Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
File: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft (raw, json)
Hash identifier: qJMaWI9F39Gv4uKiVXUFsJrRhwSmuliL2g/9eK7OKlU=
Subject key identifier: 36:E7:4F:7C:5E:9A:67:FD:6D:AE:D0:3D:20:14:F6:2D:7C:84:AE:F8
Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
Certificate issuer: /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Certificate serial: 0198481BFA0E95FFA7205BDEAF88F77301E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
Manifest number: 11B6
Signing time: Sat 26 Jul 2025 19:00:49 +0000
Manifest this update: Sat 26 Jul 2025 19:00:49 +0000
Manifest next update: Sun 27 Jul 2025 19:00:49 +0000
Files and hashes: 1: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl (hash: 9TU+8kGtMXs3TKRXWgRq/AjjP/UJRctehanL3uX1nqc=)
2: O7dVmdulXoSGFdWUdpvv3bkJxU8.roa (hash: hmlWALQMbQbIcNvaSImT+aYBz0m3Sm9TMeYp/ubqBkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:fa:0e:95:ff:a7:20:5b:de:af:88:f7:73:01:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Validity
Not Before: Jul 26 19:00:49 2025 GMT
Not After : Jul 27 19:00:49 2025 GMT
Subject: CN=36e74f7c5e9a67fd6daed03d2014f62d7c84aef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:45:67:5a:3e:fa:6d:4a:5a:db:86:2f:21:f2:
bb:30:0d:af:90:13:a5:23:ec:ad:40:3d:64:ec:ab:
6d:cf:ed:9e:74:49:7e:db:42:7c:b5:93:e7:1f:db:
8e:3a:62:84:d5:87:ca:51:ac:df:41:48:54:79:08:
bf:b9:1e:0b:f0:bd:46:5d:bf:01:e2:0c:d3:e5:1b:
5a:77:56:2a:54:ce:64:e0:cc:a7:18:28:50:e8:d3:
c7:27:d9:cd:33:4e:d8:b3:10:39:32:d8:f6:03:4a:
6a:63:c6:f8:a1:1f:04:0f:5d:5a:2b:6f:bf:38:0b:
7b:fa:19:bc:a0:54:c4:9c:7b:c6:3c:6a:24:d7:80:
ba:a1:86:8a:e6:52:44:ff:fe:8b:71:ca:48:96:0d:
c0:13:b6:26:24:b3:40:35:88:01:d0:53:a1:e3:fb:
91:12:ec:3c:d3:06:1c:c6:90:8a:75:c1:a5:6f:03:
7d:c1:52:cd:3f:b8:43:4d:d8:4b:eb:e6:73:1a:22:
45:62:13:29:99:c3:5e:37:9c:d0:2b:5e:2c:23:f5:
46:d2:8d:09:fc:ca:6b:06:79:d8:ea:37:76:76:46:
a1:8c:94:60:66:76:f5:b7:08:f2:11:7b:dc:8d:02:
dd:0c:63:bf:fd:a3:c7:46:9d:4d:41:3c:a3:50:39:
4b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E7:4F:7C:5E:9A:67:FD:6D:AE:D0:3D:20:14:F6:2D:7C:84:AE:F8
X509v3 Authority Key Identifier:
keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c8:9e:36:98:f2:d0:d6:c1:56:38:9f:f6:de:c9:7b:c4:3b:
b3:d7:0b:9b:7b:c4:db:a4:a8:a6:ca:ae:87:e5:f5:91:05:11:
4d:5e:a6:9b:a4:d7:c6:8b:59:2e:2c:8f:a5:04:74:dd:ab:10:
bf:e1:a8:35:48:7c:16:1e:b9:c8:d2:b7:c4:74:c9:30:06:27:
d1:99:27:34:e7:8e:53:dd:29:00:a4:ff:35:47:bf:02:26:69:
17:15:8d:6c:5c:6e:2d:46:36:49:73:f2:41:dd:0b:5a:a1:b2:
3b:10:58:2f:4f:24:02:04:9e:f2:b7:d1:d4:aa:ba:9d:ce:13:
bb:3d:7e:45:91:68:ea:eb:d2:97:2d:da:6d:36:d2:1a:d9:82:
91:d5:a0:4d:8b:ec:26:b8:e1:fd:6e:d4:bc:5b:2b:b4:b8:73:
4f:84:29:60:05:c9:7c:d8:11:28:bc:22:9a:54:d6:3c:c6:ec:
d3:94:06:3d:05:28:bd:0e:a3:58:87:ca:f2:4f:ee:82:05:cb:
14:9d:e1:51:e5:cb:fb:32:00:9d:38:2f:05:df:3f:ae:be:d9:
9a:0a:00:0b:dd:0e:57:83:14:0c:42:96:a2:81:ac:15:01:b1:
ec:88:4a:df:3a:71:c7:0d:5d:40:43:c5:34:21:e9:1f:be:d1:
f5:ed:22:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:33:14 2025 by rpki-client