Zy7dulyZgnseq2fEZkG1DudN//S7KGoCkE6OnjD/2TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:63:fa:71:4c:64:4a:d8:c7:b9:43:61:96:f9:74:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Validity
Not Before: Jul 26 11:00:13 2025 GMT
Not After : Jul 27 11:00:13 2025 GMT
Subject: CN=4c4a18ced17f274aed8112bf4f556f38027967f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:a0:db:84:98:e8:89:72:3a:13:12:31:f8:
56:65:1f:a4:21:fd:e4:d7:93:9f:d4:e6:cc:a5:67:
51:32:99:9c:47:93:a2:4d:06:ec:d7:60:87:1c:59:
c5:6a:0f:51:76:56:ae:b2:6e:27:c2:a8:e2:46:a6:
38:d9:b8:16:eb:22:4a:1f:5e:15:62:85:4f:99:41:
28:a0:a2:e9:d2:2e:44:d6:b8:62:52:42:22:f0:d4:
18:3e:b1:e2:d8:69:b2:55:42:ce:f2:83:cb:28:f3:
c6:11:d7:15:63:31:a3:33:8d:d2:73:41:6d:2e:fc:
6e:fa:73:d4:32:82:df:89:e4:1b:e2:83:46:c6:49:
cf:f7:c9:f7:6d:4d:36:24:69:27:71:89:60:9a:b1:
51:54:ea:3e:74:41:c2:30:f9:0d:dc:4b:c4:12:7c:
be:15:22:b2:ce:04:0c:c3:fe:43:91:fe:20:58:9f:
1d:5e:3e:05:13:fa:82:8c:c2:1b:a4:16:bb:2e:f9:
d2:f3:d1:94:71:4d:09:e1:b3:76:51:63:9e:47:71:
95:7e:22:97:ca:6d:5b:48:a6:d6:be:9c:22:1f:9f:
d5:0c:e3:5c:65:d5:4e:d2:95:fa:bd:f0:a4:71:af:
1e:8a:6b:d5:45:67:74:3f:22:aa:83:24:06:7f:fb:
1b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4A:18:CE:D1:7F:27:4A:ED:81:12:BF:4F:55:6F:38:02:79:67:F8
X509v3 Authority Key Identifier:
keyid:47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:41:6b:7f:96:2a:51:eb:6c:d6:e0:bc:32:53:c1:ae:41:39:
ce:a4:b4:72:76:a2:a1:db:53:00:ec:18:1c:12:99:20:f7:88:
83:1c:79:01:8d:ae:d3:3f:5f:50:d4:89:6e:ee:25:4e:3f:b4:
24:88:d4:2e:0c:15:cf:6c:6d:95:97:fd:77:a8:64:48:98:1d:
c3:6a:25:52:9f:d9:99:8b:f3:6a:6d:82:3f:a0:44:3b:76:82:
4a:bd:55:19:31:52:fb:6d:d2:e2:8f:d5:09:4d:d0:d1:5b:3b:
da:3c:54:3d:23:e2:b5:b7:86:7f:e4:58:f0:a9:c9:5a:10:b6:
f6:b9:b0:80:77:01:9d:34:c7:ac:4b:34:90:4d:8b:f2:34:2c:
49:00:3e:a0:ec:6a:a2:63:27:1a:a0:12:67:1a:87:20:6f:76:
d8:3b:58:b4:a4:ee:72:08:d4:c2:d2:ce:9a:89:f2:8a:79:d8:
09:7f:f1:15:51:1d:6b:05:be:6a:f2:a3:1f:0c:f4:c1:da:c0:
a0:b6:fd:0b:72:68:df:45:a3:34:67:17:76:f6:94:fc:e1:fb:
89:4b:c9:25:22:15:5c:81:76:5f:aa:f4:e1:46:5b:b7:0c:c1:
86:c9:69:36:e9:dd:56:66:cb:46:ea:5c:c2:34:9f:73:db:66:
de:33:46:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:36:07 2025 by rpki-client