Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
File: MAsvRrpXChZ3v9WExygirZ2f5bA.mft (raw, json)
Hash identifier: 0TNKs8qwPfpQ71JBQmr5X+ysWWDVeyntphc7rgJKLoQ=
Subject key identifier: 85:5A:BF:D6:1D:21:CF:56:0B:C9:CC:B7:EE:67:8B:47:3F:54:F8:32
Authority key identifier: 30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
Certificate issuer: /CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Certificate serial: 01983E3C987250AC7FEE3D9B9B6177299E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
Manifest number: 15FC
Signing time: Thu 24 Jul 2025 21:00:15 +0000
Manifest this update: Thu 24 Jul 2025 21:00:15 +0000
Manifest next update: Fri 25 Jul 2025 21:00:15 +0000
Files and hashes: 1: 1-OVd2lrgp3V2rXsCVF3GooeWhcE.roa (hash: KipoSrKFnoRi0oHmHkcFIq8GeOt3ELUBmEPs2x8pv/4=)
2: KR7i1VGMfp6wOUHzM68qa6NoxyE.roa (hash: ndyzcu48CDHqz3NgyXeDet5mZyI1DmpInGav6pQo5SI=)
3: MAsvRrpXChZ3v9WExygirZ2f5bA.crl (hash: PND4zkoAKYXOxJrycPLwzvzECF2aYCQWBVBPQT2CEvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 21:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:3c:98:72:50:ac:7f:ee:3d:9b:9b:61:77:29:9e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Validity
Not Before: Jul 24 21:00:15 2025 GMT
Not After : Jul 25 21:00:15 2025 GMT
Subject: CN=855abfd61d21cf560bc9ccb7ee678b473f54f832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9e:9f:ca:2b:49:4a:a2:81:e1:37:38:5a:e0:
63:99:95:6b:d8:04:a7:a4:e0:e8:e5:a1:23:51:e0:
ef:48:f8:f9:1f:40:0f:bb:93:23:8b:9f:e0:a2:48:
3c:3a:5d:81:22:8e:09:ea:1b:eb:e6:4b:8d:81:2e:
f7:1f:e5:bf:e9:fb:2f:95:eb:6f:e7:45:fc:73:ee:
94:72:52:5c:60:f0:23:be:07:57:35:2c:53:09:ea:
ac:1a:ef:a4:15:99:9b:ef:e9:70:29:33:b6:02:09:
6b:84:5c:ab:bb:13:87:e5:c5:c1:87:9d:1f:9c:70:
96:0e:dc:ba:42:d5:b5:0d:ff:33:b9:a5:10:a3:3a:
f4:8e:fc:c5:02:78:ad:aa:5f:4e:4b:22:4d:68:f1:
30:19:e1:b3:5d:02:1d:96:db:62:a8:5d:db:a2:f3:
bd:2d:9e:c8:b0:05:d2:c9:a7:38:1b:62:46:16:a0:
43:88:38:69:e6:17:70:3b:af:18:7d:7f:7d:4c:db:
b4:f7:f0:00:5c:15:c5:fd:4e:b2:b3:1d:72:e9:a7:
5c:04:81:aa:f5:45:59:81:2c:09:be:b7:1d:1e:35:
54:c7:df:85:69:3a:de:62:75:2b:5f:2b:38:d8:f1:
13:ed:9a:f6:46:64:72:55:51:26:17:cf:2e:d3:d9:
b2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5A:BF:D6:1D:21:CF:56:0B:C9:CC:B7:EE:67:8B:47:3F:54:F8:32
X509v3 Authority Key Identifier:
keyid:30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:06:d0:ec:a1:03:3f:75:eb:4b:88:ce:aa:af:32:f4:13:ce:
51:04:cf:e3:45:01:f7:70:b9:f6:1e:6c:f2:3e:65:77:0e:68:
4d:63:e0:a4:0b:f8:94:f5:a6:ba:8b:fd:53:4d:48:a1:a8:9b:
ef:4e:e9:16:45:02:0d:e7:5b:cd:35:96:dd:24:0e:ff:b5:47:
c0:b3:1a:56:ab:0f:77:84:fb:5d:b7:c9:9f:ab:98:78:d1:ac:
d9:20:0c:00:97:45:03:66:f2:b6:b6:1f:13:54:39:c1:99:7b:
5a:8a:fa:a5:57:2f:d9:f0:c6:98:dc:43:68:5e:ec:72:7f:9c:
6a:12:16:b2:3e:c3:28:85:b7:b1:49:e3:b6:e4:c9:30:df:7a:
9c:f4:1c:38:a0:00:fd:06:f5:be:85:e6:1a:3f:7a:f2:13:b8:
2e:f0:20:c1:25:05:9a:bd:f0:3f:fe:d4:98:cf:d3:0a:ef:86:
60:84:fa:3a:da:28:7b:27:c5:ca:41:1a:f9:d2:86:94:72:f7:
c3:f4:25:54:d8:8f:42:a7:f2:f9:ea:76:d4:cc:bf:25:a5:bb:
8d:8f:41:f5:f5:f5:3e:85:6d:5c:8c:25:b6:39:d4:de:b0:23:
08:47:f2:05:e4:a8:7b:ab:16:49:f6:fe:a2:7e:d2:24:de:31:
93:3d:93:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:21:24 2025 by rpki-client