Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
File: roP3h5wsdKEWUrXgivZKrJCACwQ.mft (raw, json)
Hash identifier: qyVxRE+LbuHZYOzOi5KU9M1g1Odle4iOANH2juxCtAE=
Subject key identifier: DE:A6:00:1D:99:02:D1:84:AA:DC:9A:AB:BA:2C:67:39:37:62:B3:2E
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Certificate issuer: /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial: 01976DAB3333D349937F4EF0C8BF9A2C372D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 09:00:25 +0000
Manifest this update: Sat 14 Jun 2025 09:00:25 +0000
Manifest next update: Sun 15 Jun 2025 09:00:25 +0000
Files and hashes: 1: MybCmB4b1BFDPTACJ5YE-7C3a3E.roa (hash: wDv5owiZFkNYSTe+2a532nAjJGNE7mvoA0ctW2ktRc0=)
2: roP3h5wsdKEWUrXgivZKrJCACwQ.crl (hash: 2gms1QO5ekWmmsI1XTNHhaSxV532sD0/IjjVe3+LM8k=)
3: s4BqNapwmXilT71OYAf_1FRui4w.roa (hash: kbEYYaNpnssAu6Bf0kAHSemqVpHFQtEnzKXJ44cMHxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:33:33:d3:49:93:7f:4e:f0:c8:bf:9a:2c:37:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Validity
Not Before: Jun 14 09:00:25 2025 GMT
Not After : Jun 15 09:00:25 2025 GMT
Subject: CN=dea6001d9902d184aadc9aabba2c67393762b32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:0a:24:91:22:d4:96:ee:4f:93:fd:0c:4b:
ad:52:02:67:0c:7f:f3:ac:bf:9c:fb:88:d9:46:cc:
7f:4b:7a:8f:53:bd:15:25:95:65:05:9e:05:e5:bb:
bd:ea:ca:4f:93:66:4e:48:7f:5e:39:52:a8:e0:b4:
2d:06:03:18:19:41:1e:00:d9:44:12:1c:dd:5b:7a:
70:4a:9d:82:54:39:ad:f7:2e:21:af:3a:1f:93:34:
06:84:c8:a3:3f:ee:9f:87:e6:e3:83:fc:fc:f0:c6:
b4:d0:49:29:b5:2e:a7:45:0a:99:e9:e2:03:5f:60:
46:f7:9a:38:e9:2d:80:26:e3:85:a4:7d:09:17:bf:
6e:1e:52:cf:a2:99:0e:54:15:74:fe:26:fa:40:37:
90:24:db:4d:b7:82:eb:59:49:96:75:5d:a5:94:b6:
8b:bb:a5:47:f9:47:9c:78:d9:51:f0:65:47:a0:8b:
42:a7:ed:b5:40:35:fc:fb:37:1a:3b:57:6c:68:ca:
82:5a:69:a7:2d:d3:49:3d:0c:4a:e2:a2:2d:a0:3c:
3a:da:b9:b7:40:0d:03:a8:ee:ac:9a:ba:54:fa:90:
85:80:5c:1a:48:ea:5c:c3:73:07:76:d5:35:e1:c8:
04:93:25:4d:7b:74:af:81:5b:18:d5:a0:f3:ae:0d:
67:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A6:00:1D:99:02:D1:84:AA:DC:9A:AB:BA:2C:67:39:37:62:B3:2E
X509v3 Authority Key Identifier:
keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:01:1b:f7:85:9d:d7:e8:9b:bb:99:ee:fd:95:9e:14:92:86:
75:a7:22:5d:83:c4:44:25:70:3b:7e:f2:43:ec:74:ea:c9:0f:
3d:fc:0d:52:92:2b:03:2b:e7:4f:f4:be:3a:ff:a9:86:a7:c4:
ef:05:0c:26:0c:a2:6c:a6:22:a8:7a:25:fb:ec:0c:28:1b:62:
53:a1:a9:af:7d:8f:5d:c6:b6:dc:6c:df:49:a5:51:64:f7:0c:
91:0a:70:41:b5:f3:9f:35:00:8a:1f:07:b4:1c:d8:72:f9:39:
11:f4:0c:0c:e1:5b:f9:53:88:4a:12:e8:fe:ca:04:92:bb:71:
60:65:d1:86:03:aa:f0:a9:63:39:86:62:92:a4:b7:26:08:b6:
c9:8b:32:a2:09:df:ee:cf:5a:0e:93:59:7a:58:66:15:4e:9c:
f3:bf:61:59:a2:bf:ba:79:b8:a4:a4:23:40:7e:02:8f:1f:60:
10:3f:0f:e0:50:04:37:e8:c6:27:ef:fd:87:93:30:8e:96:9a:
ad:73:58:f1:db:b4:4a:90:60:a9:c7:e2:b5:ec:76:60:c1:63:
f7:32:d6:14:aa:f7:d4:ca:a2:68:4b:f1:76:1a:c9:39:44:10:
e5:4b:1d:21:a8:02:3a:72:5f:cd:cb:1f:3e:24:23:49:e2:36:
a7:c5:b6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:04:10 2025 by rpki-client