Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft
File: rUZjafOSfaDIn7X0s-qeMk-SioQ.mft (raw, json)
Hash identifier: PidrsEBvj11oYTPuTn76Qtnx1KTf5T+8X0kDhGp0i4g=
Subject key identifier: 80:AC:30:80:65:48:6C:9E:10:80:FC:B4:1A:41:39:EA:9B:71:FC:2D
Authority key identifier: AD:46:63:69:F3:92:7D:A0:C8:9F:B5:F4:B3:EA:9E:32:4F:92:8A:84
Certificate issuer: /CN=ad466369f3927da0c89fb5f4b3ea9e324f928a84
Certificate serial: 019873746D21627336115ABEE42B4B3A7FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUZjafOSfaDIn7X0s-qeMk-SioQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft
Manifest number: 062D
Signing time: Mon 04 Aug 2025 05:01:06 +0000
Manifest this update: Mon 04 Aug 2025 05:01:06 +0000
Manifest next update: Tue 05 Aug 2025 05:01:06 +0000
Files and hashes: 1: e2krXZzkR-AkHScvd476IUHzrz0.roa (hash: KJC7yZeLdAZIJXLO5En/1DBnqhI+LO45sglWIneobpg=)
2: rUZjafOSfaDIn7X0s-qeMk-SioQ.crl (hash: zjpWAPECwEGQuvLgJZs2JWGTzVH+BWv6I1ltTIY+UxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUZjafOSfaDIn7X0s-qeMk-SioQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:6d:21:62:73:36:11:5a:be:e4:2b:4b:3a:7f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad466369f3927da0c89fb5f4b3ea9e324f928a84
Validity
Not Before: Aug 4 05:01:06 2025 GMT
Not After : Aug 5 05:01:06 2025 GMT
Subject: CN=80ac308065486c9e1080fcb41a4139ea9b71fc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:64:6c:c3:09:0a:14:c3:cc:59:63:b3:ab:6a:
ad:0d:29:28:2f:a3:48:e5:a4:a6:61:d1:8d:6b:87:
a0:d8:60:5b:32:13:2b:80:63:2c:39:34:1c:bb:d6:
98:3e:9f:1a:f0:42:0c:b8:13:1d:1a:5d:1d:3c:16:
39:62:34:17:2d:cb:7c:fa:16:42:6b:90:91:58:1b:
f9:25:2b:85:fa:4e:29:d5:6b:de:39:e9:c0:c1:89:
57:65:96:12:de:24:f0:dc:88:03:b9:96:99:11:40:
81:dc:25:36:e2:7a:2b:b9:87:b3:b7:5f:e0:d6:aa:
3a:48:53:ef:8c:bf:3d:53:a9:bb:6f:1b:11:da:09:
27:68:ad:1d:8c:cf:c0:65:c0:db:7e:a4:55:f3:af:
8a:47:00:66:0d:04:b9:95:ea:10:da:9d:c2:0a:79:
1a:0c:63:58:34:bd:9b:f4:60:c4:60:b7:24:11:a8:
2a:76:cf:bc:2b:99:0c:18:93:39:02:5d:ad:bf:7c:
30:6d:dd:86:c1:ea:ee:d0:66:ec:18:d4:6b:27:5d:
14:fb:fd:01:cb:61:7d:b4:1f:65:dc:82:bc:7f:d3:
d0:d9:a7:6b:43:90:47:59:7b:96:4a:b5:bf:35:03:
bd:a2:7a:f4:b6:de:c0:d8:07:b8:6b:b6:67:30:ee:
9b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AC:30:80:65:48:6C:9E:10:80:FC:B4:1A:41:39:EA:9B:71:FC:2D
X509v3 Authority Key Identifier:
keyid:AD:46:63:69:F3:92:7D:A0:C8:9F:B5:F4:B3:EA:9E:32:4F:92:8A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUZjafOSfaDIn7X0s-qeMk-SioQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9d:79:76:93:2c:bb:e3:04:a8:dd:b2:c6:28:63:ad:cf:80:
22:50:35:6d:78:e0:95:06:2e:07:48:33:20:c7:b4:10:97:76:
3f:33:38:21:3b:8a:92:f1:08:ce:87:33:ff:bb:d3:69:10:17:
5f:a3:d0:c3:7b:db:76:58:77:c4:71:18:98:c4:f2:6d:ed:10:
df:12:a5:30:85:bd:83:cc:16:e1:4e:d9:79:ab:e7:72:c7:a4:
30:68:f6:a2:a6:c7:5b:65:97:d9:bb:ab:07:3c:00:8d:fb:1a:
7f:ce:65:57:69:18:99:99:cd:1b:ce:7d:c9:39:ae:9b:b9:a3:
56:ba:9f:53:b4:ce:8e:70:be:76:35:13:64:7e:fd:64:88:f9:
c8:7c:80:c1:5c:90:66:2f:88:3f:23:ca:70:bc:2d:d7:49:30:
64:ec:d2:01:05:06:7f:57:07:ad:22:8e:0d:48:36:b2:66:f3:
81:0f:5c:e5:a3:b2:55:2a:df:5b:dd:5e:3b:87:db:31:af:b0:
0f:6a:ae:e7:00:f5:f6:2d:3d:cc:43:5d:3b:a8:5c:88:14:b2:
c0:72:0d:63:e7:87:7a:4b:b9:c0:a3:d0:16:94:97:fa:38:4c:
73:55:d0:98:54:fd:66:48:cb:e4:23:c5:78:5b:cb:53:ff:20:
b9:73:6f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:32 2025 by rpki-client