Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
File: 0s3V8WKiZ4AAA88wwY6c684nTsU.mft (raw, json)
Hash identifier: ZQeRS4JMw9fwpEjHjDvYlIhpGzBvU3o8FdG/x9T+Wac=
Subject key identifier: 28:55:C5:66:9C:37:25:40:10:33:A9:AF:5D:07:05:96:43:92:09:38
Authority key identifier: D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
Certificate issuer: /CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Certificate serial: 019874191B138C135DE015EDFD11E79C4100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
Manifest number: 08AA
Signing time: Mon 04 Aug 2025 08:00:59 +0000
Manifest this update: Mon 04 Aug 2025 08:00:59 +0000
Manifest next update: Tue 05 Aug 2025 08:00:59 +0000
Files and hashes: 1: 0s3V8WKiZ4AAA88wwY6c684nTsU.crl (hash: DWImBWq+aaF/xefM4cDVNrHIUuEM3DFI6lgLUKKd58I=)
2: 4d-M2xoibAEms_RDQ9mCEYeUNpg.roa (hash: wVeVUALjyzMUssmf4Hte549aQq7kwv7Or9f/6VG17Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:1b:13:8c:13:5d:e0:15:ed:fd:11:e7:9c:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Validity
Not Before: Aug 4 08:00:59 2025 GMT
Not After : Aug 5 08:00:59 2025 GMT
Subject: CN=2855c5669c3725401033a9af5d07059643920938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:ce:39:d1:56:77:47:7e:ec:76:1a:bf:dc:
9d:c2:87:18:3a:5e:81:69:1e:fe:c8:f6:db:fd:f0:
96:87:ff:0b:f9:72:63:17:2e:7f:ad:5c:63:73:ee:
63:60:52:9f:1f:1e:1b:23:93:d1:28:a6:b5:94:c7:
24:45:cf:17:cd:80:1d:52:e5:87:42:36:05:a3:25:
8c:5f:5d:88:d6:18:19:8c:64:6d:00:a5:95:35:b4:
25:5b:fb:23:b0:e2:13:bd:a9:fe:c4:f0:4d:cc:3f:
2f:4f:20:61:6f:72:b0:cc:38:b0:88:a2:01:21:04:
d2:48:25:06:d5:af:78:0a:f2:c2:b2:1a:78:b7:98:
3b:38:ff:85:0d:ec:32:e7:c0:c3:d3:f9:6b:e5:a5:
5b:5b:04:8f:0b:11:e5:4b:bf:00:35:be:9e:e1:20:
73:ab:c1:84:79:16:46:2d:c1:e1:ae:28:f5:ff:fd:
ce:4a:86:cd:36:a3:a8:d2:14:0c:81:59:17:e2:c2:
bb:ca:58:11:32:9a:fa:f0:e8:72:19:47:f3:59:08:
d6:3a:c2:b6:1e:2c:1b:8d:5f:95:a6:4f:7e:24:08:
72:49:0f:9c:93:65:b5:8e:e7:a6:f0:c8:ab:e7:c9:
d8:90:68:f5:b9:d0:f0:60:26:92:ac:fe:2a:57:1b:
48:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:55:C5:66:9C:37:25:40:10:33:A9:AF:5D:07:05:96:43:92:09:38
X509v3 Authority Key Identifier:
keyid:D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:79:ca:c8:9b:07:29:81:5b:f5:be:08:ef:9e:89:29:27:1f:
34:0b:33:5a:9e:9d:9a:cc:b1:7f:45:71:f2:71:22:84:c8:0f:
99:db:97:fb:37:b1:f6:ba:74:94:db:38:c5:05:07:d5:69:f6:
0d:e5:b6:4b:c9:b5:4d:42:f0:37:ec:56:c6:1c:dc:dc:9d:f2:
ad:e5:89:fc:dd:9d:66:b6:87:45:85:f3:fa:e4:c6:ec:19:dc:
11:f4:cb:7c:93:c8:05:72:49:40:e3:45:f7:41:74:8a:50:7f:
78:26:95:95:f3:e6:54:b5:a2:23:f0:54:5f:e8:83:5a:8f:7c:
4c:28:43:c7:5b:52:02:86:d3:d2:2a:97:75:7a:5e:64:09:61:
05:5f:9f:fd:39:1a:69:d7:2f:5b:70:67:a4:dd:0b:4f:f8:43:
e6:5c:18:8d:17:20:e7:ad:56:60:bf:61:6a:a1:4f:e2:0a:e0:
dc:ee:ed:bb:e8:c2:32:59:cf:e0:4d:aa:8f:2b:b8:76:d8:ee:
ef:64:e8:7a:a0:29:0a:a4:3b:61:69:38:e1:e9:8f:50:73:47:
a7:f7:26:4d:7f:8e:49:85:7a:4f:c2:67:a9:f2:7e:86:c3:f6:
da:64:aa:59:b7:6f:02:63:97:ca:33:d8:ef:89:ff:8b:43:82:
bd:ed:83:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:58:03 2025 by rpki-client