Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
File: 52IQ44sWkJp-6P47jQZkfwZlKSs.mft (raw, json)
Hash identifier: MzZEJZ4WG1NiWubePQniQDQAv3ZKe1Gsncec/kNJUWQ=
Subject key identifier: 04:1B:6A:12:09:6E:A8:1D:3F:80:A9:95:03:B8:55:9D:99:F3:D1:02
Authority key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Certificate issuer: /CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Certificate serial: 01989FA7F125977B56FE45F163659298E8CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
Manifest number: 0928
Signing time: Tue 12 Aug 2025 19:00:40 +0000
Manifest this update: Tue 12 Aug 2025 19:00:40 +0000
Manifest next update: Wed 13 Aug 2025 19:00:40 +0000
Files and hashes: 1: 0O73PaTyLOlo4DtC-zfVh-so0po.roa (hash: 8d52pgK7PtxKWsBsAJptabjpB2sUfgsDROP6Cr/a/W0=)
2: 3cLja0Qn7ryI3brAvn_huolef7k.roa (hash: uL09pyaPRqlSpX4587/io6caQs2mRPwnhcXeei1t0Y8=)
3: 52IQ44sWkJp-6P47jQZkfwZlKSs.crl (hash: T0akvHbuJJ52MOXue/yLWWjG7HujvE4jVbtVVCpY3js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:a7:f1:25:97:7b:56:fe:45:f1:63:65:92:98:e8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Validity
Not Before: Aug 12 19:00:40 2025 GMT
Not After : Aug 13 19:00:40 2025 GMT
Subject: CN=041b6a12096ea81d3f80a99503b8559d99f3d102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:99:f2:d6:a5:2c:28:b6:3a:ed:e5:9d:5a:70:
97:9d:e2:11:1f:80:e1:a9:41:d3:8d:33:89:05:36:
d6:4c:91:0b:6f:d0:e8:58:b5:70:63:37:56:e2:97:
3d:f1:78:16:8a:a2:fa:e9:14:4c:f6:5d:1a:40:cb:
c1:f9:05:88:05:6b:2c:7e:1a:0f:5d:26:ee:18:07:
62:c5:ec:8a:74:91:b0:71:04:32:e0:d6:a9:a2:f9:
59:01:96:81:41:ae:fa:64:ca:3e:1e:cc:43:75:62:
fd:ea:9b:08:42:08:6a:c8:ae:11:29:c8:75:7a:ef:
a3:23:5d:05:c6:d9:8b:47:06:b1:ef:a8:44:55:86:
e6:a5:a9:b3:e1:df:fd:29:6d:e6:a6:8c:d7:1d:29:
49:e8:d8:6f:ed:eb:1e:b6:37:43:1d:f4:7b:a2:88:
fe:eb:89:02:fa:b0:3d:f1:0c:df:22:43:98:35:16:
a2:e0:69:8f:d0:69:cf:5d:73:17:7e:63:9d:ac:d9:
fe:b4:cc:63:44:8d:08:28:a3:3b:4b:c5:cf:17:e6:
05:c1:3f:1f:93:29:fa:fb:43:47:dd:98:d3:28:2a:
c1:29:51:af:39:a5:dd:d0:a8:22:ec:60:0a:f9:06:
3b:16:ed:0c:c8:0f:eb:e4:a6:9f:b3:ea:fe:7c:a4:
5e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1B:6A:12:09:6E:A8:1D:3F:80:A9:95:03:B8:55:9D:99:F3:D1:02
X509v3 Authority Key Identifier:
keyid:E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f8:6d:5b:d0:23:e7:ea:27:fa:59:f7:96:5c:60:14:b3:56:
ce:62:eb:97:29:8b:3c:e5:6e:75:3d:e4:e2:99:ef:ff:fc:d3:
2c:d7:62:a8:6a:6a:ae:d8:0b:3e:3a:19:20:48:9b:e6:9e:af:
6c:51:6d:29:56:78:b5:a9:af:c5:65:a4:de:17:48:53:ba:24:
ea:77:6f:ba:7a:4d:5d:8b:33:6a:71:f5:11:e3:b3:38:37:01:
37:7c:d8:cc:b1:cf:c8:51:6d:bf:99:eb:c9:20:86:f1:19:45:
9b:b0:11:13:1f:b9:ec:e4:89:8d:66:39:34:b0:9b:a5:0c:2b:
8a:de:a1:2a:e0:6a:86:85:7a:45:ca:24:7f:20:2e:0a:bb:f8:
79:e5:13:0a:55:0e:0b:37:a9:73:a6:bb:1a:2c:87:65:0d:1b:
63:23:cc:84:1c:c4:a4:a1:85:3a:db:47:4e:cc:86:17:05:b1:
89:9d:89:0b:15:57:9a:ce:5f:e0:b9:e7:b6:13:26:b9:a8:f0:
0c:ab:6d:39:c3:b6:30:c2:81:95:60:d7:84:ad:9d:a1:14:91:
4b:e4:70:d4:4d:de:39:63:09:08:9d:81:0d:21:16:74:0e:b3:
f4:e7:71:a7:1e:68:cf:da:10:a3:56:f3:46:9e:7d:09:0a:a5:
06:fd:6e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:16 2025 by rpki-client