Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
File: si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft (raw, json)
Hash identifier: jJb7avbxZmeJlwHCF5eMOPBHJw5pBuivt3b32RLJMTQ=
Subject key identifier: 99:D3:C5:3A:39:6C:2D:97:8A:75:7E:14:3B:3C:E5:51:79:42:2F:D0
Authority key identifier: B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6
Certificate issuer: /CN=b22dd06501f99d47022d3a4039efcf439d0bc7e6
Certificate serial: 01988D342C728281726727805D9682F8C057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
Manifest number: 03F4
Signing time: Sat 09 Aug 2025 05:01:03 +0000
Manifest this update: Sat 09 Aug 2025 05:01:03 +0000
Manifest next update: Sun 10 Aug 2025 05:01:03 +0000
Files and hashes: 1: Ol4H0Ofe0seTJhjp23zwbv14mcA.roa (hash: h0M7hTbR8JXwLU22tU4Fw/p8crplmJ6JisUg1rjxv0k=)
2: si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl (hash: zyGEHKM0G0FpKnj9eLHDOWbNjOQSct/1HK35y66D1TE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:34:2c:72:82:81:72:67:27:80:5d:96:82:f8:c0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b22dd06501f99d47022d3a4039efcf439d0bc7e6
Validity
Not Before: Aug 9 05:01:03 2025 GMT
Not After : Aug 10 05:01:03 2025 GMT
Subject: CN=99d3c53a396c2d978a757e143b3ce55179422fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:5e:bd:e3:1a:4e:13:02:05:e2:18:35:5d:
c1:48:d9:56:f5:4b:5f:61:e6:df:04:03:15:a2:01:
25:33:bf:4d:7c:a4:c9:33:1d:13:ff:7d:f9:f5:dd:
ae:28:95:89:aa:ba:9c:79:ae:8e:18:04:41:5b:f1:
7e:c2:76:14:b0:63:4d:15:f2:15:fb:96:fe:d8:55:
72:81:fe:a3:44:a2:02:cf:de:c9:13:79:f6:12:23:
b1:5a:80:2f:2a:5e:f8:62:76:72:bb:0d:b2:01:17:
8d:7e:8a:87:d4:a1:a8:17:8d:0b:9d:c0:09:6c:e5:
9b:9d:98:32:05:ee:fb:92:45:9e:45:ed:e7:cc:ca:
1c:c6:79:d3:40:95:20:4a:32:2d:13:02:a9:e1:7a:
42:7e:67:2f:b6:23:d6:3b:76:f1:67:38:a1:e3:6f:
6e:6c:eb:25:25:ff:96:9b:f5:ad:37:ef:85:43:94:
bd:7c:12:7c:55:55:c4:58:f1:87:0d:c4:c7:6d:89:
f5:23:01:06:45:07:11:c6:e8:48:fa:65:ab:49:a5:
c0:de:1e:29:1d:ff:0d:3b:08:1c:e7:5c:2b:57:82:
8d:d8:0e:fc:e9:ff:4e:47:69:41:61:00:c6:fa:90:
85:97:6c:37:c6:cd:9e:0c:ba:5b:57:7e:d8:99:35:
36:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D3:C5:3A:39:6C:2D:97:8A:75:7E:14:3B:3C:E5:51:79:42:2F:D0
X509v3 Authority Key Identifier:
keyid:B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:af:30:8e:1e:12:ff:8c:a9:fa:9c:75:d3:56:45:ec:a6:5b:
f0:76:78:96:88:4c:13:92:27:01:5a:fd:b3:01:3e:19:95:13:
42:e5:72:a6:4d:59:bc:78:ec:21:c8:d2:fd:c0:87:89:da:9f:
ed:ab:4a:dc:69:cd:3f:49:58:74:80:f1:0d:9e:5d:ce:0c:2f:
57:75:34:06:9c:5c:60:93:cb:6c:6b:b8:58:81:0a:84:d0:b6:
36:0e:51:c3:ff:af:41:26:b4:7a:7a:5f:7a:37:6f:c4:f6:1e:
71:22:84:b5:d4:6e:c7:dd:ac:26:93:50:5d:9d:21:51:45:82:
55:dc:29:1d:d1:ce:59:fb:18:58:6f:06:09:c7:0a:f5:c9:97:
31:45:0a:c5:92:82:f5:34:d7:15:65:3c:f8:5b:f8:8f:f5:d1:
22:d2:db:bc:4d:8b:c6:50:ad:63:b4:b3:88:b0:83:16:57:1c:
76:cb:4c:7c:4e:87:b5:2e:25:1f:c8:90:6f:86:82:9c:78:bc:
a9:1a:be:ed:13:b3:9b:6b:aa:a8:2c:97:95:c2:97:ec:39:92:
2b:b0:d4:56:65:09:a5:18:a0:df:2a:4c:f5:a6:c1:12:8e:fb:
09:c4:9f:3f:9e:6a:54:3e:8e:2f:3b:0e:f7:c7:07:a2:a9:f8:
66:c6:1a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:47:35 2025 by rpki-client