Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
File: IDHrupQ_rRxUh1QOAQXhnCMs95w.mft (raw, json)
Hash identifier: DpwzazSWm6/ITm/jQFUDqgUPKsOgM4xyj6uJOPEYNAE=
Subject key identifier: 0E:77:F7:99:FA:DD:32:CB:1B:EE:5E:65:50:61:F0:A2:AA:5F:2A:C1
Authority key identifier: 20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C
Certificate issuer: /CN=2031ebba943fad1c5487540e0105e19c232cf79c
Certificate serial: 019874BDEDE25480FAF2A27673EB415B88FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
Manifest number: 07D5
Signing time: Mon 04 Aug 2025 11:01:00 +0000
Manifest this update: Mon 04 Aug 2025 11:01:00 +0000
Manifest next update: Tue 05 Aug 2025 11:01:00 +0000
Files and hashes: 1: IDHrupQ_rRxUh1QOAQXhnCMs95w.crl (hash: vKESoV2tW8K6BFIJqMKfRNTTg3o24h4bsmqklc9r+4Y=)
2: tKV7ZxqGnJTtEa2_ye8Y1d8JNh0.roa (hash: 8oiml4GgGUwThCKHUcnZfuIG0l8a7ZiiCuW4RZzZ3cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:ed:e2:54:80:fa:f2:a2:76:73:eb:41:5b:88:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2031ebba943fad1c5487540e0105e19c232cf79c
Validity
Not Before: Aug 4 11:01:00 2025 GMT
Not After : Aug 5 11:01:00 2025 GMT
Subject: CN=0e77f799fadd32cb1bee5e655061f0a2aa5f2ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4e:ab:73:44:b3:01:f2:f9:0b:ec:ad:cc:f8:
7e:03:14:8b:90:df:db:a2:40:5b:82:27:5c:9a:f4:
af:1e:a2:ef:7e:78:bb:97:a3:75:82:6f:dc:ce:c2:
8a:ac:86:5d:3a:fe:6b:cb:45:15:ba:a3:c5:ab:53:
c0:e7:f1:2b:b4:51:ab:a4:88:7f:4f:d2:6b:41:b7:
32:ca:8f:20:80:ba:85:5a:ec:43:16:1b:b2:a5:42:
d9:7e:28:5e:cc:09:06:42:36:69:24:9d:51:0e:dc:
9c:3d:df:cf:73:f8:70:45:e8:dc:d0:55:02:9d:66:
e1:3c:1f:9f:78:15:83:4c:69:f3:f9:7a:66:db:f0:
28:5c:a1:03:77:e9:e6:cf:32:b3:8d:17:8f:78:24:
f4:57:ea:f6:99:11:79:6f:9c:e2:98:e8:f2:50:0f:
43:21:96:61:9f:dc:96:62:7c:5b:1d:ad:5c:88:11:
76:5c:14:a3:97:00:74:64:4e:62:0c:95:83:ec:7c:
7b:26:10:c9:ee:84:77:a0:a1:d3:e0:f1:92:84:3d:
39:61:8d:49:a5:bd:8a:83:4c:4d:61:e4:56:83:98:
1b:e5:90:f6:ee:5c:27:9a:7e:f2:ab:84:67:7f:33:
c3:c5:86:ee:2b:8e:95:72:30:93:bc:84:72:91:58:
0f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:77:F7:99:FA:DD:32:CB:1B:EE:5E:65:50:61:F0:A2:AA:5F:2A:C1
X509v3 Authority Key Identifier:
keyid:20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:04:44:fe:bb:11:a3:a3:88:e1:20:44:ce:81:33:ea:47:74:
0e:a2:88:4d:6f:0d:fb:46:49:89:ab:63:75:83:cf:b2:59:82:
3d:dd:93:fa:55:4f:43:d1:bb:a4:2b:af:7f:bf:1e:4b:0d:db:
8b:e6:f4:23:1b:da:c9:df:5a:54:c8:46:df:54:e4:90:41:44:
1a:7d:66:49:7d:87:6e:4d:c2:07:4a:73:94:ce:6d:7a:4a:06:
c7:7e:4f:1b:96:f8:19:24:c1:3e:0b:82:62:cb:7d:a3:a2:ce:
04:d8:c9:ef:2d:54:d2:b2:03:a4:b6:7a:05:73:42:53:c3:f9:
ad:1c:08:cc:e1:e3:8e:7c:a8:11:b6:bb:96:73:1b:2e:6d:b8:
bf:82:5d:d7:6d:7d:c2:68:11:d7:b5:4b:55:3c:81:39:59:a0:
ec:a4:4c:0d:05:45:fc:59:8b:9b:92:96:91:f0:ee:e6:5a:8d:
1e:71:67:96:6e:cd:bb:0d:ab:d3:72:84:71:6d:ae:9f:1f:64:
36:e9:27:08:29:14:6e:b6:f1:89:a7:19:de:0c:4f:ce:64:e0:
ce:3b:9a:a4:9d:0f:2f:24:fe:ce:e3:ae:57:d8:dc:91:b8:f7:
9b:38:f7:05:1e:db:ea:42:4c:b5:4a:89:bf:c3:13:bc:7d:fd:
ab:46:8b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:27 2025 by rpki-client