Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
File: quRIJx2Froeamr8Vs7ypg0cKE0g.mft (raw, json)
Hash identifier: WHSToN7rXk2i6iBfoPmR2qbF1r28BJFzggSEhWC94tI=
Subject key identifier: 5E:A8:8F:68:6B:FD:DE:74:A1:05:D9:E6:59:4D:78:48:34:1F:EC:E1
Authority key identifier: AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48
Certificate issuer: /CN=aae448271d85ae879a9abf15b3bca983470a1348
Certificate serial: 0198541FCEA3616FFABFDE718EC4B4159B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
Manifest number: 0502
Signing time: Tue 29 Jul 2025 03:00:27 +0000
Manifest this update: Tue 29 Jul 2025 03:00:27 +0000
Manifest next update: Wed 30 Jul 2025 03:00:27 +0000
Files and hashes: 1: cfA5700Oyp_l8HYxK2rUF9sJFNw.roa (hash: nBkOSSWEqJ7QWBbrB7ANbAxBsvt2sTitoBCV4yvlduo=)
2: quRIJx2Froeamr8Vs7ypg0cKE0g.crl (hash: WRaL1w9MzJjA3ig93KP5IPhydAjwYk0YgTq5AZYYiTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:ce:a3:61:6f:fa:bf:de:71:8e:c4:b4:15:9b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae448271d85ae879a9abf15b3bca983470a1348
Validity
Not Before: Jul 29 03:00:27 2025 GMT
Not After : Jul 30 03:00:27 2025 GMT
Subject: CN=5ea88f686bfdde74a105d9e6594d7848341fece1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:36:53:5a:8c:1f:e8:79:0d:12:64:4d:9f:6c:
16:b2:8d:28:a0:c3:c3:0f:f2:5f:f2:68:35:30:ec:
77:a6:89:0c:e0:92:17:21:99:cd:26:2f:c1:3d:32:
24:80:b2:37:6b:32:c9:41:89:91:94:28:9e:cc:5a:
1d:48:9f:0a:40:8b:a5:b8:df:41:73:9d:56:ef:ef:
1e:f8:4c:d6:04:8e:ee:28:ff:c6:f2:7d:a2:f4:4b:
60:fa:ed:57:7d:73:71:ad:d5:50:1d:33:e6:9e:f5:
86:b1:9d:79:a4:27:ca:39:c4:e0:a0:d8:3d:ef:03:
cc:55:fe:7b:ec:52:96:67:9e:a2:88:4a:b4:49:c6:
9f:ba:1d:e9:82:da:67:0e:8e:71:3c:02:08:b2:3d:
ee:87:33:bd:66:87:1b:e5:82:e5:25:6d:d1:b8:10:
60:b2:46:5a:e6:6b:00:04:7e:f1:a3:10:c0:c8:c7:
29:47:3d:5f:a4:0b:21:1e:46:ac:38:2b:78:07:15:
28:a2:93:76:87:47:97:e5:a0:34:13:da:bd:ca:af:
3a:a2:1c:85:1e:48:e0:58:fd:7c:d4:3d:27:43:36:
ce:f6:cf:54:a4:b7:74:f4:d0:d8:8a:95:85:7a:b8:
43:95:54:31:af:29:f2:fc:fe:fa:81:7c:b2:09:45:
eb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A8:8F:68:6B:FD:DE:74:A1:05:D9:E6:59:4D:78:48:34:1F:EC:E1
X509v3 Authority Key Identifier:
keyid:AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5b:fe:31:59:ba:04:d0:69:e3:c7:1c:1b:31:63:85:46:df:
3c:3b:2e:cd:91:11:04:8b:76:c0:8a:f3:2f:1d:e6:6e:26:e4:
a2:a6:f1:3a:12:9c:7a:18:f9:15:34:98:24:05:b8:ab:7f:c7:
9c:e2:de:ac:e0:db:43:85:e0:7d:e3:21:6c:53:c8:47:44:88:
f4:57:19:ef:1a:30:b3:b9:38:42:9f:72:31:6f:6d:eb:fc:d7:
96:e1:9e:f8:d0:7e:21:67:ee:c0:94:09:60:80:dc:08:5a:c2:
a6:98:81:eb:60:da:3c:48:75:10:b4:b3:4e:4c:4e:a8:fe:6a:
d5:84:ac:df:3d:68:bb:f8:c5:f6:e6:6a:1e:e1:11:4a:79:9f:
93:e9:1b:ad:fd:1d:c8:f9:b3:05:93:ae:d8:a8:bd:f2:9f:3d:
17:c2:12:42:94:3e:06:8b:38:0a:3c:66:6a:27:ad:53:f1:51:
b9:be:55:a6:2c:33:88:88:5e:d1:35:c9:f4:2f:89:06:b3:d9:
3e:b0:25:ea:6b:88:50:f5:48:ff:68:6f:d8:53:a5:98:a5:a8:
c4:f6:b0:20:40:6b:44:99:35:43:8f:83:33:0f:d7:2d:36:d7:
8c:65:8b:ce:11:77:a1:fc:99:0c:5e:f4:9e:6d:f6:b3:24:0d:
b8:cd:e1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:28:38 2025 by rpki-client