Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
File: rZr63kGDroAEjWuEgY7sRvaA-iY.mft (raw, json)
Hash identifier: 23UACEfUOOTLrzr7IE5WWlSN31CLvIyDQAyRdK7E0JI=
Subject key identifier: D8:EF:C1:6D:D4:31:31:A4:C3:5C:F7:78:2A:3A:BD:93:8A:C8:9E:FE
Authority key identifier: AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
Certificate issuer: /CN=ad9afade4183ae80048d6b84818eec46f680fa26
Certificate serial: 0198857AB29CF5E55C5E02D79EB6D3D1C6E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
Manifest number: 1453
Signing time: Thu 07 Aug 2025 17:01:07 +0000
Manifest this update: Thu 07 Aug 2025 17:01:07 +0000
Manifest next update: Fri 08 Aug 2025 17:01:07 +0000
Files and hashes: 1: dHcu1Xe1bMDTNim9SJl30JSk4hI.roa (hash: qRzLbHq22DmrTaMRCm+OCQCo4sWL5SJUeqY8R0TqngI=)
2: g1AtdX4-A4stQRdXTWV50haWr_U.roa (hash: SfjbeTWsFCpHADmiaD0ANERB3vzQ++Aj8Swnoj6lsUI=)
3: rZr63kGDroAEjWuEgY7sRvaA-iY.crl (hash: /uLunIWqqSg5mtw76f13TcJ8OXFomnOwdOZkjkd38IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:7a:b2:9c:f5:e5:5c:5e:02:d7:9e:b6:d3:d1:c6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9afade4183ae80048d6b84818eec46f680fa26
Validity
Not Before: Aug 7 17:01:07 2025 GMT
Not After : Aug 8 17:01:07 2025 GMT
Subject: CN=d8efc16dd43131a4c35cf7782a3abd938ac89efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:36:b2:c1:04:8a:20:4a:bd:f8:14:ef:24:0b:
d9:c0:52:09:0f:c9:c5:40:ef:9e:20:c4:0a:12:d8:
ca:4e:f6:e9:f3:86:88:e8:87:7b:6a:7e:4a:c5:25:
a8:90:7b:61:20:40:fe:a4:9d:9f:5c:ad:19:b1:af:
b8:5d:8e:f3:08:93:b1:78:04:7f:95:0e:5c:28:53:
32:1f:f8:05:c3:65:3b:32:8f:64:50:ef:5a:05:aa:
63:91:70:2c:12:f8:95:56:4c:3d:2e:18:1f:89:db:
14:96:17:99:f2:10:49:36:ae:84:29:1e:d7:8a:fd:
c2:f8:94:50:ff:54:94:66:20:61:c4:2b:a5:89:d3:
45:d2:b7:f4:7b:a5:9b:2c:6b:01:de:8c:43:bb:76:
c9:fe:8e:6d:ef:be:37:32:1c:e5:41:bc:ca:9d:85:
91:ad:b4:9e:80:9e:31:f7:b6:c1:d7:1a:3a:94:dd:
22:04:da:82:39:97:1b:62:e0:9f:91:00:a1:60:aa:
aa:bf:0c:b2:fa:a8:6a:7b:c8:f1:dc:fa:09:52:4a:
bb:23:91:58:e1:3a:56:3a:94:75:65:3b:c9:4a:d0:
4e:a1:8f:b8:52:13:86:18:44:e6:78:8a:70:6d:dc:
73:6a:3f:e5:cd:15:45:24:d9:5a:62:3b:f7:e9:c9:
8e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EF:C1:6D:D4:31:31:A4:C3:5C:F7:78:2A:3A:BD:93:8A:C8:9E:FE
X509v3 Authority Key Identifier:
keyid:AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ad:81:8e:f9:ac:d9:91:9c:2a:dc:89:46:7c:44:dd:b3:f0:
8d:fc:41:71:e6:89:76:c6:5c:87:bb:85:92:bf:d3:94:98:b5:
f0:c3:4d:d1:b7:c3:4c:59:79:ab:42:6a:78:7c:9b:f1:e8:ad:
1b:6f:a5:fd:eb:65:b4:48:08:0b:e1:6d:1b:27:1c:0d:f7:54:
81:4a:26:46:10:39:5e:70:c7:69:12:a8:47:96:16:4c:04:48:
51:8e:22:38:c6:6a:21:03:7a:03:ba:4b:37:51:ba:b5:02:c5:
94:0d:0b:3c:ba:50:66:20:ca:4d:78:23:58:14:9c:ea:59:84:
a6:4d:b5:bb:cc:1e:22:18:6f:5f:76:06:2d:c9:2c:66:e3:1f:
e5:5c:d3:4f:17:63:f4:89:65:55:69:46:e6:91:a7:eb:8c:9e:
16:a4:c0:a6:46:f9:ca:fe:40:00:74:0f:56:c9:f5:3c:7a:58:
15:5d:f4:f0:cc:dd:bf:6d:a0:6b:08:47:2f:f6:af:51:ac:0f:
25:48:3f:74:3f:08:d6:9f:cc:fa:41:38:87:de:33:43:d3:79:
d2:30:c7:99:d3:da:bb:92:9c:37:ba:9f:bb:21:f0:f0:5a:1f:
f2:d3:66:b1:5a:44:12:34:a2:09:47:ed:df:76:45:a7:cf:86:
92:5d:22:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:10:55 2025 by rpki-client