Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
File: rf2QyzV0L55YHoy98OPhI6hJyDA.mft (raw, json)
Hash identifier: xULUzdZYjEwJedY5PPsPoxsAzZnDMN0TuJ1RMHnIDWk=
Subject key identifier: 5A:1E:50:58:0F:A3:C4:85:05:02:39:94:23:A1:C8:E1:86:8C:09:73
Authority key identifier: AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30
Certificate issuer: /CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
Certificate serial: 019874BD76BA1FD5FE35A5CD02439E340A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
Manifest number: 15AA
Signing time: Mon 04 Aug 2025 11:00:30 +0000
Manifest this update: Mon 04 Aug 2025 11:00:30 +0000
Manifest next update: Tue 05 Aug 2025 11:00:30 +0000
Files and hashes: 1: csdHd_e7Tx65D2MBS9ZtbLUxU90.roa (hash: fNuNtwuPS3v94+W5VQY9K+dMsKggefc0dwxaWQUAwyY=)
2: rf2QyzV0L55YHoy98OPhI6hJyDA.crl (hash: yVSvztNRg9EdNVi94ezaHg4otgoETCRfbV4hnELjnS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:76:ba:1f:d5:fe:35:a5:cd:02:43:9e:34:0a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
Validity
Not Before: Aug 4 11:00:30 2025 GMT
Not After : Aug 5 11:00:30 2025 GMT
Subject: CN=5a1e50580fa3c4850502399423a1c8e1868c0973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:7c:e2:0f:6f:07:91:1e:9f:94:06:25:e3:
d6:b4:b2:ee:1f:1e:68:5d:0a:cb:e8:c4:0d:de:9c:
53:5a:94:7c:44:53:c6:f4:45:c9:01:f6:83:81:4a:
50:12:0f:c1:4d:f6:9f:e7:19:c8:16:74:cf:9e:67:
43:54:25:72:47:df:59:dc:32:ef:b1:cd:13:a6:85:
8a:31:20:4d:2a:e0:ed:28:cf:63:02:91:8b:1b:81:
c9:dc:cd:89:e6:0b:5a:5d:a9:76:cf:c8:a4:57:e2:
91:1d:48:10:08:10:0f:5c:12:99:a9:d5:f3:32:78:
49:ae:6a:71:66:58:79:60:82:95:9e:1a:11:fa:8e:
6f:14:11:a4:3d:17:aa:50:0a:d1:6f:08:6d:49:b6:
98:f8:0a:b9:41:bd:33:07:06:d6:ba:7a:63:b0:cd:
f1:b4:58:8e:e6:35:e5:43:f5:87:32:7f:e8:85:cd:
4a:9f:2b:2b:19:39:5b:2a:05:d0:5d:7f:fc:b8:d0:
aa:20:61:a7:55:cb:e8:18:ec:e1:85:f4:ef:13:36:
25:c6:4c:e7:69:9d:f6:80:3a:8b:66:d9:d2:f9:08:
7b:11:92:c4:06:3a:3f:6b:72:a3:08:3c:23:5f:aa:
3b:4b:52:b8:03:e2:c6:5c:57:4c:2c:4d:f5:98:fe:
a9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1E:50:58:0F:A3:C4:85:05:02:39:94:23:A1:C8:E1:86:8C:09:73
X509v3 Authority Key Identifier:
keyid:AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e1:ae:56:91:e7:f4:d6:18:34:4f:5a:b1:81:0e:32:d9:46:
b2:d8:11:1c:85:61:3e:e5:6d:10:58:0f:37:c8:fa:c9:a2:13:
73:0b:96:6a:f8:52:4b:47:c0:70:10:95:3d:ac:39:d9:6d:05:
75:ab:41:da:17:59:1d:2a:b9:32:f2:a5:69:52:33:f5:e0:3d:
0e:13:89:59:bb:df:22:21:6b:9f:3d:99:71:3a:f5:10:7b:bc:
48:fd:1b:85:05:94:14:25:5c:4d:9e:74:bf:c7:17:24:55:fb:
6d:34:0b:37:dd:6e:93:d5:57:57:cc:49:93:1b:23:80:2c:c2:
87:a7:a6:56:d6:1f:5d:2b:d0:0a:2f:c7:bd:20:a2:a8:52:ec:
df:c0:6b:ad:2d:eb:42:35:3d:ca:9b:d6:cd:64:cc:fc:4a:0a:
f7:69:62:16:61:c4:7e:f6:f1:4e:a4:1b:42:d2:a2:e5:6d:20:
30:b3:92:a0:0d:62:2a:ef:54:6f:58:6b:c5:83:4e:dd:5b:60:
e9:68:6e:d5:23:18:b2:74:bd:b2:65:01:b7:30:cd:83:40:b0:
b4:62:03:fa:8c:3f:1a:89:c4:d3:13:9c:49:86:90:83:2f:3e:
59:b2:4a:a7:91:bc:0d:f6:29:7f:ed:32:aa:87:81:68:a7:69:
8f:cf:f9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:17:25 2025 by rpki-client