Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
File: k47pUc2rw86AXsjfC_NAO9-pxlc.mft (raw, json)
Hash identifier: CKC0F5dnAWmxv/E/z3fxQ9qrHfdyaefvU1DG6K2ANjw=
Subject key identifier: B0:49:48:21:EF:0A:21:87:7F:80:6D:44:89:16:6B:81:33:A7:14:FB
Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
Certificate issuer: /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Certificate serial: 01984AE60AAC6200CA15BEACA9E58609B890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 08:00:46 +0000
Manifest this update: Sun 27 Jul 2025 08:00:46 +0000
Manifest next update: Mon 28 Jul 2025 08:00:46 +0000
Files and hashes: 1: O1ywiFiLkq1fR5di5oR2ZQ0O0VU.roa (hash: SE/6ae9nVewYClVlXFv1//+tibHGjvE3o8ZX8Ja08V4=)
2: PHmIlcJAMKaUCf176lVhWz-T4Wc.roa (hash: bNQSW/1JZ77X2TCkKdD1g52s5lNQ368QaQCo0ZhUqTw=)
3: k47pUc2rw86AXsjfC_NAO9-pxlc.crl (hash: Esm1+TNpzH06zvkqJIziyHATnqYuK4DObVRqshyP3XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e6:0a:ac:62:00:ca:15:be:ac:a9:e5:86:09:b8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Validity
Not Before: Jul 27 08:00:46 2025 GMT
Not After : Jul 28 08:00:46 2025 GMT
Subject: CN=b0494821ef0a21877f806d4489166b8133a714fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:39:45:9a:ff:72:4b:25:cc:96:26:e4:77:b2:
84:36:be:01:bd:2f:30:44:67:52:95:c9:af:9f:30:
b0:77:ab:91:09:f0:21:31:ab:81:44:b8:73:91:c6:
63:fe:35:c1:e3:52:56:bd:a0:41:98:41:37:8c:2a:
e8:1d:9e:35:bc:02:2e:df:35:ff:fc:32:be:cf:7d:
64:2e:1a:d8:9d:e9:29:22:c3:6d:c5:65:91:c8:25:
43:4c:24:4e:2b:5c:fe:f5:60:f6:79:ad:07:d2:ce:
e5:be:29:8d:89:76:2e:72:8e:85:b5:fd:c7:93:a0:
92:7f:b0:91:ed:62:cf:b0:7a:fc:e4:e8:5c:b8:00:
7f:86:89:d5:00:4c:30:3f:40:f6:c7:41:8c:ad:ee:
b1:0b:82:6d:8d:fe:2e:3e:9f:22:bc:a9:15:62:d9:
0f:f7:f2:1b:bb:09:aa:cd:86:f2:14:44:e1:7e:11:
24:ec:17:35:5f:8c:5a:9a:43:1b:42:16:b5:bc:c0:
cf:d5:4f:9f:2f:f3:45:a0:50:ca:6d:a8:53:0d:69:
cd:14:11:19:94:90:c6:07:c4:b3:17:30:59:11:f5:
56:09:86:dd:9d:34:ee:e5:cd:9c:a3:7a:81:8d:df:
95:9e:26:74:22:82:24:70:1f:1c:f7:a6:12:47:03:
c5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:49:48:21:EF:0A:21:87:7F:80:6D:44:89:16:6B:81:33:A7:14:FB
X509v3 Authority Key Identifier:
keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d6:d5:d4:22:67:25:41:ad:5b:76:e1:cf:b0:d1:62:41:20:
36:dd:dd:2a:b2:6e:c2:a7:67:10:69:8a:9d:56:8f:36:95:fe:
cb:51:3e:ed:41:60:a6:14:3d:0f:1d:79:8a:1d:ab:21:78:71:
2b:cf:0b:50:07:40:cf:33:61:13:58:44:ee:19:a4:ee:5f:77:
a5:2e:22:97:c3:4f:4d:cb:cf:62:b9:1d:dd:10:f3:38:6e:7d:
45:a4:d3:16:96:d8:6b:6a:59:fa:07:ce:3a:64:24:d5:d6:ef:
19:a6:56:ea:3f:d4:f4:75:aa:f1:a0:29:27:38:01:ca:44:b7:
75:6f:63:a7:b6:e2:9e:2f:4d:96:ca:0a:5c:e2:bc:6b:71:91:
1f:9f:cf:f3:35:97:96:35:9a:2b:ae:96:4f:91:7d:4d:71:f3:
05:f0:b3:53:d2:28:a4:9b:bf:30:82:95:e9:9e:d0:39:d2:b5:
e3:07:2f:6e:2c:58:93:41:04:8c:f8:5c:56:88:eb:a7:a9:04:
96:e0:79:9f:3d:d2:98:64:f6:d1:9d:98:76:76:64:69:25:b4:
cf:64:64:9d:df:93:14:71:77:1c:dc:87:ff:2d:0a:87:92:07:
83:4b:5b:4a:5c:ca:17:5f:4e:85:14:b2:a9:94:f1:3f:c5:4b:
b6:05:23:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:51 2025 by rpki-client