Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
File: _ASHoE9apEK-UZoXyyuyLXg98js.mft (raw, json)
Hash identifier: MYMleK4FshYpBJN7gAgRqppWXXsB45024vtlUgQfNBE=
Subject key identifier: 89:52:2E:3C:4C:BC:DE:A1:B9:68:46:F8:58:70:7B:1F:FB:0D:D0:86
Authority key identifier: FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
Certificate issuer: /CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Certificate serial: 019873E269A93A611C9B208C10FD9637AA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
Manifest number: 1198
Signing time: Mon 04 Aug 2025 07:01:14 +0000
Manifest this update: Mon 04 Aug 2025 07:01:14 +0000
Manifest next update: Tue 05 Aug 2025 07:01:14 +0000
Files and hashes: 1: TWYnB52Oavk9789kFBH_TtsFA20.roa (hash: Lo6TIcgKkzIrKcc1K5udX1XvguvwpolYTItBn5Pxknw=)
2: _ASHoE9apEK-UZoXyyuyLXg98js.crl (hash: 9ugT8gnOgbDUgWoyHjLYQao9mOXKA24UuPIUHiIke8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:69:a9:3a:61:1c:9b:20:8c:10:fd:96:37:aa:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Validity
Not Before: Aug 4 07:01:14 2025 GMT
Not After : Aug 5 07:01:14 2025 GMT
Subject: CN=89522e3c4cbcdea1b96846f858707b1ffb0dd086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:60:c8:a1:ab:06:06:a1:62:3d:99:75:a2:13:
35:7e:dd:d9:90:42:e8:ca:17:cd:a4:44:f4:97:e7:
0d:8e:0d:93:29:f1:2e:7c:fa:ca:30:f6:97:82:9a:
cb:74:0a:14:c9:cf:d5:61:ce:54:f1:0c:c1:32:38:
36:d2:b5:b1:7f:dc:34:72:59:d6:e5:00:6c:3f:ad:
ed:ce:2c:4d:1b:d6:9d:89:0c:fa:0e:07:33:59:a3:
ce:eb:47:82:6c:81:5b:fa:f1:c3:36:31:29:68:7c:
05:c5:69:e0:7e:47:16:a3:e3:c6:28:6f:6c:15:35:
51:e4:29:e4:c4:58:1f:dc:90:fb:a7:0e:bc:ff:d7:
9f:27:74:4e:8c:c2:ed:e3:b3:ac:f4:47:db:47:a9:
a7:76:02:bf:7a:78:bb:13:10:27:a8:a7:9c:71:69:
40:c6:99:fb:0e:43:49:9f:26:d8:fc:1b:19:c9:03:
ad:c7:9d:71:4e:60:2c:70:af:08:fb:d2:c3:ee:74:
f5:b1:ab:a1:e5:e0:6c:43:dc:ac:9d:02:39:47:a3:
f3:0e:c0:03:46:33:b9:b1:17:9d:7f:69:8b:6c:62:
10:a5:c4:56:01:cc:97:20:c7:2d:bd:f5:3a:df:e5:
f4:99:3b:a8:f0:6e:5d:c5:42:6c:4b:21:04:b4:ca:
10:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:52:2E:3C:4C:BC:DE:A1:B9:68:46:F8:58:70:7B:1F:FB:0D:D0:86
X509v3 Authority Key Identifier:
keyid:FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d7:ac:0f:c2:a7:3a:df:1a:3c:40:a2:27:25:70:ec:60:f2:
5f:e1:19:7c:de:67:42:6a:1e:82:fe:43:64:1d:4a:0b:da:f0:
b2:54:38:cb:75:6c:09:29:02:8a:bb:df:43:f7:49:0a:a2:2f:
86:7c:1d:59:d0:50:95:5d:05:ca:3d:f8:77:f5:25:45:c5:0d:
d5:2b:b1:2e:05:be:ee:9c:f8:cf:9e:c7:77:21:30:dc:be:25:
ac:7c:6e:37:1e:97:8b:6e:a7:92:e5:b9:e9:27:99:c1:e3:0f:
27:ad:e0:44:09:4b:9f:4f:32:f2:68:cf:ee:69:b9:ad:48:ee:
b9:31:69:ee:4b:a7:c9:90:74:b5:0f:87:63:db:d5:38:01:f3:
8e:cb:3d:6a:90:12:c8:94:74:92:14:fd:30:46:32:b7:c6:f9:
19:5b:48:9b:ed:03:ae:f5:b7:bc:26:7a:14:3b:30:b9:e0:51:
27:b6:e4:2f:6c:59:1c:c7:c2:56:e6:36:52:5a:04:e6:d2:9a:
be:89:20:10:28:8a:34:dd:c3:49:fd:a4:68:7c:05:b9:13:c2:
ac:47:b1:1c:1c:f6:d7:ef:28:2e:82:f3:5a:2a:68:d5:01:39:
27:9b:b0:c8:ee:b8:55:5e:e8:bc:dc:8a:c8:e9:58:c9:8d:ce:
5b:56:7f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:37 2025 by rpki-client