Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
File: MDeJJY5gnz5VjXezv9CKzzUV-pI.mft (raw, json)
Hash identifier: Wm4qw3WNtzjQSKBGuCLAV7e4qDys9UTLOUfaj7HwUvI=
Subject key identifier: 8E:D1:05:5D:23:DE:13:18:9E:5F:44:4E:D6:F9:34:8A:4F:8C:FE:3A
Authority key identifier: 30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92
Certificate issuer: /CN=303789258e609f3e558d77b3bfd08acf3515fa92
Certificate serial: 0198530E7BB29586C2C4526AE58C0BAE5C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
Manifest number: 0FE0
Signing time: Mon 28 Jul 2025 22:01:54 +0000
Manifest this update: Mon 28 Jul 2025 22:01:54 +0000
Manifest next update: Tue 29 Jul 2025 22:01:54 +0000
Files and hashes: 1: CxgP4WGmDc-j3ZUPD_Rcb4uV8ns.roa (hash: XodVBcVXpLoQd1C4J0bRPfMq7vIVpbrh7r32+gpZkVk=)
2: MDeJJY5gnz5VjXezv9CKzzUV-pI.crl (hash: jqcFz0ALS+/UM3u8golJf1bOPD8YhBOHMAJf+y+iAbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:7b:b2:95:86:c2:c4:52:6a:e5:8c:0b:ae:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303789258e609f3e558d77b3bfd08acf3515fa92
Validity
Not Before: Jul 28 22:01:54 2025 GMT
Not After : Jul 29 22:01:54 2025 GMT
Subject: CN=8ed1055d23de13189e5f444ed6f9348a4f8cfe3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:40:ad:ea:a3:1f:58:a1:1a:b9:16:c2:2d:
30:4d:66:12:6c:ac:08:e1:6c:a5:01:c7:53:e3:18:
49:98:17:d4:ce:fe:fd:85:72:5f:dd:61:f4:db:aa:
54:53:ba:84:bb:63:38:92:6a:62:d8:93:d9:c5:2a:
da:bc:28:86:b8:1f:72:14:2e:4e:6d:37:7d:44:a3:
6a:30:c5:1f:2b:94:57:49:5c:07:eb:d4:50:73:d9:
36:67:de:92:52:2b:7d:bd:a3:fb:1e:3a:0f:9d:0a:
4d:20:5b:9d:62:6b:37:1d:90:80:22:07:96:5e:e1:
70:bf:f3:52:eb:3d:a3:1e:43:0b:f0:a5:20:6a:75:
89:be:47:0f:54:90:a6:ab:23:ab:66:86:49:64:05:
3b:b7:80:84:45:32:5f:88:a3:02:fd:c6:01:46:3f:
d0:c9:9a:97:43:5c:5a:30:cb:ee:27:c6:15:d5:9f:
00:3f:a9:11:bf:bf:cc:95:c4:f5:ff:50:ac:0a:4e:
6a:78:54:f6:f4:b9:37:04:cb:75:0a:ce:41:6d:4a:
53:8d:bd:03:f2:cb:7e:8e:2e:78:72:ca:a4:65:44:
a3:39:b0:97:f9:d0:39:9b:a3:13:e8:c9:fc:e0:c4:
f9:a6:0a:c9:c9:55:8e:9f:b8:30:40:4f:5b:bf:87:
0b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D1:05:5D:23:DE:13:18:9E:5F:44:4E:D6:F9:34:8A:4F:8C:FE:3A
X509v3 Authority Key Identifier:
keyid:30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:61:38:5a:e6:ca:b3:bb:89:52:0c:0e:0e:32:49:42:04:ee:
54:85:ce:9e:92:95:a8:6b:80:c0:a8:4e:4c:a6:1e:dd:0b:a2:
3a:44:c1:11:be:99:01:bc:e8:9b:38:94:61:b6:7c:f8:07:29:
c0:82:15:3d:c2:8a:ce:84:bc:53:07:a0:77:52:4f:b3:75:c7:
38:fc:07:87:9b:45:04:2c:d6:db:6f:46:d3:fb:dd:e0:c5:36:
7a:9d:82:03:ff:05:72:19:ee:81:96:6d:52:69:fd:00:22:e0:
f5:e9:a9:1e:5a:50:0b:e9:f8:e0:51:19:f6:55:9d:a0:34:ed:
3d:8a:67:4a:88:8f:94:da:b9:b4:a4:d8:82:bf:e8:83:98:61:
f4:47:4e:31:0f:af:c8:7b:84:bc:60:b4:25:fb:31:e5:46:c1:
75:c9:6b:32:c0:f3:79:95:4f:31:d3:96:be:66:8d:f3:b9:77:
16:07:b9:dc:6e:11:11:e3:f2:16:84:61:8f:10:c8:9e:1e:51:
42:6a:fd:c0:4f:7c:15:af:8f:ac:12:f6:77:ea:c1:66:33:26:
cc:d9:3a:7b:40:b6:77:69:cb:69:5b:42:0d:a3:cd:a6:6d:f4:
f9:31:c9:f7:30:af:b9:73:0e:a8:9f:d7:bc:1f:98:1f:42:c9:
79:89:25:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:46:51 2025 by rpki-client