Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
File: e4huM5cQFPDjX65u41WpXuU_E5c.mft (raw, json)
Hash identifier: wEu3+qeJ/VucLKNpy4zW+060ZUo09dpgIkEBJwUvty8=
Subject key identifier: 3C:5F:2D:E7:5C:A4:C7:33:99:14:6A:67:5C:1C:54:32:18:C2:20:4E
Authority key identifier: 7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
Certificate issuer: /CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Certificate serial: 01987262450B67CE493F8421F543946CC427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
Manifest number: 0B3D
Signing time: Mon 04 Aug 2025 00:01:39 +0000
Manifest this update: Mon 04 Aug 2025 00:01:39 +0000
Manifest next update: Tue 05 Aug 2025 00:01:39 +0000
Files and hashes: 1: X1TlKjqQxQOIUE9nmZNVP4vjBXo.roa (hash: YEcDQS5RtxJGLo4gojN6ANb19cB9cM3e9I1XVwuKzs8=)
2: e4huM5cQFPDjX65u41WpXuU_E5c.crl (hash: DG1+/kxlwmaXPxxmqG+BMtKDnY8XnavUX4KIDsrf3gc=)
3: pbPgbOFAYYSbv86NqTphvTqH-ss.roa (hash: 2bo0N8otfq6/P5RuOu/G2vL2kcq6chqi1fFShZ0tEtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:62:45:0b:67:ce:49:3f:84:21:f5:43:94:6c:c4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Validity
Not Before: Aug 4 00:01:39 2025 GMT
Not After : Aug 5 00:01:39 2025 GMT
Subject: CN=3c5f2de75ca4c73399146a675c1c543218c2204e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:97:f7:f0:d1:9c:77:a3:f2:f3:23:62:df:
4e:a2:1f:7a:6a:05:d5:8e:17:6e:6d:aa:38:60:2e:
b6:fd:f0:6e:e6:6a:47:1e:b1:f9:88:0c:6a:ee:c9:
77:12:3d:d0:0d:e5:eb:c4:10:b4:cd:71:01:54:af:
b3:e7:fb:aa:0a:f0:e0:ef:d1:5e:43:19:99:43:82:
60:af:5a:be:d9:af:5f:04:f4:ff:93:26:fd:2b:1d:
f2:9a:68:f0:08:08:3d:a9:d0:d0:20:d2:7c:d8:c1:
18:b8:b8:63:5c:e4:cb:5f:af:86:37:d4:47:21:9d:
a5:9f:4b:36:35:01:69:59:e9:18:13:5f:ca:8b:bb:
45:17:fa:66:b4:bf:0a:04:b1:c7:5e:6e:93:c1:1b:
5e:03:0b:fc:74:e6:38:be:e9:af:b3:47:94:09:b5:
f1:34:4b:35:ab:0a:ad:20:0c:73:1f:69:03:8c:29:
48:c7:db:f3:17:71:07:e9:d2:c7:82:b0:e6:df:ac:
6b:de:5b:e1:93:76:0a:32:74:af:14:3a:a3:b7:dd:
e7:af:d1:e9:17:7b:30:cf:94:ff:6b:43:27:54:2d:
df:73:42:fd:f2:75:52:8b:72:f3:37:58:2a:71:e8:
4d:c5:38:d1:da:a8:68:af:43:75:09:ab:b2:ce:27:
53:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5F:2D:E7:5C:A4:C7:33:99:14:6A:67:5C:1C:54:32:18:C2:20:4E
X509v3 Authority Key Identifier:
keyid:7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:9b:64:13:33:a7:35:9d:81:64:f7:47:66:65:66:9b:67:3a:
4c:a5:8a:e9:81:2b:f2:a9:83:57:c7:24:fc:c3:dc:98:a7:f9:
4f:3b:ea:d4:34:af:88:44:b1:db:ca:9d:aa:a4:ca:6e:27:a7:
2a:01:78:e7:52:15:ca:bc:cf:28:6a:f8:bd:5c:4d:f7:85:f1:
a1:20:9b:de:d2:f2:de:1c:48:36:25:f9:a2:d5:ac:19:72:b6:
9c:bf:a4:24:6b:d1:bd:15:00:50:8f:cb:98:ef:d7:85:b3:22:
2f:5b:e6:47:1b:d3:a0:7b:6f:ee:b7:b7:62:c0:1a:4d:76:50:
5a:f2:68:a2:1b:51:c7:fc:b4:ff:5d:9d:05:d1:50:1d:4e:d6:
da:0d:0f:18:84:87:9b:40:2f:6f:c8:22:f1:63:1d:1d:b7:be:
e3:d0:f1:75:ce:5d:82:8b:fe:9a:d0:81:9c:da:0b:a0:c4:6d:
4d:be:cf:79:f4:4f:bb:f4:bd:1c:4f:39:cf:e4:36:9c:3a:91:
6e:d3:88:ec:bd:11:60:de:b4:72:a0:41:f6:18:27:0c:75:9d:
4e:4a:31:37:21:57:ad:ba:24:a9:82:bf:63:de:30:65:1e:0c:
fe:36:37:3f:cc:37:2b:b2:b4:0e:5e:fc:8d:9a:0c:c1:e2:2f:
89:ae:43:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:14 2025 by rpki-client