Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
File: eXe1XjT_1yB1-92gOaZbNx3jmCA.mft (raw, json)
Hash identifier: YXdS8l31U1I/RnYmW2Dfq4PLAteArUERsIMOI4Cwkr8=
Subject key identifier: B2:E3:11:66:AB:32:99:2A:78:5E:0F:1F:30:E0:7A:20:D2:0C:67:A7
Authority key identifier: 79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20
Certificate issuer: /CN=7977b55e34ffd72075fbdda039a65b371de39820
Certificate serial: 019896A691AFF282717CD3943CE3B8E7BBD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
Manifest number: 0C44
Signing time: Mon 11 Aug 2025 01:02:35 +0000
Manifest this update: Mon 11 Aug 2025 01:02:35 +0000
Manifest next update: Tue 12 Aug 2025 01:02:35 +0000
Files and hashes: 1: Tx774YWupF3TJKc5zuGEprJ-8Q8.roa (hash: 6EvMus28/r2hOkn9lsQE7epJ2J6h3GLbCRAmFL/wVzM=)
2: eXe1XjT_1yB1-92gOaZbNx3jmCA.crl (hash: 7UOa/Fl6GVdFjskcBzsy3m8wXmf1XBUh53x/18N7yLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:91:af:f2:82:71:7c:d3:94:3c:e3:b8:e7:bb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7977b55e34ffd72075fbdda039a65b371de39820
Validity
Not Before: Aug 11 01:02:35 2025 GMT
Not After : Aug 12 01:02:35 2025 GMT
Subject: CN=b2e31166ab32992a785e0f1f30e07a20d20c67a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:f2:f5:85:e9:b8:cf:8b:bb:cb:65:e8:15:
59:84:d3:f8:39:7f:fc:c4:35:31:9b:d4:d0:81:21:
e4:84:3a:23:02:dc:07:05:91:04:5b:4a:f8:13:bd:
7a:e7:74:b3:1e:a7:f8:f5:b0:f5:83:8b:ff:26:d2:
23:60:36:84:42:62:7f:6a:2d:41:e7:f4:e6:c4:eb:
03:ae:09:ea:4f:4b:b7:9a:69:8c:3a:09:76:b2:cd:
fc:b5:93:9f:f1:77:5f:b2:a4:7f:5c:9c:c3:35:37:
88:fd:6f:cc:63:e8:fe:29:0d:95:12:87:3d:11:5c:
80:f8:82:71:76:e3:db:8a:38:fc:dc:f3:94:42:2a:
a0:d6:24:53:b2:8e:de:02:f8:62:2e:27:e8:01:2c:
86:0a:f4:90:ca:b1:e1:9e:21:9b:c8:47:71:48:a4:
40:a2:12:68:6e:80:6f:7e:aa:5a:b6:46:81:4b:14:
e3:46:17:2a:ad:39:08:a1:2f:78:f7:72:ee:bb:f9:
1e:42:e0:8e:56:cf:86:ad:16:96:95:87:0e:d0:13:
d9:17:3a:73:64:b4:8c:5e:0e:be:43:01:7f:8d:ac:
3c:bb:d9:a0:1d:6b:3f:c2:cb:44:62:5c:72:e8:00:
92:1a:40:4f:05:b2:84:66:e1:aa:e1:4d:11:8c:4a:
89:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E3:11:66:AB:32:99:2A:78:5E:0F:1F:30:E0:7A:20:D2:0C:67:A7
X509v3 Authority Key Identifier:
keyid:79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:3b:82:85:6b:52:20:a5:00:0a:ff:7f:fd:31:d2:85:1c:49:
28:d2:c3:0d:35:08:2a:5c:e3:92:e1:a4:71:de:92:0a:53:f2:
d1:48:d7:ac:f6:5b:7d:26:3b:47:4c:8e:5a:5b:37:49:3f:ec:
16:49:d9:29:9f:b2:9e:57:85:c0:b8:a6:7a:74:40:98:3e:af:
04:d4:95:b6:ba:7f:59:c7:30:d5:9a:0d:69:7b:77:b0:15:7d:
a8:1c:2a:88:47:7e:d7:31:1c:57:3f:db:6f:01:ec:e5:a4:ac:
c1:c9:a6:aa:61:7c:80:5d:62:a0:fb:ed:68:3d:31:24:56:0b:
66:54:8d:11:2a:e6:05:9f:3b:41:a1:60:69:34:cd:8f:ce:ce:
76:42:47:5a:00:f0:a1:04:49:b6:0b:7d:f0:bd:ff:a8:7f:d6:
7b:43:5b:f8:01:48:91:cd:b2:b3:f1:cc:8c:7c:9c:68:e9:53:
b8:f0:ce:73:10:a1:1a:e5:2f:0c:80:e0:dc:64:f3:72:fe:54:
fd:ff:fb:0c:ff:20:b5:96:03:d1:47:50:a5:20:59:25:2e:fd:
67:ef:78:26:60:9f:dd:54:7a:e1:6e:4c:09:73:d9:cd:0f:c3:
a0:71:50:e3:3e:cb:e6:2d:a9:15:06:09:16:ca:5a:5e:bd:10:
d3:28:28:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:29:59 2025 by rpki-client