Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
File: RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft (raw, json)
Hash identifier: hIT8pAXJTEpw/sV5k3zbwAOyPsphYwUe2RxgCeFBo9Y=
Subject key identifier: 2F:21:C3:91:19:3A:42:D4:04:21:4F:18:16:22:1C:EE:4D:2F:D9:35
Authority key identifier: 46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17
Certificate issuer: /CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
Certificate serial: 019873E3DA3A7DE9A916C0B6DC0CBDB7F4F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
Manifest number: 027D
Signing time: Mon 04 Aug 2025 07:02:49 +0000
Manifest this update: Mon 04 Aug 2025 07:02:49 +0000
Manifest next update: Tue 05 Aug 2025 07:02:49 +0000
Files and hashes: 1: 1-LEezNtaqjy169gIk46UkSGODnI.roa (hash: FRFupvefU0HUQnLO8y2fwT4i2INskAlpIVZPmaI9wtE=)
2: IrF-9wkj7eNtv0srLfHPyI1GtTA.roa (hash: mAMlIob8u84HdQAxB78nZwUMGcefLJXlEaHY1RBkM0I=)
3: RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl (hash: ZOJ7PT6szH+PO0XWd/ZCESP1lWI2ayf8cbe2BwTw4SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:da:3a:7d:e9:a9:16:c0:b6:dc:0c:bd:b7:f4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
Validity
Not Before: Aug 4 07:02:49 2025 GMT
Not After : Aug 5 07:02:49 2025 GMT
Subject: CN=2f21c391193a42d404214f1816221cee4d2fd935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:1c:87:10:f7:b0:4f:2c:a4:4d:dc:fa:c3:d7:
7e:46:6a:17:de:be:90:42:53:ce:16:cc:35:d4:88:
4c:94:c2:6b:7e:dd:23:22:ad:c2:13:22:02:3b:48:
41:26:8b:86:e9:ef:9c:1b:9d:f6:57:b2:48:b6:dc:
c4:2b:0c:aa:19:f3:fa:45:da:9a:7c:03:d5:b2:55:
a3:1b:ac:11:99:9e:04:f7:b0:56:0f:c5:42:b3:77:
99:f2:f8:1b:6f:9a:3d:63:b4:9f:44:b1:d3:50:80:
f4:b5:5d:06:9f:52:8e:0f:b1:83:2f:8d:60:a0:01:
f9:52:34:d2:59:bb:dd:55:9f:53:f1:e5:92:57:6c:
83:6f:10:42:9f:f4:a9:2e:a8:42:1e:be:7a:44:15:
ff:55:64:91:0d:75:5e:60:e7:a2:9b:ba:80:75:c7:
80:c5:aa:14:d4:cc:ec:9a:88:4e:7a:b7:54:23:12:
f0:b3:4e:d7:4d:8d:a5:2a:25:11:ed:8d:b3:29:fa:
f2:7c:3f:4b:de:ea:18:c9:6f:0b:b4:65:d9:8e:7b:
e2:ab:4d:8e:e9:91:1a:b2:60:0f:46:31:f4:7d:0d:
6c:4d:a8:ed:b4:a1:14:9d:e3:e9:43:d8:26:bb:0b:
6c:fa:4d:a1:af:c1:9a:9d:3d:ed:90:ef:4a:a1:2e:
c0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:21:C3:91:19:3A:42:D4:04:21:4F:18:16:22:1C:EE:4D:2F:D9:35
X509v3 Authority Key Identifier:
keyid:46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ba:36:76:e8:4b:4d:56:96:95:a9:f8:6e:34:b4:f6:ec:0c:
65:7e:ed:a1:0b:e9:fa:1c:21:45:88:c7:da:e3:7a:b8:8c:cc:
5a:96:03:1a:03:b9:5d:d4:92:d0:e9:19:a8:f4:23:7f:25:fe:
85:59:9a:3b:39:3f:49:b3:06:04:2f:b0:b8:db:c5:c3:3f:d2:
14:41:22:e6:76:59:86:7d:04:96:12:4b:64:05:58:80:fe:38:
c0:78:c8:32:72:7d:bd:5c:06:ef:14:bd:74:ef:68:61:4e:4f:
b5:7f:b5:ea:ad:e7:b7:5f:b6:ff:84:a3:26:14:87:8c:bf:19:
9d:51:ed:41:83:83:6b:ff:0e:4c:c1:0f:fa:bc:c0:ac:7c:b2:
01:86:4b:c0:d4:f7:13:1c:c2:c5:ed:cc:8c:61:10:e2:0b:6f:
8f:72:16:d2:a8:b7:73:f2:18:b2:05:be:f2:e7:94:d4:4f:b6:
4b:2a:91:4b:1e:86:21:6b:fa:7c:5a:99:a1:eb:13:83:6d:ff:
75:66:2f:2f:30:d3:c2:07:c3:a5:ed:fd:9a:ec:8f:5f:ee:4c:
74:3e:ee:0a:cf:14:4f:95:82:b0:80:0e:5f:1e:51:2b:7c:29:
70:2b:06:8d:80:ce:49:72:b1:d9:c2:a9:75:bc:80:32:aa:db:
bb:94:75:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:14 2025 by rpki-client