Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
File: sDHiyoJMqNVWJAanAhrjwToUJdg.mft (raw, json)
Hash identifier: HHS9RviVeBQNphybMtHplqcx9WN0umx/JFKlB1jzT+M=
Subject key identifier: E4:36:53:0D:1F:6D:FE:6E:3B:28:2E:79:E4:5D:1B:A5:91:42:D1:3B
Authority key identifier: B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
Certificate issuer: /CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Certificate serial: 0197C8DDF072F6C2B3432EE64837FC8E3C14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
Manifest number: 15BC
Signing time: Wed 02 Jul 2025 02:01:17 +0000
Manifest this update: Wed 02 Jul 2025 02:01:17 +0000
Manifest next update: Thu 03 Jul 2025 02:01:17 +0000
Files and hashes: 1: 81hKxEsM-ATIhZx0nVrrb8xV2ZM.roa (hash: WpRdHBqETycwQ96u5D62eZXgBmAeqYPLVw7BxsplSoc=)
2: YJ0hIC0g4jRwPT2ffsWDri3U1BY.roa (hash: aRSOvWay4BgtDjCfPmINM1fcXP7qlHTJkbgxSvqFhJc=)
3: sDHiyoJMqNVWJAanAhrjwToUJdg.crl (hash: UCl4stm21rHzPxH1hH5WPWEV8sSxN99a63BqlMhF9kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:dd:f0:72:f6:c2:b3:43:2e:e6:48:37:fc:8e:3c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Validity
Not Before: Jul 2 02:01:17 2025 GMT
Not After : Jul 3 02:01:17 2025 GMT
Subject: CN=e436530d1f6dfe6e3b282e79e45d1ba59142d13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:60:9e:28:e3:cd:9c:23:7b:b0:94:04:fe:5a:
6c:21:07:30:5b:b6:57:8f:0a:b4:82:c9:fe:a0:cc:
64:7f:2c:a3:d1:6c:d3:c2:b0:e6:4c:a4:cb:4a:6f:
06:32:e2:46:f4:92:78:3a:64:eb:26:c1:88:fc:e1:
fb:d5:e7:2b:a4:83:6d:2a:18:46:7f:dd:37:cc:94:
3e:10:dd:ce:4e:01:b8:b4:c8:69:1b:7b:36:3a:d7:
5a:a7:c9:30:8d:ea:28:09:18:95:75:3a:04:26:ca:
d4:93:24:4e:6e:58:81:34:c0:2a:46:ca:ae:87:fe:
b8:01:19:59:7c:83:95:b3:87:c4:9b:b7:20:36:bf:
2a:2c:a1:5e:58:36:c4:6c:17:0a:d5:53:f2:41:76:
fd:fa:fa:81:de:43:35:3d:d9:ab:45:40:ca:bc:9a:
5c:a7:5f:c9:cc:fb:eb:c9:06:7e:c3:94:41:b8:24:
bf:69:b3:46:37:65:a5:ed:bc:a7:c8:5b:00:cc:33:
99:49:49:3f:7a:54:76:46:0d:3b:a8:b7:59:21:bd:
02:e1:7a:85:b2:c4:39:84:7b:ef:7d:b7:5f:4e:b3:
f0:2d:1f:70:26:c7:8c:92:27:f5:b1:f2:5b:7c:28:
82:69:b0:d0:73:33:d4:63:93:60:a8:82:7a:66:0f:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:36:53:0D:1F:6D:FE:6E:3B:28:2E:79:E4:5D:1B:A5:91:42:D1:3B
X509v3 Authority Key Identifier:
keyid:B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:56:1d:0a:b7:68:39:15:c8:72:94:74:3f:6c:63:42:f4:e4:
4b:b6:ed:a0:4d:3a:35:8f:b8:63:92:da:a8:15:d9:e0:83:cc:
9f:be:7a:ab:8a:60:fc:23:95:29:44:ee:10:2e:ab:4e:a3:33:
57:36:c5:d3:7e:c0:ec:0a:41:3b:08:34:99:4b:2b:f7:94:bf:
c9:b6:2b:27:40:91:68:0c:c4:9e:2f:ee:57:01:f5:33:02:e2:
06:c2:be:c8:7b:76:56:da:72:2c:92:12:bb:5b:9d:21:bf:2b:
d7:e9:4d:64:67:c8:3e:0e:a9:3e:af:7d:ce:ed:f2:ea:3b:bb:
55:47:20:45:86:7b:3f:db:ad:8b:2a:bd:0e:c1:6d:5f:7c:a3:
e9:31:1e:fb:77:11:8c:b4:c4:e4:60:17:2e:56:f3:27:f2:90:
30:c1:11:e3:cf:36:1c:06:66:61:be:ec:bb:5f:73:94:04:95:
93:bd:3d:f7:6a:40:ca:16:32:5c:12:ef:58:12:61:9a:41:88:
dc:89:a0:63:43:16:ad:0f:7d:e9:8a:b9:f5:b0:29:51:48:f0:
1c:44:d9:23:76:b2:4a:02:e7:68:b3:3e:3c:9a:7b:e8:72:2e:
16:7c:05:d9:5d:4c:d2:24:96:39:ba:45:49:2a:d8:a6:28:ff:
e0:d6:b7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:48:36 2025 by rpki-client