Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
File: rrwz1bpYUjTMzvilethsoer8SqI.mft (raw, json)
Hash identifier: WwGFduqMbzKQp3XvJa1dYU0uslFnIaekS0zz8zG37QU=
Subject key identifier: 4E:80:37:3B:90:EF:F2:F3:F6:0C:FD:AE:9F:93:A8:F6:CB:19:B8:3A
Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
Certificate issuer: /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Certificate serial: 01984588B6E0F72C9B7EF2817018649D6325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
Manifest number: 05AA
Signing time: Sat 26 Jul 2025 07:00:44 +0000
Manifest this update: Sat 26 Jul 2025 07:00:44 +0000
Manifest next update: Sun 27 Jul 2025 07:00:44 +0000
Files and hashes: 1: rrwz1bpYUjTMzvilethsoer8SqI.crl (hash: Tc4Qe4ZgheQ0iel3g23HT8bidRmlFcaFLQ4XmfgLKYs=)
2: s8WA6XbVKkNfKDWyIPbKv2MkdEI.roa (hash: cSlX1MSZ3bjIwkd1nKlEU1sHjeRq7ybsweqaQYPJx58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:b6:e0:f7:2c:9b:7e:f2:81:70:18:64:9d:63:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Validity
Not Before: Jul 26 07:00:44 2025 GMT
Not After : Jul 27 07:00:44 2025 GMT
Subject: CN=4e80373b90eff2f3f60cfdae9f93a8f6cb19b83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:07:03:1d:9f:a2:66:75:f4:ae:a5:24:81:53:
86:6b:ee:55:93:77:a6:94:40:d9:68:d6:9e:ab:ce:
04:9e:b9:8e:15:00:80:7e:53:88:ea:b2:c1:41:3e:
b8:a8:15:e0:8c:5a:fd:25:74:6a:aa:36:15:df:9e:
67:fe:93:39:8d:98:ad:12:15:c1:76:56:eb:3b:9a:
25:a4:3c:2d:82:4b:80:12:36:14:8e:be:53:2e:ab:
52:61:ea:33:53:be:dd:2c:ae:6c:63:86:01:2e:d2:
59:f8:c6:99:32:c9:e5:6a:68:5f:2f:09:5e:b0:54:
37:b6:04:a2:c3:39:5f:8d:bc:e4:0d:8b:e8:1e:da:
3d:a6:22:0e:90:12:51:fe:9e:5c:86:3a:be:45:79:
1a:01:9f:66:78:79:cd:51:94:40:88:1a:44:2d:54:
e2:e9:c9:3c:aa:4f:cb:5f:81:77:cc:a0:31:5e:3a:
2b:ed:0f:cb:c7:69:13:4f:67:7d:87:8c:cc:e4:9e:
0d:99:7a:44:56:ea:07:2b:20:f1:06:e1:42:a5:f0:
8f:a5:41:c4:61:29:64:58:22:7d:b4:a4:ac:a1:15:
ff:d9:fd:8a:c3:f4:d9:60:3b:a9:d0:dd:d9:55:dc:
ee:00:d3:ea:67:4c:a2:41:c4:76:08:0e:70:12:5b:
00:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:80:37:3B:90:EF:F2:F3:F6:0C:FD:AE:9F:93:A8:F6:CB:19:B8:3A
X509v3 Authority Key Identifier:
keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c7:4e:c3:6c:af:30:7a:de:4a:32:d8:de:2f:d2:3e:e5:fb:
c6:96:d1:03:07:d7:9d:1b:a7:5e:8e:07:94:07:9e:93:46:da:
42:99:37:ff:9e:ec:9d:30:e7:a5:55:57:4c:4d:9e:02:e5:ff:
84:f9:ea:5f:cc:9f:f6:c7:e9:1f:8a:52:3c:b9:c7:34:d2:d9:
9b:d0:cf:45:18:89:ab:27:db:d9:ce:f5:08:5c:34:69:1d:8d:
e5:b1:49:f9:74:30:95:cd:26:10:99:e5:2f:fc:05:87:25:be:
c7:99:bb:a5:88:17:df:37:fb:72:2d:b8:50:49:99:c8:b6:e6:
8b:c9:a2:93:a5:c7:90:a5:47:d9:05:db:67:43:4d:25:2d:d6:
26:4f:f4:ce:48:80:15:41:1f:70:33:0d:26:16:ff:a5:fc:fb:
c6:2a:07:7d:eb:e9:e2:65:be:cf:bf:b0:3f:ab:52:5a:e7:aa:
d8:c6:16:0b:01:22:a2:23:0f:d8:b0:43:2b:aa:41:60:87:0a:
8e:9f:eb:99:43:91:f6:a6:b4:d1:19:f9:3a:c4:18:82:e2:c7:
69:f4:fd:fb:ab:46:ba:11:e6:2e:b8:1f:0e:28:54:6f:dd:b8:
ef:d1:06:c1:b3:4f:08:bb:0a:fc:35:09:5d:5f:e9:f0:c1:00:
63:4f:70:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:00:19 2025 by rpki-client