Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
File: rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft (raw, json)
Hash identifier: zbgND4taaeN+Ppr4xh7tETKTbktd+NPPYmOkXTkQ7u0=
Subject key identifier: C6:FD:45:85:1B:18:FD:A2:0E:FE:02:EE:B0:FD:43:32:76:C8:F8:04
Authority key identifier: AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
Certificate issuer: /CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Certificate serial: 019881D47B3E98CFCAA316C7E71506D96DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
Manifest number: 1298
Signing time: Thu 07 Aug 2025 00:00:42 +0000
Manifest this update: Thu 07 Aug 2025 00:00:42 +0000
Manifest next update: Fri 08 Aug 2025 00:00:42 +0000
Files and hashes: 1: r6C99vK2TllFCTWcqpJRSg5MRPM.roa (hash: 3+br3Wh/zPJPiW24ubp7XOxLj4qW7AeahE4kU9GEl1U=)
2: rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl (hash: GdI4O2fYivHftzJUsDGcv1rPI59EHOXBgpi7R/oYnzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:7b:3e:98:cf:ca:a3:16:c7:e7:15:06:d9:6d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Validity
Not Before: Aug 7 00:00:42 2025 GMT
Not After : Aug 8 00:00:42 2025 GMT
Subject: CN=c6fd45851b18fda20efe02eeb0fd433276c8f804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b4:46:83:8b:92:9e:e7:30:80:6e:9a:e7:13:
06:4f:ef:72:c6:bf:b0:cf:0a:c3:ae:f9:72:a0:53:
08:70:ca:e3:bf:b0:ba:70:b0:97:75:4c:e6:2d:a0:
fe:9b:ec:7d:b7:2d:95:de:00:5b:f1:7c:ab:30:f1:
66:09:11:70:f0:9c:2c:ce:ba:4d:92:95:4c:d8:4f:
a9:42:1b:5a:73:71:c3:bf:0f:a8:b8:9e:78:b8:90:
5d:3f:3d:d2:d5:72:91:45:f0:56:05:32:ed:5f:bc:
fc:1a:b5:87:b4:af:08:a5:63:17:47:ef:4e:86:b2:
e4:88:1f:a1:a7:1b:29:d5:aa:e3:3d:cb:de:ea:a7:
85:50:7a:39:9f:80:5b:7f:c6:b3:73:dc:0f:aa:01:
e0:ac:14:eb:79:89:2b:50:7d:10:e2:45:17:a2:7c:
a5:9a:aa:de:73:d8:b7:6a:83:02:80:47:0b:63:b4:
88:a9:4a:9c:53:f2:30:94:6d:13:90:e4:5e:5f:d3:
f1:19:93:04:a9:b8:4d:d6:dd:56:16:52:3c:99:ca:
2a:b6:46:b2:c3:84:35:87:23:b9:64:33:c2:86:f8:
0d:51:f6:f3:f6:40:83:cf:96:a5:e4:8a:19:70:a9:
7f:9c:4b:93:d2:28:ea:a4:e0:9c:19:4f:b2:b9:1c:
48:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FD:45:85:1B:18:FD:A2:0E:FE:02:EE:B0:FD:43:32:76:C8:F8:04
X509v3 Authority Key Identifier:
keyid:AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6d:57:71:39:a5:e8:85:00:b0:c4:00:14:50:91:30:ac:7d:
a9:d3:6d:e7:c3:3c:8f:86:48:61:90:20:1c:ef:0d:22:0d:45:
9b:e7:b1:e1:37:4c:32:95:2f:bb:29:15:c0:0b:19:15:db:90:
7d:18:a7:5b:19:cd:0b:50:4d:24:13:95:dd:1e:6d:72:cf:2c:
5d:d0:22:0a:80:1b:81:ad:ca:8c:9d:a1:2e:dc:a2:71:0f:0a:
30:42:49:bd:f9:ad:92:7e:73:2a:57:31:79:4f:1e:56:e0:4e:
a6:a1:b6:dc:79:82:c8:c0:24:4c:71:9b:d2:12:e1:42:e2:d5:
cd:75:30:46:30:61:bd:76:0d:3c:6e:e1:71:ee:9e:32:4c:c5:
4e:4c:3d:18:6b:60:13:9b:48:65:44:b0:2a:b2:fe:99:10:79:
0e:b5:f2:c5:ff:07:e1:86:bb:c9:4b:ad:8e:09:5b:57:76:1d:
ea:a6:dc:64:29:f0:de:1b:5b:82:67:a4:bb:55:9e:ea:b7:35:
f3:1c:9b:7e:97:37:2a:f5:10:62:d1:a2:21:37:5b:38:c4:50:
4a:41:b7:09:f2:e1:c1:5b:5d:c9:3a:05:61:d6:cc:85:15:64:
e7:6a:27:bb:6b:e0:f5:4c:fb:51:9a:93:08:74:1f:1d:06:cb:
38:f2:9f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:01:17 2025 by rpki-client