Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
File: srQdL319OFfgdfKk8vnT4ETy5TY.mft (raw, json)
Hash identifier: E4PXqfV5/9txW2/KiQn1hPnaHJR0GU2ZExRkFNiCmQ4=
Subject key identifier: CD:CB:A2:80:1B:99:6B:F9:2C:16:C2:9A:7C:53:18:DB:3B:0B:8B:73
Authority key identifier: B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36
Certificate issuer: /CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
Certificate serial: 0198499C69C5CDC07B7E2DF780F3806600F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
Manifest number: 05F6
Signing time: Sun 27 Jul 2025 02:00:44 +0000
Manifest this update: Sun 27 Jul 2025 02:00:44 +0000
Manifest next update: Mon 28 Jul 2025 02:00:44 +0000
Files and hashes: 1: Ypuf3qV0JE2AXfUrk2eNRiGtQN0.roa (hash: AxG4SgT0VS5arc9FHux7pFhrFyFYGK0/0AgX9zPeSBE=)
2: srQdL319OFfgdfKk8vnT4ETy5TY.crl (hash: Shi9ik2TXJVp/q+mgD2SHXfufXv4/pAv/Je4TUBEovI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:69:c5:cd:c0:7b:7e:2d:f7:80:f3:80:66:00:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
Validity
Not Before: Jul 27 02:00:44 2025 GMT
Not After : Jul 28 02:00:44 2025 GMT
Subject: CN=cdcba2801b996bf92c16c29a7c5318db3b0b8b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3e:6b:52:9b:82:39:83:c4:0f:5e:77:11:f3:
9d:90:f5:6c:ea:4a:d5:53:35:29:54:c6:17:93:99:
32:8c:4e:fd:9a:0e:e5:91:e4:0e:43:46:1c:e9:dd:
bd:e9:77:25:a9:c6:09:3f:31:e0:94:39:97:c3:31:
37:cc:25:64:50:7d:7d:14:24:a5:d2:a7:b3:27:29:
b7:63:25:b2:6e:ca:ff:05:67:04:7a:69:29:49:d3:
8d:e7:a4:77:29:71:6f:49:f0:f1:58:f7:98:88:31:
1a:dd:3a:73:7a:2d:07:e1:a1:15:87:2d:ca:47:d2:
78:f2:83:cb:57:f6:4a:17:39:51:ca:5b:05:ec:bc:
45:17:14:93:5f:29:a9:ba:09:48:8d:d3:91:40:5b:
e7:82:e3:b1:10:8a:96:86:d4:fc:fa:fa:ad:d9:4b:
50:1b:6e:92:e2:e1:b6:96:ee:a0:77:c1:b5:b4:d9:
2c:d5:98:c0:79:fa:d3:12:72:5f:7d:74:68:88:91:
3d:2b:a5:33:9c:29:59:5e:1a:03:f1:6b:12:5e:2e:
a2:dc:cf:38:3a:63:20:dd:89:95:69:5d:8b:c1:b3:
4c:c5:af:a3:a1:46:c0:cb:c7:d0:56:2f:14:e2:2d:
e9:c3:a5:12:75:cb:0a:a2:f6:2a:8c:a7:0c:7f:e1:
ac:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CB:A2:80:1B:99:6B:F9:2C:16:C2:9A:7C:53:18:DB:3B:0B:8B:73
X509v3 Authority Key Identifier:
keyid:B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a7:36:45:46:88:a1:a7:a3:36:f5:d8:35:24:5a:de:fb:b5:
92:13:f3:79:ec:63:83:36:55:50:d4:13:be:4b:0f:09:ff:25:
00:de:b2:51:84:c5:a0:db:f0:a2:1e:3b:95:4b:f1:7e:28:29:
df:01:d0:d1:07:6d:46:7e:22:b1:da:13:bc:28:b4:39:1a:ce:
37:59:65:f4:11:f4:18:b0:5a:07:2e:68:30:53:db:ec:4e:a1:
14:37:f2:68:04:f8:fd:68:13:d6:50:af:2f:5e:29:d2:c9:cc:
c6:4a:3b:ed:1b:8a:a1:12:4d:47:4d:ab:fa:7a:78:e2:ab:e5:
a1:22:46:0d:38:76:a8:86:82:23:4f:a3:c2:b4:ea:46:5a:c3:
ce:78:6e:4d:fc:65:d8:8c:8a:2f:c0:47:a8:30:4c:a3:6c:63:
c4:97:45:79:0d:ad:8a:6e:8c:db:e7:10:37:8b:67:f6:0d:24:
8b:6c:fc:17:72:a5:29:75:e9:5d:24:c6:5d:2e:ce:e9:1f:f8:
72:5b:a2:48:00:87:d7:c8:78:20:4e:a3:2f:97:5f:72:3e:b2:
f5:91:e7:fd:4e:02:22:3d:bf:b0:f8:a8:eb:ce:cd:11:31:a6:
b2:08:d8:46:d0:aa:77:9a:72:50:12:c6:69:13:8b:02:c8:88:
c8:cb:4d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:13:17 2025 by rpki-client