Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
File: ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft (raw, json)
Hash identifier: g+DUV84DZO2iH4nQTUfTQZDUBGge5ZFyE2gdhKEONsY=
Subject key identifier: A4:CD:66:9A:20:90:F4:23:DD:A0:86:34:67:4D:89:30:5B:C5:8F:D9
Authority key identifier: B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
Certificate issuer: /CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Certificate serial: 019879AD51C8B281BF12944A4B86AFD99C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
Manifest number: 0EB2
Signing time: Tue 05 Aug 2025 10:00:58 +0000
Manifest this update: Tue 05 Aug 2025 10:00:58 +0000
Manifest next update: Wed 06 Aug 2025 10:00:58 +0000
Files and hashes: 1: KzXb-GAIiluztxWbXEztv2KxINE.roa (hash: RfAT/ToLMD66v1yb0qJDxKlt/UFCsEuoJitem9+zGng=)
2: ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl (hash: im6VIRrH/1OL+C1DY5r4R9knFDnnP4IvLKtcy0FI5K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ad:51:c8:b2:81:bf:12:94:4a:4b:86:af:d9:9c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Validity
Not Before: Aug 5 10:00:58 2025 GMT
Not After : Aug 6 10:00:58 2025 GMT
Subject: CN=a4cd669a2090f423dda08634674d89305bc58fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:e7:a3:de:2e:16:64:2e:e0:67:5a:55:0a:
52:23:1d:ff:56:c9:08:c3:ab:a1:f0:84:07:57:5c:
42:9c:a4:2d:ee:14:20:a9:d4:63:40:e0:7b:a1:27:
2a:6d:76:16:62:70:2d:26:59:0a:2a:e8:7e:17:c8:
48:5c:5e:61:41:fa:67:91:f0:33:31:aa:79:53:a8:
5e:e3:77:ee:fc:8a:43:b8:8c:8d:34:6e:df:6d:18:
76:a8:75:66:d1:66:4f:e2:7a:18:f0:11:ef:d5:a9:
5a:1b:3c:8d:ed:19:62:09:8c:46:6e:f4:d4:86:68:
ec:01:fb:f6:cb:8c:5b:2e:d1:f9:06:e4:0d:4e:15:
0d:12:35:8b:5e:5c:1d:d0:d4:e0:51:69:c8:c4:10:
8a:a5:98:b0:04:85:1f:8a:c6:82:cb:dc:23:24:3c:
0a:3c:3b:63:83:d6:00:ad:86:ed:dc:05:54:fa:98:
de:d6:f7:8c:3d:eb:84:32:60:f8:52:96:a8:50:46:
ec:fb:c3:2c:43:15:6f:7e:a1:d2:11:a8:f7:f0:7d:
a0:06:64:68:24:4e:c8:ec:5d:1b:38:63:3e:ca:92:
4e:97:77:25:97:c5:c6:88:33:23:f2:81:ce:97:d5:
c3:c4:e0:70:2f:f4:c0:8b:d9:39:25:a0:92:a6:25:
2f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CD:66:9A:20:90:F4:23:DD:A0:86:34:67:4D:89:30:5B:C5:8F:D9
X509v3 Authority Key Identifier:
keyid:B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:29:16:c8:c4:f7:c8:94:f3:5b:c5:4c:36:a0:98:d7:e0:b5:
32:ab:73:03:18:56:76:70:4d:f3:c4:10:30:98:c7:77:2e:59:
d4:25:d2:f6:00:56:94:8c:ba:7d:e0:e6:91:7b:de:aa:e5:b1:
7a:3c:1a:33:26:89:8a:1d:4c:5b:68:9b:c4:84:86:15:8f:e4:
36:78:4d:f6:f5:d7:af:7c:da:a8:69:04:27:87:18:24:de:df:
d4:93:75:65:9f:92:40:c4:07:20:2b:e6:cc:15:eb:cb:ea:7a:
7d:15:35:5c:8f:37:d3:be:ef:ec:c2:a4:8d:7b:6b:cf:0e:f0:
cb:05:0d:77:13:c7:ef:40:cc:2c:5e:23:80:55:54:0c:7b:82:
6a:13:d0:65:1b:6b:0f:e7:df:b0:46:42:04:59:a9:5e:3a:d0:
7f:c3:89:f6:70:49:45:c3:74:1f:ed:71:3e:2e:ce:80:6f:8f:
44:19:73:ca:f8:e6:b3:0f:d5:66:67:73:13:5e:a4:3d:fe:d8:
e5:6f:7a:60:9e:77:e8:80:0d:00:e2:6b:4a:5d:66:1f:c8:c5:
d7:0f:ea:c2:6f:58:a6:84:53:90:b0:52:c5:2c:66:ec:56:5d:
e4:cc:37:e5:55:5d:ee:50:33:5c:58:fb:c5:00:85:86:44:d8:
f3:c2:74:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:20:13 2025 by rpki-client