Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
File: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft (raw, json)
Hash identifier: PNXyaR2b4Q9mdvHPeV4hpmhYVZ95y95NWPXL5cESoDk=
Subject key identifier: CE:E1:6B:88:3F:8F:EA:5A:66:8A:E8:01:4F:C2:E0:08:81:D1:F1:EC
Authority key identifier: D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
Certificate issuer: /CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Certificate serial: 01984B5368EF0F313D717533B779CE02C476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 10:00:13 +0000
Manifest this update: Sun 27 Jul 2025 10:00:13 +0000
Manifest next update: Mon 28 Jul 2025 10:00:13 +0000
Files and hashes: 1: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl (hash: JJ1OiLf4uwjQc2yI0XH4kP0Py3GxpWX0P+ODNkxR40Y=)
2: KzJRm4blhpQ22QWdKYNtwSo9hec.roa (hash: VvdDpNHANgnzHXSd6NFNAPGvygHgdOqLpMuWRNVTc78=)
3: baZe32PKXIeppnY8Yaja4T-a3tY.roa (hash: tWsZkF/TWyoJvpRhiK8XSrqOZGwxm+EMQruE+7kHGHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:68:ef:0f:31:3d:71:75:33:b7:79:ce:02:c4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Validity
Not Before: Jul 27 10:00:13 2025 GMT
Not After : Jul 28 10:00:13 2025 GMT
Subject: CN=cee16b883f8fea5a668ae8014fc2e00881d1f1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:91:d1:c8:1b:be:83:0f:67:8f:79:ac:d7:0c:
1c:b3:b4:01:fe:0c:bb:62:b8:c5:11:1d:86:94:75:
1d:90:ed:8e:d6:69:63:5a:d0:8d:20:f7:73:40:52:
c8:99:46:4c:ed:7b:87:eb:f5:14:c8:67:0c:c6:e1:
87:f2:fe:4c:fe:c5:3b:6b:0d:56:2d:74:56:1b:08:
27:ac:e3:81:e0:1c:82:fe:0c:dc:5e:9c:f9:27:26:
72:06:5b:f7:b9:9a:2d:04:fd:59:b5:74:b5:a2:06:
b2:78:31:6e:a6:7e:9a:d2:2b:42:8e:52:b5:bf:c1:
bf:66:ac:a0:0e:05:78:60:5c:ff:15:5b:bc:32:23:
53:4f:5e:24:1d:90:70:00:6c:a5:07:76:e0:05:d0:
75:ce:05:45:62:8b:4f:01:41:a6:f4:b1:44:75:6c:
34:df:d1:13:3b:65:75:6e:a4:01:3a:da:3f:79:2d:
cb:b9:e6:c8:cc:5b:b2:92:f0:47:ad:1c:08:7b:c7:
3f:7a:de:4a:76:19:27:f3:73:75:d2:c3:82:4d:6d:
f5:92:57:6b:2e:7f:a6:dc:7b:6b:bc:33:72:83:74:
35:0e:6a:8d:43:b7:a3:3b:3a:d9:8a:95:d1:e0:21:
5e:94:f3:88:93:c8:12:5b:34:bf:f1:c3:67:ad:0f:
61:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E1:6B:88:3F:8F:EA:5A:66:8A:E8:01:4F:C2:E0:08:81:D1:F1:EC
X509v3 Authority Key Identifier:
keyid:D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f9:79:2f:ee:31:31:6f:05:21:71:d1:d1:31:c3:cb:25:c5:
8f:d3:7f:51:44:25:6f:2b:d1:12:8c:8d:ba:7f:88:a0:64:06:
e6:60:63:22:ae:74:08:f7:87:ab:4d:b7:87:3a:26:21:7a:85:
8d:cf:be:d1:59:da:8f:f2:34:da:5c:2f:47:d1:ad:cf:66:fb:
63:af:6a:b7:ea:dd:a7:d4:fd:89:69:c2:be:45:3d:29:0e:d8:
b3:40:36:ee:2e:30:f3:49:bd:6a:a0:c9:04:27:cd:95:3b:69:
90:2a:48:99:d2:a9:6f:75:7c:b3:3e:51:16:9b:61:74:b9:c3:
39:75:b2:39:d7:1f:05:da:ca:a0:f0:b8:b6:80:14:b5:e6:00:
7e:e9:96:28:f2:a2:3b:11:eb:3a:72:f4:bd:3b:3c:07:02:20:
d8:ef:86:7c:ea:39:89:8c:98:8d:49:b5:6c:1b:b2:e0:e6:a7:
03:fa:01:64:1f:08:8d:43:8b:bd:06:b8:b5:64:e6:2a:93:91:
ba:cc:ca:87:d2:a9:34:e2:13:fd:e9:57:d1:c7:70:5d:a3:74:
4b:d2:52:69:dd:f5:56:9d:e3:d3:69:fe:54:c9:42:14:25:da:
f4:66:d2:aa:40:a2:fb:bd:11:05:82:17:c5:a1:4f:4d:fb:7a:
9b:e6:65:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:02:40 2025 by rpki-client