Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
File: rONjRGSGG9S_jFvH48m_09JGpN0.mft (raw, json)
Hash identifier: yP5WipKl4EOmTkbZgPNCD5s+MOPoYf6Hj8rQBAG5QCM=
Subject key identifier: 48:F4:D3:10:36:37:F3:FE:C1:7C:86:98:B8:8A:63:C6:5D:16:B6:85
Authority key identifier: AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
Certificate issuer: /CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Certificate serial: 019874F52485D7657067E907EBACE8DEF592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 12:01:19 +0000
Manifest this update: Mon 04 Aug 2025 12:01:19 +0000
Manifest next update: Tue 05 Aug 2025 12:01:19 +0000
Files and hashes: 1: Obsiy3NGEoUjL-DLQo0yhLx4KAI.roa (hash: p9j2sVfI93AXLXtc3YNcT/Xcs3W13x3825+kRDw3Ko8=)
2: rONjRGSGG9S_jFvH48m_09JGpN0.crl (hash: kudupUYf76dped/gfDAjEZL1Nogek6QkDVT2n8Wcwx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:24:85:d7:65:70:67:e9:07:eb:ac:e8:de:f5:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Validity
Not Before: Aug 4 12:01:19 2025 GMT
Not After : Aug 5 12:01:19 2025 GMT
Subject: CN=48f4d3103637f3fec17c8698b88a63c65d16b685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:05:97:df:c4:3b:ec:71:05:35:4c:73:5f:cc:
03:c8:7b:22:6d:7a:62:16:ad:b4:f0:c2:9a:00:a8:
13:7e:20:df:9c:6d:10:0c:a7:f0:27:a0:e6:9a:b5:
4b:44:02:5a:1a:0a:96:4d:ef:ab:e7:a3:20:9d:1d:
1e:2d:8e:9c:87:26:0e:e6:da:e0:f7:6e:c7:c1:47:
50:a8:16:a3:df:9c:ab:0e:cf:4f:7f:1d:a3:ec:7a:
dd:10:96:f7:99:58:f4:75:85:a5:b0:87:6e:81:d7:
81:32:61:c7:c3:31:cc:bb:47:ac:62:f2:9e:0a:b2:
c9:97:78:5d:e9:59:dc:3f:57:0d:15:b7:a7:02:d7:
d3:cd:95:ac:df:5a:d1:7b:72:4a:b7:eb:ba:1f:a0:
8f:f0:27:59:60:7e:3a:0c:1d:8b:ca:d9:b4:1c:41:
73:59:ac:90:07:3d:fe:4d:9f:70:87:ef:9d:0d:54:
5f:ae:87:b4:92:d2:5f:d3:06:c9:64:f1:fa:e3:5e:
e3:83:10:c5:34:fa:88:66:b2:53:64:f1:c8:ff:92:
c5:3b:92:59:93:bf:5b:7f:c2:a6:b5:fb:d4:ec:27:
44:07:7b:df:34:3b:7d:0f:39:56:f5:d2:2b:4a:9d:
4a:fd:db:36:6b:6d:f9:36:ea:af:4a:30:f7:bd:cc:
2b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F4:D3:10:36:37:F3:FE:C1:7C:86:98:B8:8A:63:C6:5D:16:B6:85
X509v3 Authority Key Identifier:
keyid:AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:aa:19:66:70:15:83:64:3e:01:0a:eb:85:a8:5e:ff:d8:e2:
ea:f6:b5:96:ae:dd:b5:0c:84:63:ff:8b:11:8f:95:53:95:31:
f9:3c:60:95:2d:0a:89:55:95:75:11:20:71:20:e2:ec:ad:8e:
ce:06:87:3d:65:d0:4d:06:2b:44:a0:9e:60:08:4f:c5:f8:cd:
e0:da:9f:14:d0:e8:36:2d:79:89:65:63:e7:e5:50:1f:90:a7:
9b:52:67:67:1c:f5:e9:c4:b7:95:11:31:32:b5:e7:bf:d8:56:
d2:d8:d4:22:5f:91:9f:de:b0:f4:c8:4e:a1:7a:3b:49:6c:05:
c8:12:36:fa:76:66:a5:8b:ba:34:b2:04:63:05:c5:9d:6e:55:
29:cd:87:7e:1b:9b:1b:3c:cc:95:72:d1:fb:c1:9a:75:97:03:
37:8c:f9:d5:00:af:40:56:b5:9c:d8:fe:dd:13:87:bc:f9:8f:
3d:5e:34:86:30:2c:4d:73:fd:e5:ac:c6:e7:20:1e:24:f7:55:
79:3a:4e:20:d0:a3:1b:71:9d:4f:4d:7e:5f:f8:70:66:a0:5e:
76:98:56:41:b4:30:5a:5b:63:83:99:4f:b6:4e:08:d9:30:4b:
99:f2:d7:a0:1f:f0:1f:b6:3d:cf:5b:5a:70:4b:4e:21:1f:bb:
c0:d9:d8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:27:43 2025 by rpki-client