Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
File: rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft (raw, json)
Hash identifier: i9jXTkSrWjGEIsmb+7PTxwAFsoCA9isj43cE0e7uNIE=
Subject key identifier: EA:CC:F7:43:A7:79:25:4A:5D:6B:AA:FE:70:8B:0C:52:17:36:13:72
Authority key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
Certificate issuer: /CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Certificate serial: 01984AAF17E7CCF364BE61860847916B5915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
Manifest number: 0FFF
Signing time: Sun 27 Jul 2025 07:00:45 +0000
Manifest this update: Sun 27 Jul 2025 07:00:45 +0000
Manifest next update: Mon 28 Jul 2025 07:00:45 +0000
Files and hashes: 1: 8Wti1PH3KuI5W3Ps9JfxSql0m7Q.roa (hash: CpKe22p+vfF1GPX/Ydl6oGQUK80PsEj4zMJRNQ1KdVw=)
2: ON3iIV_oOMJOwBGtDykVdsbeibU.roa (hash: 9WvGCqlVAIcwLRzryj0uvMHkAzQLE90GQaNR429D0NE=)
3: rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl (hash: 1aNAJPdUei3jP1qBsU7diuALTFKPaOeB6JemspLNBM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:17:e7:cc:f3:64:be:61:86:08:47:91:6b:59:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Validity
Not Before: Jul 27 07:00:45 2025 GMT
Not After : Jul 28 07:00:45 2025 GMT
Subject: CN=eaccf743a779254a5d6baafe708b0c5217361372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ea:13:1f:74:3a:6f:c7:fc:b7:31:9c:fa:f0:
bf:86:7f:6e:6b:25:d7:51:cc:42:75:52:63:8c:88:
bf:dd:0c:4f:d7:19:7a:10:36:0d:47:c3:08:fb:07:
81:50:b0:77:24:e1:4b:29:85:59:9a:ce:0c:81:05:
ed:a8:92:51:76:cf:f5:63:76:52:e7:62:7a:18:e0:
a5:a6:83:a9:8d:68:c6:cc:f3:83:d0:4c:ec:67:84:
93:11:ee:81:96:39:16:f9:77:c2:66:b8:7f:60:c1:
e7:8b:28:d0:5f:65:9d:34:45:7a:7d:06:72:5e:db:
68:59:76:99:0f:4e:a8:96:bd:63:f5:1c:89:f8:00:
e7:40:d1:b9:e8:2c:1f:ff:ee:54:4f:29:29:be:7b:
b8:0b:de:91:db:a7:7e:fc:a8:1e:f0:95:c6:59:7c:
1b:24:a4:26:e2:8f:1c:84:cb:af:cb:a1:f8:0d:9e:
0d:82:32:e6:52:ad:5c:bb:7e:84:9e:ac:f9:4e:78:
1c:aa:26:69:e9:63:70:8b:49:d9:f7:27:b4:cf:42:
ea:42:96:c6:84:22:7a:f1:f9:b8:a6:d5:4a:2d:99:
d9:f3:c7:b8:3d:c5:77:70:6c:83:d4:2b:0a:b0:1b:
bc:f5:1e:88:36:1d:38:36:da:d7:d6:6e:bd:55:1f:
02:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CC:F7:43:A7:79:25:4A:5D:6B:AA:FE:70:8B:0C:52:17:36:13:72
X509v3 Authority Key Identifier:
keyid:AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:45:81:eb:36:5f:69:fa:dc:c6:21:0d:97:26:4d:46:c1:1f:
ef:ad:1c:09:bd:19:aa:2d:8a:94:20:01:4a:5b:84:70:bf:21:
18:46:6a:95:0f:ff:be:d7:95:d4:cb:47:9d:1c:c8:35:5f:63:
da:98:4d:4d:ca:b8:17:1f:0e:90:90:1e:d0:17:6b:63:53:1d:
2d:3f:2d:ed:69:3a:0b:37:20:aa:a5:1a:67:41:56:5a:d8:8d:
39:a6:6e:0d:31:37:97:01:d0:fe:a7:47:5d:f4:44:30:94:0e:
1e:ca:14:12:dc:4c:74:8f:2f:3f:a9:60:19:0d:fb:cd:89:7e:
e2:13:17:b6:1f:6e:23:ea:2c:e0:bc:01:ff:c7:eb:68:17:15:
84:a5:d9:79:b9:00:11:c2:f1:bf:4f:b5:8e:36:2f:52:11:65:
5b:8f:7f:95:0b:a9:75:b0:0c:2d:6d:8b:4f:60:c3:13:05:59:
0b:7a:e9:67:85:4e:32:43:da:7b:ed:5e:95:10:7d:dc:b3:09:
47:49:8d:ea:c3:c3:d5:33:41:09:a3:db:31:79:41:f0:17:6f:
27:e8:ec:32:fb:45:a2:f8:4b:6b:5e:4d:31:5a:dc:03:79:b7:
80:e1:85:1b:a9:33:1c:1e:73:8f:de:f8:1d:34:7a:12:45:90:
ce:ed:96:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:31:54 2025 by rpki-client