Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
File: SXIqDKi7yU1IpctIzMku_vhFp-M.mft (raw, json)
Hash identifier: Xz5e+T7/9GLwTu6ZVrTNxWIBXrKBpTHfCAqvVJ9OTmE=
Subject key identifier: C4:4A:5A:64:E5:82:A9:ED:2C:C7:EB:5B:6E:07:78:37:AA:61:B9:B9
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial: 01987C78408601A8F4E1650F2A7643CFB2F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
Manifest number: 15D3
Signing time: Tue 05 Aug 2025 23:01:52 +0000
Manifest this update: Tue 05 Aug 2025 23:01:52 +0000
Manifest next update: Wed 06 Aug 2025 23:01:52 +0000
Files and hashes: 1: 2_e31xA0ke3Styc34JcGbffddwc.roa (hash: SiZtRmCeZumulAZS0QR6GtmaGOYbZYgtQLDnc2RPi2w=)
2: N3VmvFOmqCre_Lx0IfYjn2v2b6w.roa (hash: bp1wfw2pyxZJdYCZm2jvav72UAXwLNhJfCLzE6u3iuo=)
3: SXIqDKi7yU1IpctIzMku_vhFp-M.crl (hash: g3GA8jIA8PUtRl6bnC6vHK2eElstHZLRWFS3KGpDNpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:78:40:86:01:a8:f4:e1:65:0f:2a:76:43:cf:b2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Validity
Not Before: Aug 5 23:01:52 2025 GMT
Not After : Aug 6 23:01:52 2025 GMT
Subject: CN=c44a5a64e582a9ed2cc7eb5b6e077837aa61b9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:df:b8:2b:72:56:6d:39:88:a4:63:9e:c2:c3:
ce:6e:4c:e0:26:25:8e:9a:cf:25:ec:dd:ea:e0:83:
bd:6b:c4:86:42:bf:86:65:a7:12:50:6c:d7:b7:64:
17:5c:17:bb:ee:5e:a9:13:a3:6c:06:2b:fc:05:aa:
2d:54:fb:04:5e:5d:3b:08:66:4a:df:f8:64:c5:01:
fa:01:17:0f:d4:b2:8d:1b:7f:96:68:dc:19:14:06:
df:31:e7:79:d1:9d:67:86:0d:56:6d:29:cb:e7:9d:
85:a1:e8:0f:17:f2:c8:fb:12:86:f8:40:20:9e:41:
c6:70:a8:c5:fb:b2:fc:e9:b4:d7:93:af:94:a8:18:
b8:15:fc:91:b5:07:14:bd:3e:5d:e7:66:07:e7:5c:
28:21:05:16:e1:f4:fa:e0:02:5b:8e:f9:81:78:78:
96:d1:5c:5e:f4:f1:c0:ee:34:98:ea:29:66:f6:06:
1f:1e:e0:75:88:ca:59:e1:ba:82:b4:49:a7:00:b5:
cd:c8:72:3c:c4:e3:bd:ca:0d:cc:10:d3:ab:19:64:
d1:5e:a4:5d:0c:d8:48:c0:a7:bb:6f:9f:71:0d:25:
25:f2:20:01:87:71:9f:d2:97:af:ce:8b:6c:ae:76:
33:78:c2:17:56:f2:02:a1:6e:9d:76:7e:6e:61:05:
14:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4A:5A:64:E5:82:A9:ED:2C:C7:EB:5B:6E:07:78:37:AA:61:B9:B9
X509v3 Authority Key Identifier:
keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:77:11:43:bb:ed:10:b6:cc:1a:c7:54:4a:c8:c3:6c:6a:8a:
05:5f:ad:66:cd:c5:02:16:d4:58:b5:87:35:93:e7:11:e6:8d:
c9:fd:2c:2e:8e:92:04:8b:ac:9d:d2:6e:99:04:9a:c6:4b:47:
6f:df:3c:60:fa:51:18:e5:fd:0f:f8:22:db:c2:e3:35:a6:94:
dc:bb:ec:1c:f5:72:f0:4b:20:8c:71:47:87:3d:33:04:53:62:
9d:c3:08:a9:24:8e:05:44:8c:9f:74:a3:e6:2f:fe:cf:ef:70:
b7:51:17:ea:15:2c:3e:9a:bd:c2:be:75:42:a2:5f:62:30:ca:
36:66:a3:20:33:4b:31:5d:a0:9d:14:a1:58:11:79:2e:8f:29:
0b:7c:4c:a1:9e:bf:81:d5:74:f2:ce:f5:a5:a3:c7:ff:d9:7f:
e0:c4:44:9e:4e:63:b9:83:73:29:99:e5:d3:9d:9e:a8:b4:92:
43:72:5b:62:3f:88:55:5d:32:d0:d4:21:0b:b4:55:ff:50:22:
fd:8a:d7:06:5b:85:77:cb:7f:c8:71:3d:89:57:91:a6:8f:b0:
1e:29:28:47:37:1d:63:04:09:15:26:f1:43:64:b5:7c:f6:d4:
c1:d2:45:6a:7f:22:45:4c:85:c5:93:87:b7:3e:33:83:2f:b2:
0d:bf:58:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:57:36 2025 by rpki-client