Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
File: SAa55i8bAPLPmNDcxYMpKvrLUi8.mft (raw, json)
Hash identifier: 0R7gvYMucSFwEhwn9qPf1AILWTaQ2Bmz/D934hc13c8=
Subject key identifier: 27:AF:54:A0:37:A9:03:16:62:A8:A0:07:4C:0B:0A:7B:A9:22:3E:92
Authority key identifier: 48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
Certificate issuer: /CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Certificate serial: 01985268583675C9B01ADE7F8FEC088DBF5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
Manifest number: 10C9
Signing time: Mon 28 Jul 2025 19:00:26 +0000
Manifest this update: Mon 28 Jul 2025 19:00:26 +0000
Manifest next update: Tue 29 Jul 2025 19:00:26 +0000
Files and hashes: 1: SAa55i8bAPLPmNDcxYMpKvrLUi8.crl (hash: 23noRxWpzwWIvyXsHYItlbhPFgAi9jpGvRjnwFdtEYY=)
2: bOFB3LalOSOdSrbz-a4cUkkG03M.roa (hash: SZa6u36skxx1rALcmnxtRi0278XWZ89tCnch5FRpzoM=)
3: ipcAqlbQdh9QjilJG8UTA6cw-zw.roa (hash: RUMHng+Xlo2Ru6wmJaBAotc3mLSEqq30G4I26Jr98jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:58:36:75:c9:b0:1a:de:7f:8f:ec:08:8d:bf:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Validity
Not Before: Jul 28 19:00:26 2025 GMT
Not After : Jul 29 19:00:26 2025 GMT
Subject: CN=27af54a037a9031662a8a0074c0b0a7ba9223e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9e:e8:dd:2c:fe:72:d8:79:c5:c2:83:e8:b1:
ca:e9:00:60:e6:f2:dc:c2:68:54:62:d2:de:6b:94:
5a:38:ae:2e:c9:94:2e:ed:10:23:9a:92:de:da:6f:
5d:0a:41:f2:3a:7a:72:c0:66:b5:8f:59:2b:e1:b9:
61:5f:5a:d2:d5:bb:d7:95:0f:0a:0b:19:cc:71:76:
cb:96:08:4d:68:5c:ff:2a:b1:22:3f:7b:3f:fe:10:
ce:a8:65:71:b8:ec:4e:29:c4:24:8c:0a:e3:52:e8:
89:51:ca:23:12:cb:d4:00:02:70:09:0f:90:85:37:
a7:7a:f6:4d:c2:c6:1b:7b:55:7f:45:46:1e:73:71:
6d:63:ea:ed:7b:8b:72:7b:32:31:eb:81:0f:47:69:
d7:89:39:64:33:14:fd:7f:ce:08:85:45:26:c2:36:
cf:a5:55:5f:c4:57:0c:34:4d:9e:9a:2e:25:db:bd:
2c:a1:9a:cb:10:a1:7c:57:bc:be:9a:1f:c4:d8:c2:
03:f8:cf:46:08:66:b5:29:0c:3e:08:94:64:d5:77:
9d:15:ae:fa:a8:e0:64:27:a8:25:c5:92:9a:18:39:
22:10:f7:b0:68:77:b7:ff:af:8d:f9:0c:d1:c8:dc:
54:eb:7c:ee:47:93:d7:f4:6f:8a:d4:24:74:a6:c2:
d9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AF:54:A0:37:A9:03:16:62:A8:A0:07:4C:0B:0A:7B:A9:22:3E:92
X509v3 Authority Key Identifier:
keyid:48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:71:e6:56:33:48:b3:30:d4:96:fb:bf:30:a0:8e:3a:72:52:
b0:f1:09:72:78:67:57:49:b3:26:89:2c:44:20:9c:07:e5:5d:
6a:a7:e2:f3:bd:04:62:18:76:43:82:d6:da:2a:29:ce:b5:36:
9c:0e:54:c6:79:95:ee:99:b8:d9:80:e8:3d:f4:90:eb:dc:47:
4d:f7:84:89:ba:4f:9f:ad:3f:0c:d2:80:ed:95:38:de:84:1b:
50:32:1d:85:de:5f:15:3d:2d:ac:d8:cb:95:7d:77:07:f2:99:
2a:09:c5:3c:73:f8:32:e0:5c:78:44:d4:b3:8a:d3:a7:9d:cd:
9d:10:68:5f:75:99:da:e1:8b:d9:cc:8a:10:68:cd:14:b6:13:
13:54:81:b6:a0:84:3a:ed:c1:8c:c3:4d:69:9a:41:2d:b5:7b:
2b:41:ff:cc:59:96:63:8c:cb:82:a8:a8:82:ad:31:26:3f:31:
1e:67:9c:71:5d:8d:cb:e4:f8:0c:99:31:d8:9f:f3:21:e3:a5:
81:9f:0d:64:44:8b:cf:5f:64:31:a5:d1:e0:d7:71:e7:48:4c:
09:70:03:fc:3b:8e:6e:1b:ec:84:12:68:13:76:0d:9b:49:74:
4b:36:a5:05:9e:ab:ef:33:e9:e2:4d:84:f3:36:24:e7:94:7c:
5f:b9:a8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:38:37 2025 by rpki-client