Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
File: Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft (raw, json)
Hash identifier: bqvoWr1vOjyMMfBJ3UMful0IgcIJ/hWN1lrKV0866P4=
Subject key identifier: 19:9E:34:5C:62:9F:A5:F1:63:90:9F:81:32:21:FB:FD:DB:D3:AB:F8
Authority key identifier: 45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
Certificate issuer: /CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Certificate serial: 01989893564CFA3FF5112FA8CF373798CBB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
Manifest number: 125D
Signing time: Mon 11 Aug 2025 10:00:49 +0000
Manifest this update: Mon 11 Aug 2025 10:00:49 +0000
Manifest next update: Tue 12 Aug 2025 10:00:49 +0000
Files and hashes: 1: CInCW1-lseNxjR1N7IQV758AByA.roa (hash: WQM0UCIORrjfQkm9SW+GVd+jlu9ooi0KVsLj7jyMiok=)
2: Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl (hash: eVG08brJL/o6qy3poTujM+9N/nvOTDKExGtdmoLZVhQ=)
3: U2paNb4m2qyQATbnhVbTs0-s6jM.roa (hash: S1RxCh/LJopZIJfT5SmUwql4+1cPwTZJIOK40saTkcw=)
4: zbSAdSSsmOU8X5iO-yfCK2-GsNo.roa (hash: qlcz7bJ9k+K7bMbtiBCeKabs37EBPQzpy/kDcVYHEOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:93:56:4c:fa:3f:f5:11:2f:a8:cf:37:37:98:cb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Validity
Not Before: Aug 11 10:00:49 2025 GMT
Not After : Aug 12 10:00:49 2025 GMT
Subject: CN=199e345c629fa5f163909f813221fbfddbd3abf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:ee:17:44:f8:b3:c0:66:89:eb:b7:c5:a7:
56:47:26:f1:94:a9:5e:aa:4a:af:9f:23:69:be:ba:
05:0a:a8:5b:7c:a9:4a:c4:5d:84:d0:48:fd:1c:f0:
b3:04:46:48:ee:66:1f:93:70:74:05:7f:40:c9:4e:
e2:22:54:fc:26:87:59:21:66:2c:9f:33:a2:5d:90:
e0:f4:de:9e:03:63:ea:ca:a8:ef:61:9b:d7:d4:87:
35:b4:23:5f:33:d0:7f:b8:aa:62:7b:c5:21:42:a4:
dc:84:8d:a7:b9:a6:86:09:2c:90:f7:39:70:71:dd:
59:fc:c0:2b:41:b9:95:71:f4:93:12:61:5a:3a:74:
5a:bc:d5:2d:a0:3b:5d:8f:7e:ac:e6:d1:c1:d7:17:
9f:5e:8d:aa:84:df:8b:72:63:27:0b:31:da:f4:22:
43:b9:77:cd:5c:61:ca:74:db:8d:71:e9:55:12:5d:
95:d6:8d:04:61:ab:55:96:f0:d3:d6:3d:cd:8e:ca:
df:31:aa:de:07:1d:1f:0e:ca:c6:09:2f:68:16:45:
d8:e8:3f:40:47:e7:a4:d3:78:9a:87:f4:a5:2f:d1:
c3:79:7a:fe:bc:04:35:20:30:27:c0:ed:eb:7f:06:
73:1b:39:c8:8c:94:cb:fe:44:66:17:50:d8:91:5e:
df:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9E:34:5C:62:9F:A5:F1:63:90:9F:81:32:21:FB:FD:DB:D3:AB:F8
X509v3 Authority Key Identifier:
keyid:45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:48:a0:8a:ee:b5:86:e2:3c:36:f0:6c:3a:2a:0c:66:c4:e5:
49:ee:d3:80:fa:e9:81:cc:fc:bb:c4:5f:98:a5:e1:fd:7a:1d:
73:c4:d8:f2:f8:19:b4:59:20:75:0e:65:36:a6:f9:c6:40:75:
af:e5:42:d0:d8:ed:59:96:71:17:30:b4:4b:62:fd:e7:04:ce:
6d:36:7a:ec:a1:8c:a0:76:9b:f9:71:f5:1a:50:73:31:b3:5d:
dd:fe:f9:de:d8:ae:fc:14:35:8c:37:8f:5f:06:7b:90:f4:2d:
0d:19:10:cb:78:ba:62:b6:ee:e2:56:1f:8e:91:40:73:46:a7:
30:68:fb:1c:39:d5:1c:11:6f:4f:ef:40:a9:80:44:07:4b:17:
c8:39:2a:0e:a5:fb:91:ed:53:37:a9:c7:cf:88:5a:24:d4:7b:
0d:a0:c8:34:63:e7:b8:17:29:10:35:78:24:5f:e1:bc:a8:a5:
3b:d7:c9:76:c1:a4:71:2a:27:52:d1:4b:e6:f0:21:ee:c1:76:
e3:9e:ee:12:f7:71:7a:72:f4:38:e2:fa:e9:9c:df:79:57:0d:
b2:d6:0a:a5:6a:e3:7a:8c:db:2c:2d:03:c7:8d:24:f8:3d:8a:
28:86:b3:b1:3d:b3:88:e4:51:98:60:94:c3:1c:8a:f5:62:c3:
4e:76:52:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 15:11:57 2025 by rpki-client