Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
File: Srn5ALphi-jnySCWPN91e5BQ5Qk.mft (raw, json)
Hash identifier: D97nV2q3xYg9RYf4SmpyxPG0M6YZTGGdL/+JNQPNRIs=
Subject key identifier: BC:22:A9:0D:11:44:7F:31:23:D9:FF:1A:C4:82:C1:F3:65:6C:95:64
Authority key identifier: 4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09
Certificate issuer: /CN=4ab9f900ba618be8e7c920963cdf757b9050e509
Certificate serial: 01984965BDC76DF7575E1EA2DEEA0235F79E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 01:01:01 +0000
Manifest this update: Sun 27 Jul 2025 01:01:01 +0000
Manifest next update: Mon 28 Jul 2025 01:01:01 +0000
Files and hashes: 1: M8uu5Q0gYtyHXgy-_HaJ3qJtLL8.roa (hash: 8T9tUH90Mj8IcimHEzzVqe1K5DRM0kq6VzTiqUA3vRs=)
2: Srn5ALphi-jnySCWPN91e5BQ5Qk.crl (hash: 2ba18OBMms4ILjGhyqeNA4dAhvDPscFcvdO3xDqkats=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:bd:c7:6d:f7:57:5e:1e:a2:de:ea:02:35:f7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab9f900ba618be8e7c920963cdf757b9050e509
Validity
Not Before: Jul 27 01:01:01 2025 GMT
Not After : Jul 28 01:01:01 2025 GMT
Subject: CN=bc22a90d11447f3123d9ff1ac482c1f3656c9564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:bf:a4:31:b4:2f:e9:ab:82:b1:bb:24:f3:
04:5b:78:9f:6b:48:fd:ee:71:cc:43:46:7a:0d:cb:
f5:a6:6b:a7:87:ee:4a:fd:2a:b5:9b:98:57:e1:df:
f5:9e:4a:23:ad:b3:ae:cd:00:2b:5a:a4:fb:4d:b3:
a2:31:74:c5:46:47:9a:af:37:3c:95:e7:b0:d1:1d:
f8:d9:15:63:f6:7f:26:de:41:8b:cf:39:8c:68:d0:
03:94:79:c0:49:e8:98:57:08:68:c8:1f:08:c8:af:
89:ad:6e:66:91:24:6d:e7:56:c0:86:27:cf:1c:70:
91:a4:aa:cc:52:0d:e8:e0:32:51:bf:71:1a:9d:b8:
76:54:5e:42:87:60:df:e5:d1:72:40:52:30:49:c5:
6a:ea:ec:27:e9:41:c9:c1:e1:57:e0:91:af:68:fc:
86:d3:8c:0f:66:16:b9:4e:b5:8a:ca:fb:22:c1:25:
57:47:9c:66:e1:3a:b4:6b:5c:eb:67:48:d6:b6:54:
f1:28:93:9f:d2:ff:8e:38:ea:a2:0a:32:6b:75:48:
08:9d:b8:b4:fe:78:ac:29:56:6e:6c:52:e3:f1:ab:
b6:e0:28:ed:7e:01:f5:90:5f:9a:db:f2:ca:6f:ea:
03:10:05:f4:29:d3:ec:46:84:6e:19:ad:c0:cf:cc:
c6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:22:A9:0D:11:44:7F:31:23:D9:FF:1A:C4:82:C1:F3:65:6C:95:64
X509v3 Authority Key Identifier:
keyid:4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:15:00:ed:64:43:fb:a7:19:22:d7:fc:c4:17:ab:cc:0f:03:
94:ac:af:98:13:59:e8:d7:42:22:73:ca:8e:ab:78:bb:67:ac:
15:0a:cf:57:04:d1:fb:a8:99:37:b6:95:3b:f8:5d:a9:e6:f8:
4d:42:55:9b:d2:0e:20:01:1b:b5:2a:92:c9:9d:ee:70:1f:91:
21:f3:25:2e:4d:a6:b2:04:90:2e:36:4a:44:f0:76:fc:fc:0e:
36:f6:2a:e2:07:0c:1e:1b:c2:47:6a:79:12:f4:72:02:ae:b4:
36:be:cd:fd:44:e8:86:d5:cb:a1:4b:8f:f4:04:0f:b4:c0:cc:
7b:c9:de:fa:72:d2:5a:5b:bb:d0:1a:68:5d:21:f7:a5:7f:36:
38:64:58:84:73:ef:6d:99:1f:40:fb:5d:40:8c:3a:4b:b3:42:
da:14:2b:e5:8e:bd:88:d7:a4:53:99:fa:41:ca:61:5a:2e:c4:
e8:7c:e1:71:a5:7e:a0:cb:24:9d:77:bb:4f:74:bc:c2:3c:24:
e7:2d:a5:f4:ed:5d:d5:2c:81:18:72:ac:c9:55:4d:34:c7:22:
fe:c0:8b:58:f6:ee:8a:28:01:29:58:25:bb:ed:71:11:c6:ab:
23:d1:c2:15:08:54:ed:7c:f0:99:ff:50:95:4c:4a:ca:e1:77:
c6:cf:16:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:28:44 2025 by rpki-client