Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
File: e9s8XZUevruGqZqE0jjn_KdY4pY.mft (raw, json)
Hash identifier: oXCCnPqEIsBajb9Rq2MEnElUvHK/7OejTSVPVwkQTu0=
Subject key identifier: 46:95:60:A4:AD:5F:B4:87:90:2E:47:BC:B8:31:DA:5A:0F:4C:81:EC
Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
Certificate issuer: /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Certificate serial: 01989148216DC78569B560BBF7C1D3656CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
Manifest number: 0CBB
Signing time: Sun 10 Aug 2025 00:01:20 +0000
Manifest this update: Sun 10 Aug 2025 00:01:20 +0000
Manifest next update: Mon 11 Aug 2025 00:01:20 +0000
Files and hashes: 1: DIa5pw00VBuzd8TnmLxOAmAN6Io.roa (hash: X2ZL9HHT+jpKG7EXK5mDhvGY1GOQw7aFu6sUd6IVFrk=)
2: e9s8XZUevruGqZqE0jjn_KdY4pY.crl (hash: tAYLtLU1kPN8GUssK7gZDtHD+vEgdzT9NR6Hjd262cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:48:21:6d:c7:85:69:b5:60:bb:f7:c1:d3:65:6c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Validity
Not Before: Aug 10 00:01:20 2025 GMT
Not After : Aug 11 00:01:20 2025 GMT
Subject: CN=469560a4ad5fb487902e47bcb831da5a0f4c81ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:3e:e6:bc:8f:6a:dd:4a:2d:78:b2:4c:a3:
8e:3c:41:50:3e:34:fd:17:4e:88:12:01:34:e1:eb:
49:ed:59:c5:d9:77:af:21:7f:13:e7:10:ec:56:5c:
17:a4:66:dc:d5:73:9c:99:52:e6:68:f4:2d:64:28:
d9:a4:aa:36:fc:fd:52:ba:fc:e5:f6:b0:b2:d0:22:
10:96:e3:44:67:48:a5:c3:c6:ad:34:b6:c8:c5:fd:
db:e4:66:39:ae:6b:2f:aa:1f:b1:32:69:56:88:62:
68:5a:a3:3e:66:d6:01:9b:53:9e:ff:af:7a:4d:92:
96:0a:13:9e:5a:16:9d:1f:7e:eb:12:1c:be:57:5f:
23:40:7a:a7:2f:e9:0c:83:91:a4:81:60:44:1b:b8:
a7:a8:d9:2a:58:4b:16:76:f5:a0:03:91:aa:94:61:
f9:35:c6:b5:9d:ec:15:a1:eb:cc:7e:a5:b8:25:4d:
f9:04:c2:ba:32:7d:a7:88:b2:68:ca:61:7b:12:43:
ee:44:9c:82:2c:37:3a:b8:37:58:fd:8b:25:1b:b6:
7b:29:0a:3b:8e:ac:fd:da:6e:cd:5a:7f:e1:1f:b5:
bf:ba:fb:ab:6a:75:5b:a8:74:7c:79:a7:13:ed:77:
ef:d1:73:0d:05:b3:15:7e:27:f3:bd:c3:83:83:55:
79:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:95:60:A4:AD:5F:B4:87:90:2E:47:BC:B8:31:DA:5A:0F:4C:81:EC
X509v3 Authority Key Identifier:
keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:92:3d:db:88:11:4c:fc:dd:b9:05:9d:96:c5:09:97:3d:db:
0c:3d:b0:ff:41:cf:56:ea:98:4a:70:b9:e3:6c:72:70:a3:5b:
bd:aa:7e:d5:71:a8:4a:fc:96:11:13:4c:fd:ed:79:6c:f7:69:
a8:08:b3:9e:50:3b:f8:2a:68:6d:2b:7a:76:9a:0a:83:dc:dd:
22:67:1a:3b:c0:b7:ab:a4:83:3d:56:1e:d6:ec:39:41:e0:8c:
9c:c1:04:b4:68:27:ed:23:0a:2d:0d:4e:9a:76:91:78:da:8d:
4a:a3:67:f9:5d:bf:84:04:d1:66:bf:d3:e5:fd:5c:04:56:92:
97:83:bb:60:51:a0:26:e5:78:26:5e:ea:4e:bb:85:69:a8:16:
f1:06:86:f5:1b:69:b6:45:47:b9:aa:9e:35:0d:00:77:a7:2f:
30:a4:7c:ae:7c:94:34:74:5a:ef:bb:9e:69:83:7b:90:5f:f5:
3c:2c:e6:6e:04:d1:6a:b7:96:f1:0a:c6:1d:6b:8b:d4:ea:08:
ed:d3:62:54:b2:05:61:91:0e:93:e7:f9:fd:c3:b8:e5:b9:20:
f5:fa:1d:84:1d:65:bf:89:67:c3:3d:c1:03:95:6d:66:a8:7e:
1b:5e:6a:7f:63:26:7b:2d:00:8e:a8:ed:15:17:d1:fb:49:8d:
86:e5:04:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:01:09 2025 by rpki-client