Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
File: e20oQEBEI571gkLyEOCxZmfrQNA.mft (raw, json)
Hash identifier: +OoOPRvq0CSQnPQj5zjdxRhoJ/dU/sVKm01UDTnt5pA=
Subject key identifier: 52:50:3C:54:1A:F2:A3:B9:71:45:1F:9A:D0:23:76:A8:9E:A8:AD:99
Authority key identifier: 7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
Certificate issuer: /CN=7b6d28404044239ef58242f210e0b16667eb40d0
Certificate serial: 019881D4DF1F2E8E775B7D00351B97CB31B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
Manifest number: 15AE
Signing time: Thu 07 Aug 2025 00:01:08 +0000
Manifest this update: Thu 07 Aug 2025 00:01:08 +0000
Manifest next update: Fri 08 Aug 2025 00:01:08 +0000
Files and hashes: 1: e20oQEBEI571gkLyEOCxZmfrQNA.crl (hash: qwfvMO1q6rtjWszV5V9f+/xiARCtiO8ihyf0rRKv1n4=)
2: hlbCnpGhMRluMY_1waDMmeV9vY4.roa (hash: KZsIHpuRlGx7ybmtLKdiNmONLiSIwlKsEPr24QJ/98Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:df:1f:2e:8e:77:5b:7d:00:35:1b:97:cb:31:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b6d28404044239ef58242f210e0b16667eb40d0
Validity
Not Before: Aug 7 00:01:08 2025 GMT
Not After : Aug 8 00:01:08 2025 GMT
Subject: CN=52503c541af2a3b971451f9ad02376a89ea8ad99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:71:59:9a:73:6a:9e:aa:5d:97:a6:92:b2:54:
a8:ce:63:7c:85:64:b5:ff:82:29:cb:eb:3d:57:36:
c1:8d:68:c3:92:de:61:75:2a:3a:21:d2:e1:5f:d5:
1f:5b:eb:63:87:4b:a9:a3:30:ce:b2:06:45:2c:bf:
a2:82:52:10:e1:f9:33:e4:9a:9e:dc:b6:3c:20:e3:
c5:00:cd:73:52:71:c1:5a:d8:68:b3:38:36:3b:73:
17:a9:82:cc:18:b0:ca:d3:75:1d:f2:b0:3e:9d:c6:
82:90:ae:3a:cf:88:f6:f3:e9:6d:55:60:b6:82:3f:
bc:3f:46:09:ac:eb:88:af:08:ee:f3:85:da:6c:0d:
65:6a:7a:48:7d:4f:55:ab:e1:c8:cf:2a:c4:f7:60:
49:9e:7f:0d:62:11:ac:c6:87:3c:42:8e:bd:a1:df:
aa:9b:23:16:4a:f3:e7:3a:23:9e:73:95:cf:5f:67:
cc:9d:ad:9c:c1:c2:0b:08:f1:05:cd:98:cf:37:f5:
a0:5d:2f:15:1c:58:a3:e6:34:28:bc:5f:ce:e5:a6:
6d:db:65:6f:25:05:73:a5:db:9d:76:76:f5:23:ba:
f7:8f:1a:e6:90:ed:9c:45:72:d7:bd:cd:d3:8b:62:
86:65:71:75:38:e7:1c:fa:10:9b:34:a7:4a:e3:cd:
dc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:50:3C:54:1A:F2:A3:B9:71:45:1F:9A:D0:23:76:A8:9E:A8:AD:99
X509v3 Authority Key Identifier:
keyid:7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:22:12:8e:de:01:7c:85:20:d0:08:79:bb:ec:da:ff:74:cf:
bb:ab:38:ed:ce:d8:10:cb:68:f9:74:27:42:9d:75:81:d6:21:
ff:98:2e:b5:7d:dd:3e:32:2d:04:05:48:67:8e:c4:01:34:a3:
75:00:6f:4f:7d:49:74:6d:ec:5b:af:f8:a1:92:b3:ab:8d:08:
a5:ec:b4:ac:d9:c4:1f:70:63:01:4d:e1:b4:1d:77:55:c4:3d:
d1:6e:cc:56:e0:54:17:87:94:2e:43:d3:53:7d:a9:84:4e:65:
00:52:73:7d:af:b7:ef:18:cf:4a:38:d5:a8:45:92:e6:e5:27:
10:aa:8f:81:f7:72:1d:ba:da:8b:60:05:d6:22:5d:86:50:eb:
20:b2:dd:de:78:54:70:2d:c4:79:2e:90:43:7d:20:45:15:f3:
bf:dc:86:66:0b:82:4c:e1:81:2e:cf:81:68:0d:92:dd:12:2e:
34:cc:05:6c:99:28:6b:f7:a4:7e:7c:a5:13:fa:b0:df:f2:60:
2c:17:72:e2:0d:1b:5f:fa:c5:be:c6:0d:76:1b:0f:f2:6c:08:
49:46:08:20:d0:03:25:79:7f:4b:7e:15:3a:ff:78:bc:de:33:
85:f4:ee:aa:c5:37:f3:76:52:18:da:c2:31:37:9d:8b:95:1f:
aa:30:86:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:31:54 2025 by rpki-client