Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
File: sA4l9V67rLBp8QOssIZnA4Nc_M0.mft (raw, json)
Hash identifier: eiuVM+p06Fzc+SYCIdz7QOT3+ekwLTu+b6c2/RI2UIY=
Subject key identifier: 70:5E:F6:CD:20:89:4F:A9:04:7A:9F:71:F5:28:DF:0D:20:8C:35:90
Authority key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
Certificate issuer: /CN=b00e25f55ebbacb069f103acb0866703835cfccd
Certificate serial: 0197CA272FF273F058DD58E0D70A2C30A2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
Manifest number: 11CB
Signing time: Wed 02 Jul 2025 08:00:55 +0000
Manifest this update: Wed 02 Jul 2025 08:00:55 +0000
Manifest next update: Thu 03 Jul 2025 08:00:55 +0000
Files and hashes: 1: IQVuYRD39w1eDGvQI5n6qd53zJ0.roa (hash: YMuLKblQhuUFH21p6Ke9CEB5Y7GrJ0BpmU+txXFqoC4=)
2: sA4l9V67rLBp8QOssIZnA4Nc_M0.crl (hash: IFAuheHkgvhTPzroBaEAHIYt10NWrKyBtDYfwAb6mUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:27:2f:f2:73:f0:58:dd:58:e0:d7:0a:2c:30:a2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00e25f55ebbacb069f103acb0866703835cfccd
Validity
Not Before: Jul 2 08:00:55 2025 GMT
Not After : Jul 3 08:00:55 2025 GMT
Subject: CN=705ef6cd20894fa9047a9f71f528df0d208c3590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:5c:85:35:c4:06:00:33:a5:dc:eb:d9:e6:
d0:77:aa:e7:8c:7f:12:41:12:d6:27:8a:21:af:8e:
c6:ab:d0:09:ef:e8:13:26:04:86:b7:85:37:7b:ee:
08:88:34:37:8c:45:e6:1c:19:87:f9:26:d5:e3:7f:
04:1a:44:c6:ec:d7:9c:d3:f6:51:b0:81:56:49:4a:
a0:f6:87:35:02:8c:a3:36:18:7d:d7:fc:24:50:a5:
38:b9:4c:fb:f5:d0:70:d0:7d:26:8c:50:c2:3f:b0:
44:b5:38:d8:79:f3:17:27:90:3b:03:f2:63:ff:e9:
7e:6e:32:0e:b2:ad:09:98:11:7d:ad:3a:c0:4f:4a:
16:b7:42:29:b1:2c:0e:c2:0e:e5:e2:9d:0f:3a:82:
b4:95:08:ec:ad:d7:cc:fe:25:b2:8f:86:e9:1c:16:
27:ba:4c:e9:01:c7:74:fc:b3:db:21:9d:9d:c9:6d:
c5:79:fa:fe:be:73:38:e2:ed:1e:f6:bd:40:16:05:
4b:0c:0e:7e:1d:d1:41:52:8a:bc:c5:c3:fb:df:a0:
d1:81:4a:e8:3a:e7:ac:2a:50:97:26:01:a7:2b:49:
03:75:2f:c4:6a:12:58:6d:ad:67:4e:cf:7d:6d:3d:
7f:5c:fe:44:06:b7:d5:27:21:a2:cb:18:11:62:44:
1d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5E:F6:CD:20:89:4F:A9:04:7A:9F:71:F5:28:DF:0D:20:8C:35:90
X509v3 Authority Key Identifier:
keyid:B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7b:48:0c:67:22:85:42:02:78:2c:c4:26:84:61:78:78:5f:
0f:33:00:ed:cb:1f:45:50:c5:f1:d6:83:27:7e:79:d4:21:29:
17:c0:7b:6e:c3:00:59:08:7c:16:c1:7e:27:ef:22:f8:5b:8b:
18:44:94:72:15:65:80:34:ff:3c:e8:5a:08:33:bd:5a:ea:09:
6f:dd:36:4c:85:c1:8e:21:d1:d1:5f:3e:57:4d:16:9a:03:2f:
84:f9:06:4a:15:2b:ec:c0:0e:29:56:5a:1a:6d:df:0d:7d:5f:
fb:b2:8f:b2:7e:2d:1f:44:8f:0e:59:ea:49:2b:61:14:7b:f6:
3e:64:07:dd:13:22:54:3d:7e:b8:6a:11:83:43:d1:bf:4a:a6:
9d:a6:f3:c1:ba:71:5d:a7:20:0f:c5:3c:71:f7:a7:ef:33:63:
79:ff:5e:cf:1f:98:fe:bd:9a:8a:12:96:45:55:8a:f3:f8:2c:
76:83:16:ae:c5:1e:57:7d:d5:16:ff:fe:e3:8b:31:d7:16:fb:
2b:db:6d:02:fd:1b:0f:52:03:6d:2b:df:ca:09:ec:ca:2b:b2:
11:21:1c:7b:04:5d:4c:aa:71:3a:c0:84:68:d4:06:11:94:50:
e9:4b:7d:3d:01:f7:6b:14:53:88:18:ef:15:1c:2c:bc:c8:72:
e8:31:95:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:46:27 2025 by rpki-client