Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
File: inuFwxZYaxmdJr_Ej-JZiTnLb94.mft (raw, json)
Hash identifier: YSUD9VD1VHzYU4G/8gf42JMZ5u698CPvNbIyeVIBXLw=
Subject key identifier: 50:9F:D3:0E:40:B4:48:82:9D:48:D0:E2:51:2D:4E:1E:74:47:D8:57
Authority key identifier: 8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
Certificate issuer: /CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Certificate serial: 0197CB02F28E0A0124442453A4CF1A124871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
Manifest number: 15BF
Signing time: Wed 02 Jul 2025 12:00:57 +0000
Manifest this update: Wed 02 Jul 2025 12:00:57 +0000
Manifest next update: Thu 03 Jul 2025 12:00:57 +0000
Files and hashes: 1: TTn8sD8XVXKDyT7akuDl-7NaiVA.roa (hash: G+wfHyyl2e/lbOKV3OV3aaADlcnryO/8kE2PLZtYozg=)
2: inuFwxZYaxmdJr_Ej-JZiTnLb94.crl (hash: 92Xxy4GwG3kZ16xQx3c8tqsVYOX9mzmSymreClMlNG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:02:f2:8e:0a:01:24:44:24:53:a4:cf:1a:12:48:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Validity
Not Before: Jul 2 12:00:57 2025 GMT
Not After : Jul 3 12:00:57 2025 GMT
Subject: CN=509fd30e40b448829d48d0e2512d4e1e7447d857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e6:c3:92:1c:85:ec:24:9f:37:29:66:89:34:
d7:f6:da:12:93:ce:51:99:56:52:1d:0f:dd:d3:c4:
94:23:85:92:bd:88:1d:c0:bc:92:74:3d:0b:2b:57:
7e:40:75:d9:ec:f6:95:f5:2e:6a:48:d4:ca:48:be:
e9:a9:2b:da:b3:09:ff:57:b8:42:a5:b1:fd:8a:16:
20:0a:9a:31:d6:5b:67:31:a9:03:0e:07:c0:b5:b6:
c6:eb:a8:07:a7:a0:6e:66:76:1d:5f:9b:a8:18:0d:
fa:a6:e5:37:fa:51:f2:b2:4e:cf:91:a2:44:44:0e:
80:59:13:c5:57:49:d6:57:c5:5f:f3:e1:50:cf:cf:
52:fa:bc:2a:7a:c2:55:79:dc:ca:f5:2a:a1:75:0d:
a4:62:6e:b1:2b:68:5b:19:cb:7c:0f:84:55:b2:db:
29:73:41:a7:0d:fb:f9:16:43:9d:a3:4a:58:79:4c:
9c:31:18:ca:f1:52:f6:4c:7f:39:66:8b:c7:6e:e6:
57:ac:de:03:22:38:f6:46:c9:fa:1b:e4:d2:73:51:
72:72:e0:08:fe:50:9a:c4:0a:6b:11:11:aa:bd:67:
03:ab:53:99:85:07:94:c0:c8:85:ea:9c:ed:d4:91:
f0:32:3c:7e:19:a3:42:75:5a:ae:55:f9:ac:3f:2d:
55:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9F:D3:0E:40:B4:48:82:9D:48:D0:E2:51:2D:4E:1E:74:47:D8:57
X509v3 Authority Key Identifier:
keyid:8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bc:4f:13:0a:01:2b:af:ef:dc:e6:b4:d2:8e:c3:db:70:ec:
88:e4:83:f2:9b:0b:69:14:b8:e0:af:b9:a0:d8:d9:f3:a4:ce:
ed:d4:1a:6c:ef:fb:33:5d:1d:f1:2c:5f:41:e1:36:c1:64:f7:
f1:c2:1d:e4:7f:65:dc:5d:80:4c:d6:33:9c:f5:36:df:5b:8a:
e4:af:8a:d5:40:ab:98:9c:a9:99:c9:fa:94:4a:c8:17:ff:ba:
1d:6a:5f:2d:87:c3:6e:73:0a:53:fb:78:82:25:b8:ce:0f:b0:
9e:b6:cf:64:54:68:c4:96:56:9b:3e:e9:33:c9:c3:c3:93:04:
ee:73:b3:b3:a0:59:b2:ed:12:76:79:83:89:78:23:cf:fb:90:
34:c9:aa:5b:d4:77:5b:cd:d7:8f:8d:f0:17:8e:32:b9:e8:02:
25:60:02:c2:36:3f:e4:99:c2:e4:74:22:8c:a8:16:7e:62:6e:
95:b1:67:8a:35:9e:70:1e:db:4f:72:fd:0b:ec:92:7e:4a:48:
93:11:64:2d:5d:06:31:3f:62:bf:a3:5d:bc:cd:90:6e:6c:45:
e4:42:87:6a:df:90:da:29:69:42:ac:45:14:f3:ea:28:c1:94:
c9:27:45:07:f8:2e:d9:e4:51:9a:e9:1c:8a:59:7d:16:48:fb:
f7:a0:90:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:37:32 2025 by rpki-client