Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json)
Hash identifier: PELWl1gjrU+o0r9KBF7/GWrXckU0HuIAyVA/qXbJzDY=
Subject key identifier: 89:9E:20:77:64:4A:DE:16:26:7F:58:33:02:1B:CC:C1:9B:09:4A:5D
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial: 019872984F026E647F9AD03618B89795F0F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
Manifest number: 0302
Signing time: Mon 04 Aug 2025 01:00:40 +0000
Manifest this update: Mon 04 Aug 2025 01:00:40 +0000
Manifest next update: Tue 05 Aug 2025 01:00:40 +0000
Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: 0WpIe0BHgBJDvtv4uA9V1IpS2iNAojHJQALtkB65Sus=)
2: NOS2phI0mCKN8vvba7iknsg1tg8.roa (hash: FS8k6CBkj6b58p+lSJzaqjPgwXY7sIfiWMXiCi2T3/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:4f:02:6e:64:7f:9a:d0:36:18:b8:97:95:f0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Validity
Not Before: Aug 4 01:00:40 2025 GMT
Not After : Aug 5 01:00:40 2025 GMT
Subject: CN=899e2077644ade16267f5833021bccc19b094a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:87:26:7c:7e:da:a1:42:13:86:62:77:d1:e8:
07:92:c6:e1:03:3f:81:43:20:0b:98:a7:23:9e:35:
bd:dd:f4:c7:dd:9a:f6:0b:20:fa:d6:c9:8b:5b:82:
6f:bd:4e:00:24:b2:f2:81:8b:dc:df:fa:5b:f8:8c:
15:85:7d:7e:37:db:c1:6f:9b:64:04:73:01:50:bb:
4c:e7:16:26:6f:11:27:9f:53:bc:05:af:0e:da:82:
46:9d:60:91:6b:db:bc:1b:25:c6:d2:04:2d:4d:c7:
b4:41:11:1a:39:51:7b:64:c7:85:59:4b:ad:51:ef:
03:70:6a:24:d1:4b:df:9c:08:22:bb:08:63:fa:e0:
d2:35:f7:a6:8f:3f:2b:1b:95:8d:c1:01:53:ca:c1:
1d:26:f1:df:b5:01:a2:57:3b:26:c2:75:3c:f6:a8:
b4:d5:e0:bc:33:5d:07:46:42:3e:37:3f:04:4a:82:
bc:f0:d0:ab:ac:66:37:9b:37:c8:ba:0e:38:7a:e2:
19:40:b8:33:70:20:02:87:76:04:47:05:f0:42:2b:
01:0f:02:53:e9:a1:1e:1f:a3:3e:f3:57:e0:ea:f6:
43:e8:79:22:55:e0:b0:5b:ed:1f:ec:08:83:6e:3d:
70:bc:6e:ec:47:b4:56:39:af:8b:eb:5c:2d:d1:bf:
f4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9E:20:77:64:4A:DE:16:26:7F:58:33:02:1B:CC:C1:9B:09:4A:5D
X509v3 Authority Key Identifier:
keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a2:64:0f:6b:31:79:ee:d1:51:6e:39:4b:f2:59:a1:57:84:
de:0e:95:ea:73:99:41:af:44:04:ff:63:b2:3d:51:5a:27:c8:
1e:9c:c7:c4:a7:ef:17:3e:14:98:ab:2b:a9:df:61:6b:2b:f6:
0a:73:57:d7:0b:76:2c:6c:3f:13:04:08:c0:93:17:92:e5:ee:
b8:d7:b3:b6:73:fc:f7:5e:74:96:6f:39:a4:5a:a0:eb:3b:2e:
e7:bd:60:01:48:05:d4:d4:fa:f6:2f:86:a3:cd:6b:5c:99:26:
d1:16:cd:f9:06:95:6b:0a:98:21:11:56:50:38:dd:f9:c2:66:
e5:10:92:57:06:73:77:87:e6:40:1c:b8:9f:96:d2:6d:4e:ed:
67:9a:c2:6e:aa:bd:ab:5f:45:04:db:b9:a5:2e:68:e2:6c:17:
8d:95:4e:bf:8f:53:35:7e:8f:3b:2e:00:14:06:be:d9:f8:18:
ca:4e:69:64:f3:db:ea:b5:ad:bf:c5:e0:b6:22:17:cf:b5:a3:
73:55:fe:89:f0:a8:5e:1e:39:2d:63:50:0a:b6:b7:a0:f7:4a:
66:87:ba:81:be:30:52:7e:29:ff:d6:bf:38:c6:ab:81:5c:91:
4f:e6:0e:96:20:aa:e0:c7:ff:fc:4a:22:a4:19:42:d7:26:b0:
f3:4d:b6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:53 2025 by rpki-client