Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
File: dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft (raw, json)
Hash identifier: Pn4OTnypqwisQFQOTJeNd0Caw1bRrlvu0pooL+r4OB8=
Subject key identifier: B1:AE:86:27:C9:73:98:69:CE:DE:16:AB:72:0D:72:25:1D:55:88:A3
Authority key identifier: 76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA
Certificate issuer: /CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa
Certificate serial: 019893A485DFD2B53D055B834EDD67450A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
Manifest number: 056F
Signing time: Sun 10 Aug 2025 11:01:29 +0000
Manifest this update: Sun 10 Aug 2025 11:01:29 +0000
Manifest next update: Mon 11 Aug 2025 11:01:29 +0000
Files and hashes: 1: bsvx6NPc5wE4z82KVeJlkoJxWms.roa (hash: 6rlBzLZqcg/z+eAbxCr25c2freBfaX3gVlYhMsk4Kok=)
2: dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl (hash: WPl6uHsou2ccc6leMEJwDpeJp3/RnpjNb27E/rbcjG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:85:df:d2:b5:3d:05:5b:83:4e:dd:67:45:0a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa
Validity
Not Before: Aug 10 11:01:29 2025 GMT
Not After : Aug 11 11:01:29 2025 GMT
Subject: CN=b1ae8627c9739869cede16ab720d72251d5588a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:17:be:95:f3:ba:97:5a:e5:74:1b:5a:24:a4:
9f:40:9a:e3:40:34:2e:48:a9:d1:77:a7:ff:62:81:
a7:11:74:cf:a0:4f:da:fa:15:9e:4a:65:9e:2d:53:
fc:1d:14:84:95:49:59:7b:30:7f:ba:34:62:a7:f8:
2d:ba:19:87:14:a2:31:ad:7d:f5:dd:88:24:4c:84:
1e:7a:67:a8:ad:93:d2:45:24:4f:ec:d4:43:c5:a8:
d8:88:d6:ae:14:17:ab:13:71:b8:3d:19:df:a0:bb:
a9:e9:29:56:e3:5d:68:8f:b7:1c:d3:5b:91:e3:05:
79:48:62:01:60:25:b6:93:03:64:77:a2:15:05:30:
26:3b:87:97:71:5f:08:b2:e6:38:4e:0e:a6:13:0c:
40:fb:ea:88:64:ea:5b:36:04:6c:f8:6d:0b:30:90:
b6:a8:0e:cf:43:7b:43:1f:82:3d:fa:fd:98:b7:b5:
0b:b4:75:f7:e9:8e:9c:30:e5:28:03:b3:41:39:c0:
5b:79:34:bb:7b:3f:1a:44:b6:48:62:72:2b:70:71:
59:cc:39:25:60:ad:e9:99:ce:c7:11:35:ad:db:37:
c5:fc:92:1f:85:8c:6e:f4:96:3c:ad:e0:be:d2:99:
56:e3:e3:c5:eb:19:32:66:f3:fd:91:8e:19:c6:26:
e4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AE:86:27:C9:73:98:69:CE:DE:16:AB:72:0D:72:25:1D:55:88:A3
X509v3 Authority Key Identifier:
keyid:76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:30:34:5a:95:d6:f0:88:b5:17:7a:12:00:d7:90:6b:c4:4c:
35:d7:48:a3:74:22:eb:91:f5:04:f5:09:d6:49:eb:95:ea:e4:
a7:75:4a:13:62:f9:2a:91:9e:d3:7c:a5:6c:9b:70:7b:8c:02:
a2:b3:e3:df:29:2f:6f:99:04:65:ba:ae:a6:49:a7:df:52:66:
8c:d0:ab:89:da:7e:92:38:39:f3:6c:49:52:c0:be:11:61:53:
d1:19:e6:dc:7a:89:16:19:eb:4c:9e:5f:41:a5:3a:10:36:6f:
00:bc:12:b5:89:31:64:00:47:44:c8:22:51:77:5c:00:4d:a8:
a6:bd:3b:c7:52:a9:ab:e1:71:1c:aa:9a:45:d3:5b:e6:b9:4e:
cf:ff:7b:e0:2b:2f:e1:66:ae:57:7f:5c:37:74:e0:31:6a:c6:
2a:05:f7:b9:2b:63:c3:3a:c9:3e:6d:4c:89:0f:c1:0d:ab:07:
09:b5:63:5e:13:1a:b6:8c:05:47:4c:6b:6a:24:28:1e:48:5c:
93:79:fe:65:96:65:cf:2c:18:f9:4a:79:bd:93:ab:61:1f:b6:
c2:f5:9a:69:70:e0:6d:46:38:19:d3:40:54:43:84:32:6a:cb:
65:26:22:f5:74:a3:42:6d:20:af:ea:2a:ed:00:54:b0:5d:4d:
db:92:04:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:23 2025 by rpki-client