Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
File: REIuqj2u32uQIVnu2-lMqbfSKE8.mft (raw, json)
Hash identifier: 9W53gVXBQoJeKhqSrdCMm10B+zglQLM0/a3xENI/YzQ=
Subject key identifier: 16:15:FD:E2:60:79:E1:8A:FC:A4:CF:31:16:A0:25:E7:E0:18:8B:EE
Authority key identifier: 44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F
Certificate issuer: /CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
Certificate serial: 0197B7EA1BC10CBBF894A9437E6552C7EB3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
Manifest number: 0BE9
Signing time: Sat 28 Jun 2025 19:01:02 +0000
Manifest this update: Sat 28 Jun 2025 19:01:02 +0000
Manifest next update: Sun 29 Jun 2025 19:01:02 +0000
Files and hashes: 1: REIuqj2u32uQIVnu2-lMqbfSKE8.crl (hash: tlfiTpxtSmNewhO+DUmAQZ+BL5B/KlefkepHEZ1Z2pM=)
2: pkwPVsxSdYAUrwekUiCsSfEtBsc.roa (hash: VAoyCYorOSAEGcSFlO8mKuQLxbXXAWAO6ekhAMd8Fps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:1b:c1:0c:bb:f8:94:a9:43:7e:65:52:c7:eb:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
Validity
Not Before: Jun 28 19:01:02 2025 GMT
Not After : Jun 29 19:01:02 2025 GMT
Subject: CN=1615fde26079e18afca4cf3116a025e7e0188bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:54:7c:cc:37:14:a4:1a:aa:a7:ed:2a:28:
84:40:0f:23:ae:c4:f4:27:c5:cb:ea:31:a2:d3:39:
fa:b4:74:88:28:37:34:56:ca:11:4b:d2:b2:cc:ed:
94:73:23:ab:8b:d3:5b:d0:5e:f1:a5:79:cb:bb:24:
a8:a8:f8:e5:8b:68:6f:98:8e:e1:6c:c1:27:88:3c:
f6:55:5b:21:85:c5:9f:03:a1:6c:8a:03:9b:2f:ce:
15:4b:df:99:1f:19:19:15:f4:e4:bb:d0:8b:c5:60:
97:aa:f6:45:d3:62:3d:54:7a:b7:97:1a:9d:5e:75:
34:81:9a:73:e0:f8:ba:61:a8:41:e3:c8:0c:c7:c0:
e6:a5:84:c8:1e:cf:55:77:37:5b:75:f2:39:ba:aa:
cd:d8:47:cf:83:a5:e7:4a:4f:7d:76:3c:dc:56:07:
39:36:98:41:dc:c3:46:24:de:62:1b:65:04:5b:94:
e9:32:9c:8b:f0:8c:a0:36:03:64:53:82:50:0d:eb:
0b:bf:c0:0e:a7:1a:f0:c8:8c:96:7d:8d:7d:13:5e:
0e:67:72:63:fb:da:83:1a:75:4a:aa:db:07:c0:e0:
8c:d2:92:2e:7d:75:c3:51:cf:b0:e4:ce:68:db:6d:
6b:e7:63:09:9d:91:e1:21:79:af:2a:ae:34:5f:ce:
60:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:15:FD:E2:60:79:E1:8A:FC:A4:CF:31:16:A0:25:E7:E0:18:8B:EE
X509v3 Authority Key Identifier:
keyid:44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7e:05:3a:69:ec:95:73:76:b9:f9:03:d8:b2:e5:48:d9:82:
a3:5d:b5:f0:89:0c:5b:fb:65:fe:bd:1c:dc:da:44:8d:37:85:
21:cc:28:55:b5:f2:dc:ef:87:ca:b7:dd:aa:bd:b5:a8:2f:fe:
f3:90:b3:f9:51:35:a8:af:aa:1b:48:69:6a:9e:83:5e:f3:bd:
c3:b3:24:97:41:aa:a9:32:2f:21:b2:f4:15:99:99:0d:d5:72:
a0:88:ff:33:7f:89:63:b0:3c:f0:0d:05:d0:d2:e4:7d:58:a3:
48:4a:9c:ec:15:38:21:b2:78:e5:c6:b2:0b:d5:6b:01:43:f7:
ce:70:0c:0d:1d:ff:cb:67:c3:6c:c8:fd:2e:eb:d1:34:6c:e9:
13:a6:1b:0b:61:20:5a:5a:35:36:90:3a:aa:6f:f3:c1:96:4d:
23:22:97:6e:7b:ea:6a:48:4a:47:41:9a:39:1f:a8:f7:13:3c:
4e:19:3b:ba:4b:b3:d3:98:10:88:cd:bd:e2:07:8d:75:4a:17:
68:41:e4:cd:de:6f:b4:e4:a8:50:e7:8a:50:f7:90:b4:42:6f:
1a:58:9b:04:9d:a5:e1:d9:2d:00:b5:a7:b6:de:ec:f0:6f:4f:
dc:7a:0c:5c:ff:31:11:3f:30:6d:e6:e9:e6:e0:58:a4:ee:ae:
54:3b:1b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:05:56 2025 by rpki-client