Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
File: e0fNwhx8siRnTA6v3sY6ID7uMQg.mft (raw, json)
Hash identifier: 4e/2hQ3YDzuoc9OH/FlhTNXHTh8XVFQL9/e/Ifa5Wq4=
Subject key identifier: 91:80:7E:4C:0D:FF:69:80:3B:AD:AF:C3:29:58:D0:D4:C2:26:30:81
Authority key identifier: 7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
Certificate issuer: /CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
Certificate serial: 0198D77384E04C914CBAED35E24E134ACA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 15:02:08 +0000
Manifest this update: Sat 23 Aug 2025 15:02:08 +0000
Manifest next update: Sun 24 Aug 2025 15:02:08 +0000
Files and hashes: 1: _d9TqHUt6Akn4mIp9hun4eZSvDY.roa (hash: E+7eG5ZCI82NV5+vYe7SeDuuzqJipfHrlwV+FyH2KQM=)
2: e0fNwhx8siRnTA6v3sY6ID7uMQg.crl (hash: dNCEHy0gAFOufRpQlVDz/a3MDs3Y3DmrWIhKu1gp7Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:84:e0:4c:91:4c:ba:ed:35:e2:4e:13:4a:ca:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
Validity
Not Before: Aug 23 15:02:08 2025 GMT
Not After : Aug 24 15:02:08 2025 GMT
Subject: CN=91807e4c0dff69803badafc32958d0d4c2263081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:b4:50:db:b9:c7:1a:90:40:ae:a6:60:df:
37:65:fe:e6:8f:02:16:8d:22:81:33:f7:e8:04:cf:
f8:6d:10:62:65:ec:aa:b2:87:de:78:fb:08:f9:4d:
9a:0c:90:bf:d9:8b:c5:a4:d6:41:89:3c:e4:11:a1:
3f:bf:73:2d:14:4f:ee:ab:a2:21:70:33:09:c4:d7:
c4:bf:60:18:ec:ce:99:67:0f:47:51:89:67:0e:e0:
cb:5c:71:5a:a9:a9:3c:b4:7e:f1:cc:09:b7:a5:f6:
69:e7:9f:19:49:13:51:47:85:6e:3e:a5:40:19:7b:
fd:17:e3:0f:3d:73:ce:31:f9:af:67:05:2f:3d:6b:
5e:7d:57:2d:d1:f5:84:21:cc:51:2f:01:d5:56:39:
19:34:b1:dc:b2:bd:0e:7c:2b:f2:9c:3d:fb:b0:ed:
aa:45:75:3f:5d:a1:ea:d6:c0:d4:c8:b3:f5:f3:fb:
63:8a:4b:d3:ce:3b:95:ea:18:b7:b7:05:6b:3a:5c:
41:a3:7f:98:8b:50:cc:74:d5:f7:a8:b5:bd:a8:f0:
f9:4e:00:c3:48:56:ff:c1:af:68:ac:0c:e0:5e:8e:
40:df:73:fe:f0:c8:f9:45:eb:bc:f9:2a:97:03:6e:
18:9a:64:6b:d2:2a:bd:1b:05:67:3b:48:de:3a:d7:
b4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:80:7E:4C:0D:FF:69:80:3B:AD:AF:C3:29:58:D0:D4:C2:26:30:81
X509v3 Authority Key Identifier:
keyid:7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:59:a1:ca:0d:63:be:21:1c:3d:a7:a7:52:78:eb:01:08:96:
b0:ee:26:f8:e1:9a:b8:48:d6:33:85:d0:39:11:36:e8:18:73:
b2:5e:75:e4:1e:b6:69:b9:a7:bd:9a:1c:a4:0d:32:5f:fb:3c:
a1:c4:21:52:79:7e:90:23:f1:f7:6b:3b:40:96:58:b4:cc:3e:
fc:e9:36:ca:cf:f3:9d:48:81:10:e8:f8:61:b7:3f:53:ee:5d:
6e:01:38:be:96:db:cf:b8:32:6c:80:ea:31:9f:46:d1:31:aa:
eb:de:6c:23:c7:d0:19:28:f8:47:36:9e:2d:7b:dc:8c:b3:5f:
98:02:8a:2d:7b:ac:09:6d:e1:75:fe:9f:63:39:49:2e:70:e4:
d0:e9:c3:5d:60:fc:21:97:36:3d:1d:7b:06:28:cc:a9:15:6d:
69:5c:ce:bf:e4:5c:78:83:bc:aa:cb:f8:1d:e2:d4:65:a5:20:
de:c6:b7:e0:d0:6a:44:f2:a7:19:09:c1:c0:a5:06:70:cd:25:
0d:8a:fd:a1:48:e4:5c:60:65:3d:89:65:cd:de:54:09:e3:5f:
41:2e:76:68:59:d8:20:d5:24:39:aa:5a:b6:54:a1:fb:0a:90:
53:ec:da:96:47:80:5d:dd:64:18:23:80:92:ce:b7:3d:76:db:
94:80:44:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:27:11 2025 by rpki-client