Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
File: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft (raw, json)
Hash identifier: RLW1NhJ3mQ29B7xrwOZF63HPS2LsiO5wAwB9LEXyZwQ=
Subject key identifier: E0:45:0F:D7:6B:31:99:00:DA:0B:55:25:B9:2D:1C:15:3C:C1:90:E9
Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
Certificate issuer: /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Certificate serial: 019872CFBEA7C5A95A79649E96044C2CBA4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
Manifest number: 0A53
Signing time: Mon 04 Aug 2025 02:01:14 +0000
Manifest this update: Mon 04 Aug 2025 02:01:14 +0000
Manifest next update: Tue 05 Aug 2025 02:01:14 +0000
Files and hashes: 1: IDl9kroYhzoJI3fNYZt14M849Mw.roa (hash: QNB7O1WZxj1n2YGUs6WaUGgoWKZNY20yWJ5q+ijsbDA=)
2: ba5LTz6E_24Z-FWHvFExip3Bfu8.roa (hash: 78/BEK6gt2JG+WEEQwBhHL/YE4AHR9z4L0gDnYa5BSM=)
3: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl (hash: DkJ+ZHFc9Wt0UV72fPyyLsyU6C0jkw1V+iegwIGy5vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:be:a7:c5:a9:5a:79:64:9e:96:04:4c:2c:ba:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Validity
Not Before: Aug 4 02:01:14 2025 GMT
Not After : Aug 5 02:01:14 2025 GMT
Subject: CN=e0450fd76b319900da0b5525b92d1c153cc190e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:b3:75:60:f5:8f:5c:7f:e9:47:68:bb:f6:
a7:55:9c:da:45:4e:05:68:77:27:16:50:5c:94:55:
8b:ce:b5:ad:b9:d1:60:00:0f:b4:28:09:84:d9:93:
dd:e8:27:96:6d:d0:eb:29:d8:1b:d4:df:25:f0:aa:
79:4a:36:d6:c2:aa:04:9d:e8:4d:e1:a8:d5:fc:4e:
4e:0d:bf:6e:da:91:2e:09:0c:5e:80:81:25:c0:b0:
78:ff:9b:22:6b:24:6f:3e:47:11:7c:ea:22:e4:64:
ec:e9:c7:63:39:53:1d:fb:b9:22:b2:82:d4:fb:2e:
5e:bf:d1:0d:9c:5e:56:95:14:07:11:f9:e9:47:d8:
5d:27:2b:fd:e2:43:de:76:6b:01:5b:19:ac:66:a6:
1c:81:2c:09:3f:32:c6:c9:07:54:78:ca:5b:d2:e7:
52:a3:61:ed:c1:d2:5a:a8:8f:23:39:72:87:9d:f6:
cf:97:43:56:95:29:26:c3:cf:df:1e:13:6b:b3:65:
e4:84:f1:06:e1:a5:5c:7a:ad:3b:39:82:1a:a9:9c:
80:0f:35:16:aa:4d:db:16:5b:eb:87:c6:80:a7:07:
7a:ea:8f:2a:b7:0a:4d:e6:02:9b:4f:34:c7:14:d0:
22:d8:0e:1f:d3:0c:a1:70:67:e4:2c:eb:1f:74:22:
ae:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:45:0F:D7:6B:31:99:00:DA:0B:55:25:B9:2D:1C:15:3C:C1:90:E9
X509v3 Authority Key Identifier:
keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e8:25:ab:93:10:7e:f9:0e:ab:8a:bb:93:ff:7d:c7:9f:a2:
23:31:93:a4:29:cd:05:38:8e:34:13:2d:f1:25:89:cd:4f:01:
34:3e:d3:9f:75:8f:76:cf:02:b4:e1:d2:fc:08:fe:b7:4c:be:
f1:ec:ca:7c:43:2c:4f:4d:6e:04:0c:23:94:33:77:d9:cf:90:
85:98:61:cc:21:80:f8:6f:0c:a7:12:28:2a:81:1d:b5:ef:52:
80:94:6f:11:35:87:e0:c0:a6:2c:38:4f:71:75:4f:c9:75:db:
dc:7f:5c:a2:12:be:6f:44:5a:ea:80:ff:5a:cb:00:5b:f7:9a:
fb:e5:90:bb:8e:be:2d:73:d3:ab:24:b6:f9:08:47:01:3c:df:
2a:f8:bc:e8:aa:06:05:89:29:15:a3:a4:f0:69:13:9a:bf:21:
ac:99:39:72:58:5f:a4:f2:bc:a8:c2:32:01:bc:68:f3:cf:b1:
ec:48:31:50:34:0a:15:ad:90:55:87:75:64:b4:71:c5:8e:f8:
6e:12:4f:1f:4b:5f:c2:a5:8b:39:1b:54:11:b1:1e:47:70:52:
df:64:69:5c:ab:c1:22:75:48:3e:2a:f4:ac:7e:01:86:87:2c:
f1:99:09:59:a8:cc:e3:53:d4:be:2e:ee:85:42:36:ce:b2:80:
15:79:ec:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:55 2025 by rpki-client