Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: Xi5DH6yQzY2VHneNdVIQ+9qnYmntgJp/3nPihL7cX9g=
Subject key identifier: 37:39:C8:C1:B8:58:03:5C:A9:8D:52:8E:21:E8:93:0D:D7:7A:AD:DA
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 019872CF316841EFBBDAE3B026875ABC0C14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 02:00:37 +0000
Manifest this update: Mon 04 Aug 2025 02:00:37 +0000
Manifest next update: Tue 05 Aug 2025 02:00:37 +0000
Files and hashes: 1: Lddee0yGLa96EV9cff9j1b8lisk.roa (hash: 4wmS8bLLBI0yCHZS6lNJzngX25UoSHi3CPRXK8eiy+g=)
2: oFHxOR-gmoi2f8hzooiT2H5qGbs.roa (hash: v7L5BEVhrfX9YxGEPwkVKzRUyMYIDLUuZIRykF3hjrE=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: JlxrgsF6vpS0wnMb5oHTLhFOo01JVvHVA7ik9SpYge0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:31:68:41:ef:bb:da:e3:b0:26:87:5a:bc:0c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Aug 4 02:00:37 2025 GMT
Not After : Aug 5 02:00:37 2025 GMT
Subject: CN=3739c8c1b858035ca98d528e21e8930dd77aadda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:8c:d7:5f:63:9a:73:25:8e:f5:e8:14:56:
4b:fb:48:a5:67:03:a9:09:2e:a5:08:8f:bd:26:8b:
f0:22:0d:25:9f:9a:64:1b:9e:91:88:5a:a4:26:a0:
c8:79:13:0a:ea:83:82:fc:21:0b:cc:dc:07:d8:b3:
25:a9:b5:63:17:bf:c5:69:ba:8b:41:13:9b:b1:47:
99:f3:f3:b8:73:5b:8d:fe:c6:93:de:0f:9d:cd:91:
65:a1:e7:cd:bc:79:79:d8:70:f1:a1:56:13:5a:51:
00:d3:36:00:45:8f:8c:98:ec:71:d5:c9:f5:c4:f8:
64:3d:6f:9e:b9:2a:2e:f1:6e:bb:40:55:36:2f:3c:
2c:66:62:cc:36:79:0e:7f:22:cb:fa:b4:b8:cc:80:
f9:96:cb:8c:29:ed:a8:2d:a9:5d:e9:6b:06:0c:47:
21:42:5c:ca:a6:d2:51:a2:1d:91:bc:89:3e:dd:51:
46:11:27:1b:34:30:7c:ce:33:99:c7:3c:73:10:d3:
f8:8e:d4:0f:e8:3e:79:b7:3d:da:b5:37:f8:ab:3f:
b3:d8:d1:20:8a:83:4e:1e:a1:f5:d8:2f:82:17:07:
72:0d:16:21:63:c2:e3:2c:80:8c:79:7d:03:b9:92:
a2:1c:59:37:df:dd:d8:e7:c7:f7:0b:9d:08:df:68:
34:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:39:C8:C1:B8:58:03:5C:A9:8D:52:8E:21:E8:93:0D:D7:7A:AD:DA
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b5:40:72:ef:f5:90:73:6d:63:08:14:38:bd:30:d6:e1:30:
10:02:c7:39:97:bd:a0:94:ee:68:40:0f:cf:75:39:b1:f4:3e:
db:07:3f:d0:82:6b:37:51:e3:13:bb:41:6c:92:58:35:3f:bc:
b2:f7:08:44:15:2c:19:ef:23:e5:2c:f2:10:9d:54:54:05:03:
47:99:ef:76:a2:e3:a4:90:d8:71:83:c1:93:94:e8:51:d2:93:
e0:c5:17:52:f6:e9:f1:66:9a:18:92:d9:8f:97:a9:de:41:81:
bc:1a:b8:aa:18:4a:39:e3:d2:35:d5:62:72:09:76:1b:78:87:
73:e6:b8:e6:2a:dd:8b:2b:7b:0f:37:91:e3:6d:ce:25:56:fd:
97:4c:cc:8b:9a:4a:e0:94:17:b8:93:c2:45:62:b9:3c:8c:3e:
7d:dc:49:2d:bd:fe:f3:3b:1f:e3:c5:51:ae:66:bf:f1:82:d1:
a7:46:87:c8:ca:83:0b:7f:28:2f:4f:c2:8f:8d:19:11:5d:c4:
e4:e4:9c:b9:14:29:88:9b:3b:2d:d4:13:9d:63:dd:af:4b:8c:
fb:cd:9e:4f:de:a4:fe:f0:56:cc:76:18:3a:cb:01:d9:e0:51:
72:8b:24:fb:29:ae:31:6b:10:5e:d2:3a:a5:1c:c5:4b:50:8b:
0f:a2:97:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:23 2025 by rpki-client