Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
File: Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft (raw, json)
Hash identifier: +F/P0ealgBpNFSx/zVktvjqIgmkYES12yZjWHjpTrvw=
Subject key identifier: 7A:89:6E:17:49:6F:88:81:FE:B2:CB:A3:A8:62:D9:24:BB:1C:AD:1B
Authority key identifier: 19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
Certificate issuer: /CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Certificate serial: 0197B77C51E5E56529931CBDC74011197518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
Manifest number: 0664
Signing time: Sat 28 Jun 2025 17:01:07 +0000
Manifest this update: Sat 28 Jun 2025 17:01:07 +0000
Manifest next update: Sun 29 Jun 2025 17:01:07 +0000
Files and hashes: 1: Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl (hash: C7al5OVgkI1GboKe3rYWHABCfwpB4jLF505D/QflWT8=)
2: UDJ25qWD57Bw7FcU1JLbyObIuuo.roa (hash: DrbNben6Azyc3081NKjsbYp37NNjbptdcPBV8kesvaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:51:e5:e5:65:29:93:1c:bd:c7:40:11:19:75:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Validity
Not Before: Jun 28 17:01:07 2025 GMT
Not After : Jun 29 17:01:07 2025 GMT
Subject: CN=7a896e17496f8881feb2cba3a862d924bb1cad1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:ce:45:38:bf:88:a2:be:96:33:79:f5:96:
fd:f3:0a:3d:13:04:5d:ff:c0:ab:3f:d8:60:c3:6a:
c0:46:b0:95:77:23:e8:75:4b:05:ed:74:ff:08:72:
f5:2c:0a:cc:ea:ba:5d:f7:5f:4c:eb:ce:f0:50:02:
b9:1b:55:2b:7d:0c:78:2f:d1:8e:6b:60:0f:3d:c7:
32:81:32:51:eb:52:82:9a:cf:8d:8b:1c:97:49:13:
15:ca:70:28:23:08:28:25:c0:c9:67:53:1a:ee:57:
32:64:26:43:16:a6:72:97:cb:72:d1:ad:2e:2c:2b:
5b:bb:e5:1c:18:7d:e5:6f:d4:b3:5f:63:70:5e:b8:
07:25:4b:a6:56:47:b2:e9:04:27:03:38:26:2e:9f:
f9:cf:69:89:66:25:ab:ff:28:4a:aa:13:d1:01:49:
15:08:61:65:6b:6d:c1:c2:85:8a:80:a8:e3:1e:83:
53:ce:e6:82:fd:8b:50:c4:fd:c6:73:fa:fa:fb:f3:
b0:9c:27:c6:d9:09:09:0a:4f:e2:64:3d:9f:95:ec:
b1:0a:3c:f3:08:21:8d:68:c4:4d:3b:a5:6a:08:85:
94:ec:1a:75:1d:3f:e6:d0:c3:21:7b:18:25:9c:50:
e4:f5:3b:5b:40:79:ba:b5:83:af:4d:f5:68:dc:06:
8d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:89:6E:17:49:6F:88:81:FE:B2:CB:A3:A8:62:D9:24:BB:1C:AD:1B
X509v3 Authority Key Identifier:
keyid:19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:12:1a:32:64:8f:10:7b:e9:2f:cb:45:92:7c:89:4e:3b:ae:
10:0f:7b:0b:a5:96:90:02:bc:d0:f3:42:d6:a9:25:02:a5:17:
38:eb:65:c1:b5:bc:db:5d:d3:96:13:8a:e2:01:02:b4:3b:b7:
cb:70:65:89:9a:45:13:81:1c:30:7a:3e:5a:b7:8c:d1:bf:c7:
99:f2:ce:e4:88:7d:38:ee:49:42:e4:56:38:1f:c8:13:61:c3:
e8:13:bd:7b:47:8e:0a:56:af:0b:bf:4d:fb:53:2c:9b:0c:84:
cf:08:4d:e8:51:47:dd:56:da:93:21:06:fc:dd:38:9c:da:79:
9b:30:a3:a1:d4:cd:7b:15:03:df:e1:cd:f0:e7:3e:a0:4e:b2:
18:4e:fe:1e:d6:a3:0e:ed:8d:23:00:26:69:aa:3e:04:38:94:
b7:df:a8:10:c0:c9:eb:47:1e:84:44:bf:8d:ce:4a:61:0d:77:
c9:eb:a9:70:16:c8:48:3e:f7:fd:87:7d:65:7f:3f:94:f1:18:
c2:73:1c:cb:03:ad:7e:d0:57:f4:b9:99:85:a0:05:b7:38:b3:
c1:ce:1f:16:e2:4d:6a:03:5d:7c:a1:b6:f4:5f:46:6e:bf:b4:
84:d4:41:b1:f0:7f:94:6c:b5:75:54:db:9d:7c:b8:e9:20:d9:
03:b8:58:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:33 2025 by rpki-client