Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
File: rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft (raw, json)
Hash identifier: 5iV+TkrJu2vcf+cK5mjoegfUmPZHPcpupdo+tIXNMcg=
Subject key identifier: EF:18:15:E4:71:1E:60:7D:0C:69:F7:44:65:66:80:B9:A1:FB:1E:0A
Authority key identifier: AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
Certificate issuer: /CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Certificate serial: 0197B74596FA7C45F071462B6E07B36F58E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
Manifest number: 0760
Signing time: Sat 28 Jun 2025 16:01:20 +0000
Manifest this update: Sat 28 Jun 2025 16:01:20 +0000
Manifest next update: Sun 29 Jun 2025 16:01:20 +0000
Files and hashes: 1: rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl (hash: gEfJlBryp26E/S+PGBtnt1eCPy+Hr2UiQXAxUuR8lbY=)
2: saC2CSGHzjfoqz_AyeGRfbO_Z4c.roa (hash: evXXOhKr0k/9XMT8MxumeZizzHV0YoG5/EuRYGW5sl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:96:fa:7c:45:f0:71:46:2b:6e:07:b3:6f:58:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Validity
Not Before: Jun 28 16:01:20 2025 GMT
Not After : Jun 29 16:01:20 2025 GMT
Subject: CN=ef1815e4711e607d0c69f744656680b9a1fb1e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:21:32:87:85:11:e2:09:75:63:d9:a7:b8:
bf:00:27:31:b9:44:35:29:18:31:fe:75:f7:41:04:
22:05:7b:e6:a3:d3:e4:1c:78:12:a0:a1:51:06:03:
d7:74:95:cb:d1:c6:1b:08:28:63:e0:71:11:ec:dd:
cb:bd:30:a4:aa:78:af:25:8c:a5:fe:90:84:7a:df:
63:94:f9:71:c6:ee:e9:4a:76:94:49:00:a3:e3:50:
80:ce:e6:98:79:4a:53:fb:9a:93:66:03:ec:59:7a:
c7:89:03:a9:59:e8:54:63:35:45:7c:18:1d:b6:8d:
10:46:f5:ce:9f:1f:42:b2:cf:4c:17:01:5c:8a:40:
35:4c:09:e0:19:e8:f5:c4:89:05:79:26:99:81:15:
cc:4e:64:18:18:70:e3:2e:a3:9d:f0:2a:3a:19:25:
43:7c:12:5a:d1:0c:2a:28:bf:76:fc:db:00:4e:6c:
f6:56:9f:7f:b7:85:65:11:78:a7:0b:f5:f2:ff:fe:
ea:32:92:3e:9f:61:95:1d:7d:3e:6f:65:b9:f0:50:
9e:14:5d:d4:d7:96:64:82:9f:c3:b1:7d:66:30:de:
15:cd:0b:8f:53:30:09:ab:ad:a3:d6:1a:e9:9a:ca:
58:b7:8c:b3:8e:cf:01:f3:78:f2:65:43:e8:54:75:
c8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:18:15:E4:71:1E:60:7D:0C:69:F7:44:65:66:80:B9:A1:FB:1E:0A
X509v3 Authority Key Identifier:
keyid:AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1a:1d:1a:54:2d:1e:78:b3:f4:9a:3e:bb:b1:8a:01:03:25:
9f:5e:ef:e5:ef:71:f0:4a:f7:6d:55:7d:3d:a2:78:3f:39:fc:
ba:77:0d:02:ec:04:4b:0a:d3:03:a1:1e:b7:7a:90:e1:dd:c8:
80:3f:ff:7e:8a:4a:71:c0:16:72:3d:42:f3:19:db:ed:03:d4:
ed:6f:5c:fa:c9:bd:09:fd:02:6b:a9:09:59:7f:65:cd:27:53:
1d:8f:b4:01:5b:01:14:17:5f:ae:22:d3:98:e7:a7:8b:88:9d:
d4:42:e2:3f:7d:27:d6:d6:ab:50:cc:9b:d5:29:1d:ba:36:58:
cd:ae:80:90:5f:7e:dc:6d:8f:ce:2d:0a:5b:64:a7:c4:84:db:
c2:2a:28:4c:6d:b1:6c:02:bb:2f:e7:dd:b9:d8:45:ba:7f:64:
f1:a0:65:3c:3d:f9:2f:ee:33:2a:f5:e9:68:86:69:b4:cf:54:
9d:2a:38:c8:b7:3a:7f:c3:b9:e6:79:56:57:e4:c4:01:0f:41:
53:08:75:a3:1d:b1:28:75:29:0f:3c:c2:f5:a7:44:ff:95:36:
36:01:93:18:cf:ff:66:23:ea:dd:c1:bc:ab:eb:81:83:fd:91:
40:3b:fc:d0:7f:48:06:b7:bc:dd:43:ba:f8:b2:ca:c7:ea:d1:
64:f3:9f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:36 2025 by rpki-client