Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
File: roP3h5wsdKEWUrXgivZKrJCACwQ.mft (raw, json)
Hash identifier: CwLiOQ8o05XkoHazYnIedphQx4KQXuDOKSIyf1BBTfo=
Subject key identifier: A4:DD:FD:A1:07:C9:42:EF:18:07:A7:59:DB:7E:1A:C9:06:85:5E:4D
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Certificate issuer: /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial: 0198879F7B5DCC10D476B5532632CF673813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 03:00:32 +0000
Manifest this update: Fri 08 Aug 2025 03:00:32 +0000
Manifest next update: Sat 09 Aug 2025 03:00:32 +0000
Files and hashes: 1: MybCmB4b1BFDPTACJ5YE-7C3a3E.roa (hash: wDv5owiZFkNYSTe+2a532nAjJGNE7mvoA0ctW2ktRc0=)
2: roP3h5wsdKEWUrXgivZKrJCACwQ.crl (hash: ra+mT8oXOVzAhWdJKHFC7ySkJD+hZPbRmOcNM5Lv8wk=)
3: s4BqNapwmXilT71OYAf_1FRui4w.roa (hash: kbEYYaNpnssAu6Bf0kAHSemqVpHFQtEnzKXJ44cMHxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:9f:7b:5d:cc:10:d4:76:b5:53:26:32:cf:67:38:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Validity
Not Before: Aug 8 03:00:32 2025 GMT
Not After : Aug 9 03:00:32 2025 GMT
Subject: CN=a4ddfda107c942ef1807a759db7e1ac906855e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:79:2f:0d:46:9d:1e:a8:58:d9:5f:0d:bc:25:
e4:13:d7:fd:1a:5c:99:2d:66:ba:1e:66:f8:b0:c4:
ec:e9:23:10:1d:1a:44:98:10:14:86:9b:67:45:e0:
e7:a6:e9:43:ae:32:c4:bd:dc:cc:3d:6c:cf:4d:a3:
e0:72:06:ea:52:5e:41:40:6f:92:1f:ca:02:5e:87:
09:47:fb:32:49:8f:dd:ad:a9:83:c2:94:65:8a:60:
19:d4:f2:b3:0f:7d:bc:5f:a1:79:97:b6:6d:c4:ea:
92:dc:c4:12:b4:4d:56:79:5c:45:31:92:96:55:de:
30:f0:69:6e:fb:29:9b:7b:14:c1:74:0b:e9:f8:c9:
80:7f:89:ed:f9:c2:5e:94:64:59:11:53:0c:93:ce:
ed:e4:9e:4b:e5:2f:d7:39:a0:83:59:79:59:e2:25:
dd:7c:70:29:48:d4:6f:61:09:54:14:88:2a:c3:aa:
81:a0:3b:32:48:40:b7:d8:ce:7c:78:ef:aa:b6:b6:
e6:2e:1c:6b:9e:57:16:1d:75:03:50:43:2f:03:f7:
5b:e9:b7:af:19:8c:cc:bd:fa:d7:50:f3:4f:7c:2f:
13:dd:38:af:31:72:16:b1:94:45:da:ca:42:71:88:
8e:bd:6d:7c:1b:ae:de:16:31:89:c8:1f:fc:09:11:
5f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DD:FD:A1:07:C9:42:EF:18:07:A7:59:DB:7E:1A:C9:06:85:5E:4D
X509v3 Authority Key Identifier:
keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:84:38:26:e1:80:16:53:67:48:c9:0b:00:5c:46:32:5d:bc:
eb:40:74:ad:2d:d1:fe:ab:69:97:99:e9:e2:da:a1:1f:ef:e4:
57:13:83:a5:59:86:7a:e8:ee:e7:00:2b:4e:49:00:66:b2:4a:
61:20:f3:b9:18:c1:f7:1e:ed:95:b3:80:81:0a:cd:b1:8d:3c:
de:b2:43:04:3b:1f:3b:3f:1f:be:e6:2e:ca:11:9a:d2:32:90:
d8:c1:13:24:83:4f:f9:8e:1a:a9:b5:b0:fb:12:6c:d2:71:8a:
51:01:09:fb:b4:92:98:76:1d:0b:3c:82:90:24:af:8c:12:fd:
1b:26:89:b8:fe:4d:7b:32:de:eb:27:91:0e:95:56:97:8b:fa:
54:b9:eb:35:12:e2:b8:07:03:7a:5e:df:e9:2f:cb:74:17:cf:
37:10:56:a9:a1:e4:5c:4a:f6:9b:26:1e:b5:eb:9f:42:dd:5c:
47:93:82:a1:8b:a2:69:97:aa:dc:f3:62:8a:a0:5e:74:2f:8f:
8b:f8:33:8f:f4:00:d1:59:49:68:c6:c2:f4:c7:1d:7a:74:3d:
35:8e:56:ca:79:a2:4a:44:e9:6a:23:80:d8:6b:a7:2f:6b:31:
50:5d:ae:0c:02:88:0d:97:22:75:47:b1:f8:40:50:09:bc:2e:
50:b9:30:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:20:05 2025 by rpki-client