Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
File: rRfnAW-VOg5izKRWb_nRBSww8lo.mft (raw, json)
Hash identifier: YcRIqYjMHPdIO1V7KksRjkBuj5uO4NnJ5T6FObL9xUQ=
Subject key identifier: 80:21:6A:8E:ED:78:A4:DB:68:C7:86:CC:EE:C2:EA:E7:46:E1:FE:14
Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
Certificate issuer: /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Certificate serial: 01987E9D0A6A6DF73346E6FFDE47A37FD0AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
Manifest number: 0552
Signing time: Wed 06 Aug 2025 09:01:17 +0000
Manifest this update: Wed 06 Aug 2025 09:01:17 +0000
Manifest next update: Thu 07 Aug 2025 09:01:17 +0000
Files and hashes: 1: AsUkbA5N2PUwSi47FKCaYRJKFUs.roa (hash: pCCYd/C+MlVrRZtG5LOO+Gem9dQw10KaWQbtM9c+M54=)
2: h73Bb2bBsx_sZgOVLIvtxZLolnY.roa (hash: x94KOnEBWaX982PvdAszj32cQ+ALwtBcUGMJov9xLw4=)
3: rRfnAW-VOg5izKRWb_nRBSww8lo.crl (hash: o9iZN2h4yXHr3E/EOPe7tf623Lua5ON8BMn8XsuNMW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 09:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9d:0a:6a:6d:f7:33:46:e6:ff:de:47:a3:7f:d0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Validity
Not Before: Aug 6 09:01:17 2025 GMT
Not After : Aug 7 09:01:17 2025 GMT
Subject: CN=80216a8eed78a4db68c786cceec2eae746e1fe14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:50:b4:c8:61:c5:b8:82:36:e8:47:55:2c:
8d:6a:95:00:a7:e7:c6:94:e1:48:37:16:05:ed:41:
6f:e0:21:93:c4:3f:2f:81:91:ca:19:e1:1a:be:be:
ab:2a:98:9a:1c:6d:7e:25:25:8b:66:5f:9a:81:d3:
d4:66:2f:a0:eb:d6:7c:30:a8:3a:7d:5c:99:53:46:
f7:bc:cd:47:f0:b6:26:c0:ca:4d:b4:c8:ca:f9:48:
ec:3e:ec:a6:59:a9:8b:d0:43:9f:22:c4:a1:83:f3:
52:6b:56:bf:9e:4a:0f:75:83:63:99:20:8c:0f:66:
46:9c:3c:13:25:39:e1:10:c5:38:af:80:1e:72:87:
77:7c:11:5f:e7:5d:8f:8a:2d:41:3e:cc:05:d0:76:
3f:b4:19:0a:c4:30:7a:fe:2a:57:1c:80:2d:5d:d9:
82:27:be:57:5b:bc:71:dc:e4:3b:f7:18:e0:6a:89:
a0:bb:61:92:f9:94:9c:17:60:6d:8e:ad:c0:75:08:
b3:78:72:27:2d:45:74:af:78:f6:c0:a9:d8:26:3a:
b2:3c:c5:96:ef:5d:7f:c9:b7:e3:9f:d0:23:a6:d4:
6d:c1:f8:ce:90:5d:cf:f4:76:79:10:30:72:d0:67:
a8:55:82:c2:1f:8d:9e:e1:68:88:1c:09:a2:fe:87:
c9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:21:6A:8E:ED:78:A4:DB:68:C7:86:CC:EE:C2:EA:E7:46:E1:FE:14
X509v3 Authority Key Identifier:
keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:55:2e:0e:67:53:1a:a7:af:37:70:78:92:4a:8f:3e:94:da:
7b:c8:56:dc:c9:f4:95:9a:2d:ef:b4:7b:24:ae:5f:1a:c3:ed:
f3:61:bd:66:59:40:b3:50:cc:95:ef:73:77:70:d4:05:94:24:
7f:42:17:c6:e8:d2:54:cc:07:c0:d7:64:91:b3:4d:76:a9:2e:
fc:4f:f8:4d:bd:ae:b9:f2:8c:49:1f:8d:fb:95:52:0b:a8:11:
5b:86:fa:97:10:65:25:1d:08:be:f5:6e:79:24:90:e5:c4:2d:
da:f5:f5:6a:a3:5a:c5:47:15:96:2f:dc:2b:25:37:3e:cc:4f:
da:fe:99:15:32:16:0e:a5:8d:a9:29:63:d7:f7:54:4d:3c:9b:
ba:b6:58:fa:7a:47:35:e4:89:f0:27:80:4f:61:a7:0e:44:b9:
f3:3c:a0:ed:a1:24:29:93:f3:12:fd:db:97:21:4f:71:12:8c:
d5:cb:dd:19:d6:e0:cc:e0:fd:c2:50:2d:9f:30:90:19:c9:75:
f4:ad:ad:df:89:67:26:01:12:9a:99:5f:2e:48:09:d0:0a:98:
be:aa:c0:9c:15:23:39:26:ea:d9:cf:f5:31:43:5a:09:5d:7e:
e7:c1:96:c6:4b:52:d7:7a:08:35:84:e6:2e:d7:be:37:d9:3b:
42:93:6e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:35:47 2025 by rpki-client