
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
File: p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft (raw, json)
Hash identifier: tpy7qdWtp1JhU+rmHiDvf44p4ZiWSmbnISx0k5E2gAY=
Subject key identifier: 22:EA:5F:15:89:94:D2:9F:F8:CF:B3:C8:E9:A1:92:F7:3F:58:7A:E0
Authority key identifier: A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
Certificate issuer: /CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Certificate serial: 019849659881865E5EB0418ECDD3ACDA19B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
Manifest number: 0D63
Signing time: Sun 27 Jul 2025 01:00:51 +0000
Manifest this update: Sun 27 Jul 2025 01:00:51 +0000
Manifest next update: Mon 28 Jul 2025 01:00:51 +0000
Files and hashes: 1: YzYY5Pk4uD_RFCQ6kGkD8Ksosug.roa (hash: JV37Wu2EuvzzpKn9Z7XGUJb+gi9iNJI/YQAjXDOu0ds=)
2: p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl (hash: 7ongKrXvsvnvFJkhzaV9fhrnrhvf8Ea7viw4H0OwS0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:98:81:86:5e:5e:b0:41:8e:cd:d3:ac:da:19:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Validity
Not Before: Jul 27 01:00:51 2025 GMT
Not After : Jul 28 01:00:51 2025 GMT
Subject: CN=22ea5f158994d29ff8cfb3c8e9a192f73f587ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:c4:bd:9a:e2:e4:78:17:02:d6:c5:31:6a:
e2:b6:53:d0:93:7d:a4:1b:f1:8d:78:d6:96:18:04:
a3:f7:80:f0:b2:7c:5e:00:1e:60:29:59:ff:b8:31:
6b:6a:ba:bd:01:fb:df:89:1d:1f:f5:4f:97:39:0d:
39:25:1b:6d:a7:d9:57:7f:30:2a:d9:2f:73:0e:f7:
97:e6:d4:5e:9c:2a:2f:07:b3:e3:58:55:93:9d:ef:
6e:90:73:26:07:1f:a0:a5:6f:aa:6d:89:2d:cf:ea:
68:1c:d9:88:cf:4d:cb:33:c8:08:1a:fc:3f:f1:f0:
59:a7:84:7a:33:52:62:9f:1c:95:3b:f5:b8:d2:9f:
15:3a:5f:8b:bb:c0:ff:f4:1b:8a:08:0e:d3:63:cc:
ac:2a:05:18:e1:9e:be:56:06:0d:b5:7d:2e:a2:15:
f6:68:60:33:cc:6a:b1:68:e9:a0:28:53:53:d1:c6:
8f:42:15:d0:f6:b6:37:9e:7b:0b:81:57:69:04:79:
12:7a:ea:69:a3:97:25:dd:76:53:c8:a0:8a:62:ff:
22:e3:e5:49:0e:27:59:43:07:b5:7f:05:28:6f:35:
33:33:3e:f0:9a:be:c4:3e:3b:8f:55:84:28:3d:3c:
76:08:1c:ee:01:6e:3f:d6:d5:c7:aa:71:ae:28:1f:
cd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EA:5F:15:89:94:D2:9F:F8:CF:B3:C8:E9:A1:92:F7:3F:58:7A:E0
X509v3 Authority Key Identifier:
keyid:A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:13:14:fd:29:48:70:a8:1c:05:a7:11:fb:84:fd:c5:d8:63:
93:c8:1f:b1:2c:12:24:28:a6:76:e0:85:96:15:44:bc:74:e1:
16:be:a7:3b:b4:c6:de:79:44:42:83:61:e6:d7:d9:00:c1:b3:
d3:fd:90:f2:92:42:65:95:c2:47:f1:c2:da:6d:d3:8d:cc:8e:
54:cf:2f:c5:1f:30:76:65:f5:6d:18:b6:c1:6e:cd:c8:65:56:
f6:94:0a:c4:43:d8:fd:c4:ee:b3:f9:23:c3:81:0d:c3:79:79:
3e:08:53:d8:35:a6:61:26:53:b1:e8:3a:47:d8:63:93:be:34:
12:92:02:e7:15:5a:45:5b:35:ce:16:a6:6b:b1:6c:3f:c5:f1:
66:6f:74:b1:0d:60:f6:c3:be:c6:f8:43:66:e7:fc:db:60:79:
1f:bf:82:5f:38:10:43:77:86:de:75:6f:12:8a:aa:07:1b:61:
b1:94:82:bd:e6:90:63:e5:55:f5:3d:ed:98:5a:a3:4f:05:19:
7c:ec:53:01:be:44:86:9f:35:07:cc:f2:a4:fd:7a:65:bc:1d:
16:d6:08:f6:1e:51:0b:82:37:0e:67:58:b8:4a:54:fb:eb:eb:
2e:88:9f:37:94:93:de:c8:d8:bc:93:b8:0d:c6:a6:71:ca:31:
d7:b3:6f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:20:35 2025 by rpki-client