Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json)
Hash identifier: 7hR9z031k45h8pY6GeS2/BLO4k3whR81ILe4h3nr0ss=
Subject key identifier: E3:DC:A7:37:E1:FA:30:9A:01:D0:3F:F0:5C:56:22:B2:77:09:A4:1B
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial: 019848C0278179FD1D54CB969C590FB3141F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
Manifest number: 1596
Signing time: Sat 26 Jul 2025 22:00:09 +0000
Manifest this update: Sat 26 Jul 2025 22:00:09 +0000
Manifest next update: Sun 27 Jul 2025 22:00:09 +0000
Files and hashes: 1: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: UzBHBaX8KCZ4r+h+eU4raitCFeDqs5KvLUFSVcQJAGA=)
2: pi-26F4PeqiMAjfpczMwVUa13T4.roa (hash: Vruq+xuvPpEjrPLqBdBog4T5WQxUoJKp5FP5nL6SSoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:27:81:79:fd:1d:54:cb:96:9c:59:0f:b3:14:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Validity
Not Before: Jul 26 22:00:09 2025 GMT
Not After : Jul 27 22:00:09 2025 GMT
Subject: CN=e3dca737e1fa309a01d03ff05c5622b27709a41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d1:12:4c:cb:e3:67:74:2c:19:61:fb:a7:59:
89:11:d1:bd:ad:a3:25:c5:1a:c8:90:cd:a7:28:64:
39:2f:9e:1f:05:4b:e8:e0:a6:f4:de:7c:e6:7d:eb:
54:8e:de:3c:5e:8a:9b:72:bb:2b:e4:12:54:b8:30:
c8:b5:c9:ef:6b:4c:e8:08:9d:5e:c0:62:20:69:f3:
67:f2:a6:23:52:df:15:ca:2e:43:df:21:8a:c4:be:
b1:92:18:ca:d5:bf:c7:b4:05:a1:9b:bd:f2:e7:ba:
16:82:5e:03:ec:10:4e:db:73:b3:e9:37:fb:e8:5f:
44:66:71:d3:65:5c:90:ce:04:13:55:f6:28:37:f2:
d9:ef:43:f3:d7:c9:c6:8c:9b:d6:c6:c8:6d:86:5e:
1a:a4:fd:30:c1:a4:f5:0b:51:c7:a3:1d:a6:0e:eb:
65:1f:90:e6:3f:8f:f9:eb:b6:a9:3c:30:3d:a7:5d:
8a:bd:76:94:a4:74:97:7c:64:25:60:ad:f0:72:7e:
e5:00:fc:f3:af:ea:2f:90:22:71:9e:a1:4f:8e:59:
7d:d7:0f:38:c1:02:ac:82:fc:4e:00:b1:dc:44:c7:
af:15:fe:52:0b:09:89:a5:94:b0:87:5e:f9:17:b7:
02:17:26:ab:fc:9c:17:41:f3:b2:eb:85:9d:4f:d7:
c3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DC:A7:37:E1:FA:30:9A:01:D0:3F:F0:5C:56:22:B2:77:09:A4:1B
X509v3 Authority Key Identifier:
keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2f:27:29:43:ee:84:03:b8:98:12:fc:20:d2:c1:ea:c8:21:
73:c1:51:47:23:4e:28:85:27:ba:8c:34:f8:7a:d9:84:f9:2d:
47:76:0f:ea:8b:a6:ff:90:3e:52:4b:b5:bd:04:07:39:da:b3:
67:27:08:0e:f0:0d:3c:f2:62:91:58:6a:3f:23:30:55:8d:8a:
57:5e:85:ff:eb:23:33:31:96:f6:74:ef:13:04:27:79:40:3d:
2c:2d:cc:d3:27:75:9a:a3:56:20:9a:9d:1f:f8:1b:07:9d:f9:
ed:c9:63:30:4e:a4:b4:b0:8f:25:e4:66:57:c2:9e:d4:de:d2:
34:8b:fb:1f:3c:a3:20:f8:c5:f2:a4:bf:cc:8a:16:35:0a:07:
cb:7a:cb:b7:41:04:bf:ee:b9:dc:50:f2:d8:c9:db:5d:63:be:
14:b6:65:7a:4e:b0:10:20:a8:7e:ec:43:67:a1:10:84:b3:89:
92:73:c1:92:ca:e0:11:39:a6:71:e8:44:2f:78:bc:71:a3:09:
74:79:cc:29:09:d3:88:02:45:be:c5:ad:b5:15:2d:05:24:7c:
56:2d:ea:60:ba:5a:04:7d:32:03:34:66:6e:7f:1d:d9:83:aa:
52:00:9e:a0:0d:2d:ca:87:4b:f1:0a:2a:b8:b0:1a:d3:ea:df:
d1:71:48:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:38:02 2025 by rpki-client