Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
File: _sTvIAvJ0n6e1_O8a1wFKS2EMro.mft (raw, json)
Hash identifier: s1zizYWe3omeWf5er+DmreJmtDsO9n+hM1Z/2kvCK2U=
Subject key identifier: E1:01:79:DD:A2:53:71:E4:A0:EC:9C:78:EF:3D:19:2F:39:F0:6B:5B
Authority key identifier: FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
Certificate issuer: /CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Certificate serial: 01987C40C2F0788FA77A20C8F3F318435C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
Manifest number: 0339
Signing time: Tue 05 Aug 2025 22:01:15 +0000
Manifest this update: Tue 05 Aug 2025 22:01:15 +0000
Manifest next update: Wed 06 Aug 2025 22:01:15 +0000
Files and hashes: 1: A-WEqq-qnquQ-k-HUeyR2Ta7Ai0.roa (hash: ulBE+6XQU+CVKwFHEP6pOstPObSTz9LyM8DJtWKzepw=)
2: _sTvIAvJ0n6e1_O8a1wFKS2EMro.crl (hash: /JIQLUtP+YcZ39PodHwRft7o8VRHezGjrX3e+4etU9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:c2:f0:78:8f:a7:7a:20:c8:f3:f3:18:43:5c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Validity
Not Before: Aug 5 22:01:15 2025 GMT
Not After : Aug 6 22:01:15 2025 GMT
Subject: CN=e10179dda25371e4a0ec9c78ef3d192f39f06b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:de:a1:df:4b:2c:da:dc:7b:8d:b2:b0:62:3e:
89:35:72:21:78:01:b8:d7:f9:69:27:77:99:7c:2d:
cc:91:07:15:3e:6d:08:67:73:53:eb:fa:9e:05:59:
df:58:ba:5e:66:04:aa:ca:1d:0a:23:cc:85:c7:b7:
ad:06:67:28:fc:5e:77:92:52:1d:31:55:8e:c5:72:
fe:5e:6e:b0:0f:88:f3:21:60:f5:80:f2:7f:79:e5:
25:d3:69:fc:90:25:60:9c:99:87:cf:d5:a6:5b:6a:
fe:49:ac:73:3f:95:26:1b:5f:bf:67:48:c5:fe:8f:
1d:05:67:21:6b:71:a9:38:1e:29:c8:92:76:8c:22:
34:f6:b4:30:8d:f5:f0:21:8c:e5:df:f5:33:1c:45:
0b:3f:aa:29:3f:cd:df:53:f1:48:a8:40:0d:5b:c0:
1e:08:c7:84:98:d2:c0:8f:84:e8:32:72:79:57:4c:
3d:01:ea:a8:98:b1:5d:ab:da:09:e8:ba:b6:50:e6:
d7:3e:6c:f2:de:dc:7f:ee:b8:1c:dc:f9:70:3f:22:
6e:92:10:70:e6:3b:f4:77:65:ed:d4:87:83:7e:ca:
1b:12:26:38:3c:11:0a:d1:42:7b:7f:36:9c:7d:21:
88:e8:97:10:e0:ec:f2:e6:b5:18:50:04:8b:54:ef:
fd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:01:79:DD:A2:53:71:E4:A0:EC:9C:78:EF:3D:19:2F:39:F0:6B:5B
X509v3 Authority Key Identifier:
keyid:FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c8:ce:6b:52:8c:cb:32:81:e9:01:94:10:a7:40:6e:aa:31:
9f:85:ef:37:c5:cd:58:bb:48:d6:ed:d3:02:06:a2:d0:b0:49:
44:3b:73:ef:70:8e:bb:2f:a5:49:49:cb:cb:7d:94:23:4d:ab:
70:a7:8e:6e:05:a1:6b:86:64:15:50:f2:bf:01:37:6c:f5:c0:
76:02:9b:df:80:7a:92:ea:94:b1:78:69:e4:8b:cb:85:1d:c8:
eb:37:22:e4:ab:a9:8f:68:78:23:65:3c:3c:fb:20:f1:a1:a2:
59:67:f7:44:34:95:3f:63:f4:2f:85:10:af:57:98:b4:7d:d8:
b8:b6:08:ad:b9:20:79:26:05:c1:85:8b:bf:12:ea:c2:25:e7:
23:51:ef:3d:32:24:70:37:0e:13:9c:99:23:98:d1:74:9e:66:
84:2a:17:d5:6e:47:61:2b:61:73:bc:88:f8:d0:2a:47:42:f0:
75:d4:bb:69:4d:6d:77:11:3a:40:69:86:db:01:86:09:df:2b:
3e:9b:54:cf:55:22:28:4f:40:d2:96:3b:af:66:ec:5c:f7:8d:
c6:ae:3a:e3:e2:18:63:b9:5f:0a:44:d0:59:d1:13:38:a8:e0:
49:6b:d1:a8:b7:87:65:77:fe:9d:c0:3d:06:af:20:a7:01:31:
86:73:ae:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:13:31 2025 by rpki-client