Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
File: IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft (raw, json)
Hash identifier: xuO5D9wRyOK5NGodTZq1Pcg74VgdG0g/wkWXIJeYsDw=
Subject key identifier: 61:DA:A4:01:8A:A3:3D:88:5E:94:33:49:AF:B1:0B:35:C8:22:5E:5A
Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
Certificate issuer: /CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Certificate serial: 0198733D781F2D7E63CF49E8AB4F820452F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
Manifest number: 14F0
Signing time: Mon 04 Aug 2025 04:01:04 +0000
Manifest this update: Mon 04 Aug 2025 04:01:04 +0000
Manifest next update: Tue 05 Aug 2025 04:01:04 +0000
Files and hashes: 1: A3E0-Bx-SkOraAi3ILNLwbtK2q8.roa (hash: oflLVWiMQR/h5//frwNh8Zh/ixGNkdyJmqiH96c6izM=)
2: IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl (hash: LhZXImRwQCPU2yXaRZpL2MrTO+RH/QO9c7X+Q4zPnqA=)
3: ZtZZEAiMokBjnJ6RL0fW_WRtUvg.roa (hash: HYmFAXxKVnFTMBP2WvTIUya5uxGXpwouKqV1Y54fjKg=)
4: tScHRMsv3pa-j9k0lmRr4JzNGL4.roa (hash: NDtPBe4Cb63irl43TeReFMTPmiPbWt6CuEvLh3TZdCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:78:1f:2d:7e:63:cf:49:e8:ab:4f:82:04:52:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Validity
Not Before: Aug 4 04:01:04 2025 GMT
Not After : Aug 5 04:01:04 2025 GMT
Subject: CN=61daa4018aa33d885e943349afb10b35c8225e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:9c:11:2e:57:c3:42:60:ae:7a:50:bf:df:
f4:d3:45:68:de:c2:ad:f9:02:5a:3d:38:a0:4c:71:
c9:ca:41:74:0f:61:12:2c:d0:00:4f:9d:07:01:3f:
59:c8:07:5e:08:99:be:d6:66:8a:32:3a:b6:49:a0:
32:c9:be:34:5d:87:39:69:ca:29:8e:f3:43:03:03:
b6:21:0e:d6:93:76:b8:0f:9a:f8:60:63:f3:2e:09:
a6:aa:70:1f:cb:08:60:52:08:df:3c:66:3f:0a:b5:
b0:21:a1:9f:37:c5:9e:1e:f3:f5:bd:f7:5d:9a:45:
d4:60:fc:2b:e3:8c:4c:fa:35:62:fb:42:1b:1e:bb:
3a:3c:d0:9f:24:3d:b9:92:15:51:fd:f3:5f:73:37:
99:a7:a8:e3:b3:2a:fc:18:72:99:15:c0:a1:d8:f1:
09:6a:fc:5a:fc:45:c0:a2:cd:98:6e:ce:8a:cc:72:
3b:df:ed:30:1a:e8:9c:07:74:dc:27:aa:84:f8:e0:
15:4e:81:1a:e2:4d:58:09:0b:d5:05:00:fd:a7:bd:
0f:c3:30:38:93:2d:78:33:90:84:ff:1b:81:bb:9d:
2f:92:7f:1f:85:ea:4d:0d:23:c3:64:9d:a4:2f:83:
6d:66:ea:7d:42:b3:06:59:36:03:1f:85:22:86:44:
e2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DA:A4:01:8A:A3:3D:88:5E:94:33:49:AF:B1:0B:35:C8:22:5E:5A
X509v3 Authority Key Identifier:
keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b6:c1:91:a4:4e:cd:50:0d:25:9b:5f:07:f9:da:3c:15:99:
40:50:2e:61:f2:0b:e2:fd:cd:99:8c:07:6a:af:b6:f4:a9:e0:
da:24:f8:18:24:57:40:19:73:7d:1d:a5:f5:b3:63:20:96:fe:
93:3d:d8:09:ee:cf:41:1b:dc:6b:85:24:5c:c5:a8:87:5a:af:
ec:dd:9c:7c:2e:fe:e4:a7:dc:27:ff:8e:73:a6:d1:ff:2f:db:
9b:db:bc:a1:ee:1a:9e:25:c7:0f:da:aa:5e:7c:26:e6:c3:7b:
c1:e0:f6:e8:45:2b:3a:14:4f:19:c8:74:7d:c5:e3:41:07:20:
bb:4a:b5:e1:8a:e1:b6:f8:18:4d:91:e4:62:ab:08:da:a7:90:
9e:ff:73:e2:e3:fd:5c:40:2c:66:18:a0:08:4e:48:3d:22:7a:
04:ec:80:e0:be:f9:2d:3b:31:9b:bf:af:f4:2c:fd:fc:6e:7f:
29:99:a0:80:ee:48:36:0f:f7:37:37:7d:5b:ee:d8:85:14:01:
67:42:f9:a9:30:4d:d3:02:9c:75:5d:1b:7a:07:08:b7:da:72:
32:76:31:88:66:0f:bf:e8:4f:9d:4b:65:e4:bb:88:59:2d:1a:
77:05:64:f7:f6:86:61:30:9a:e9:18:03:ae:a5:4c:a4:66:07:
2e:c0:fb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:09 2025 by rpki-client