Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
File: RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft (raw, json)
Hash identifier: e4fTzyvQwuk0NC7S2JqgnkkEfODwCcShxbShA0lZjHM=
Subject key identifier: A7:11:F5:CC:D6:33:AD:80:11:1A:93:DF:85:7C:65:54:07:40:6E:5A
Authority key identifier: 44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
Certificate issuer: /CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Certificate serial: 0198963745034A8CD57FAA9CB055F2F87E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
Manifest number: 1338
Signing time: Sun 10 Aug 2025 23:01:01 +0000
Manifest this update: Sun 10 Aug 2025 23:01:01 +0000
Manifest next update: Mon 11 Aug 2025 23:01:01 +0000
Files and hashes: 1: 7IOpXXsSdgZOXKMUMqGRoYqSO7Y.roa (hash: eWhYbG4w7zhq0NpzbdSAGZQzXbPmck0Kggk9IJsP8fM=)
2: 8McigDSjzbaDusYUdfACWlAEraE.roa (hash: 8SiJAwZ4dMuVXUj8DbNfpd2t9t4+7zlehuNbJBAbbw4=)
3: RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl (hash: AZDcSLgcf1JXzGa1i0EoTdL3WZ+UaLGI+F0rUInpRP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:45:03:4a:8c:d5:7f:aa:9c:b0:55:f2:f8:7e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Validity
Not Before: Aug 10 23:01:01 2025 GMT
Not After : Aug 11 23:01:01 2025 GMT
Subject: CN=a711f5ccd633ad80111a93df857c655407406e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bd:e1:a3:70:2e:14:d8:d1:96:18:0b:51:a1:
67:e5:47:6e:20:70:c8:11:80:42:66:9e:d0:7b:fb:
fc:34:01:69:fc:9d:95:53:a9:1b:40:67:30:ab:26:
e3:a1:92:61:79:de:cf:a4:25:5c:61:72:40:e8:5f:
39:ba:5b:8f:2a:69:af:41:29:2e:6b:2e:85:93:65:
d7:0f:4b:eb:ed:76:79:7e:b5:f3:3d:75:16:a9:dd:
83:86:39:c6:7d:d9:24:d4:f5:45:0f:2b:97:ed:e2:
22:26:e4:57:7a:50:a2:d0:11:b8:f5:8f:87:2b:b2:
0e:bf:95:64:e4:95:8b:b0:46:08:30:1b:2a:11:17:
05:2b:28:bd:45:0d:8c:db:be:0b:5b:3d:ab:93:39:
0c:d1:de:c9:1b:cc:69:4c:09:8c:e5:f9:9b:4d:60:
ad:a8:b5:e9:e7:18:ff:8c:65:fb:4d:52:65:fb:81:
5b:ef:38:80:bc:ab:37:6f:0d:70:69:35:de:24:ef:
11:64:41:80:0a:f1:1d:10:67:db:8e:fb:d9:93:d1:
fc:10:a2:e0:c5:57:bb:27:90:5a:ec:f7:f0:f9:b6:
b2:1a:f2:09:32:23:51:9b:c2:bf:8c:4a:cd:59:5d:
a4:d6:ba:52:02:22:c6:b2:b1:2b:38:1e:d4:54:27:
b4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:11:F5:CC:D6:33:AD:80:11:1A:93:DF:85:7C:65:54:07:40:6E:5A
X509v3 Authority Key Identifier:
keyid:44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ff:50:b9:bf:87:48:4e:c3:78:69:98:4b:7f:b7:c1:0b:b1:
99:e3:2f:52:2f:54:8e:40:22:02:24:d5:96:ee:d1:8a:2c:82:
ec:50:22:6f:ed:40:10:a2:cc:8d:90:f6:6d:9c:6b:95:af:c8:
f7:3c:cf:72:31:83:e2:e2:1c:8c:22:3d:a5:e6:5a:62:b4:5f:
e4:6b:09:43:d3:f3:9c:45:cb:21:ec:31:85:1d:23:4b:42:cf:
a6:15:ad:11:f2:8c:e2:67:5d:e2:d2:0b:3d:91:44:06:db:f8:
34:cc:c2:9f:08:f8:67:f3:be:a0:89:f0:f6:b6:a0:58:da:f7:
83:68:6e:0b:7c:97:9e:c8:70:8c:22:0b:76:5d:d1:20:83:60:
04:49:29:06:a8:55:fd:a9:80:c9:22:d1:30:ed:36:37:84:46:
30:c9:bc:76:d4:ae:7f:9e:d3:17:66:14:4c:dd:0e:3b:46:ad:
78:81:2d:b3:bf:52:08:6d:4c:17:7c:05:68:a7:d5:16:da:03:
58:1e:c9:f6:70:eb:6d:67:65:c0:be:e9:b8:37:a0:df:3e:e7:
f6:d6:3b:d6:75:55:b4:8e:49:60:bb:c3:34:0b:08:ff:88:8d:
74:55:18:b4:44:48:b7:c1:b5:85:c3:87:ba:dc:65:c8:88:4f:
96:90:39:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:28:05 2025 by rpki-client