Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft
File: R1oGyte9DD25-KOB8euc1sdaqyg.mft (raw, json)
Hash identifier: MKQjfRMyIXCV3BXN4lqkPMjqLKC9dcjo/oIcfT5QD6U=
Subject key identifier: 8D:4C:16:B5:AD:B0:86:08:EA:8E:A8:F0:2A:B4:64:03:21:72:EC:18
Authority key identifier: 47:5A:06:CA:D7:BD:0C:3D:B9:F8:A3:81:F1:EB:9C:D6:C7:5A:AB:28
Certificate issuer: /CN=475a06cad7bd0c3db9f8a381f1eb9cd6c75aab28
Certificate serial: 019879AE07CDCE5B4573A2509D92B7AFCF56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R1oGyte9DD25-KOB8euc1sdaqyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft
Manifest number: 01D5
Signing time: Tue 05 Aug 2025 10:01:45 +0000
Manifest this update: Tue 05 Aug 2025 10:01:45 +0000
Manifest next update: Wed 06 Aug 2025 10:01:45 +0000
Files and hashes: 1: P26izWnWykundEbYZ5JEBhpU0uU.roa (hash: cWV+pN/zcAshvYcQxK5v+o4IGsyjFJQg91I3ipirKBI=)
2: R1oGyte9DD25-KOB8euc1sdaqyg.crl (hash: v65aeeaYbWbhnPY5XCQOz8Ti9xXgiONDKxuuGGd6O6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R1oGyte9DD25-KOB8euc1sdaqyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:07:cd:ce:5b:45:73:a2:50:9d:92:b7:af:cf:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=475a06cad7bd0c3db9f8a381f1eb9cd6c75aab28
Validity
Not Before: Aug 5 10:01:45 2025 GMT
Not After : Aug 6 10:01:45 2025 GMT
Subject: CN=8d4c16b5adb08608ea8ea8f02ab464032172ec18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:63:c0:17:9e:e4:3d:dd:8f:0c:ce:ba:ab:
d1:97:b5:3e:fe:3e:46:fe:11:7e:77:ad:cc:4b:08:
ca:2c:c0:56:ec:cc:fe:20:d9:cd:9a:ab:fc:b3:21:
c0:8d:fc:40:7b:df:47:b0:59:e7:ca:cf:67:b1:cc:
8a:61:ca:5e:df:d8:31:ff:37:7e:7e:60:31:cc:35:
97:21:6e:d4:22:de:c5:45:93:44:19:41:81:60:ec:
7a:40:70:93:21:93:f0:ba:98:be:f3:d9:d7:24:93:
cc:b2:72:ec:22:3d:c7:b3:d9:7b:5a:1a:68:12:bd:
2b:b0:26:d0:69:42:fa:14:22:ca:55:5d:ba:c0:b2:
3d:b0:46:e4:76:10:08:b2:f0:79:94:8f:dd:e0:6f:
78:f4:99:ae:ca:c0:7b:f0:bb:f1:80:66:41:12:90:
6a:b3:f7:80:72:d5:94:bc:6f:e0:16:08:9d:dc:40:
98:20:e0:59:a2:8c:c3:29:c7:e9:84:34:65:26:ca:
4b:ab:65:cd:78:3e:5e:32:2e:ef:ab:ba:d1:e1:03:
2d:3c:5b:4a:0c:c0:35:d6:1d:26:34:16:6a:01:80:
1e:98:f5:e1:a2:69:db:bb:9c:f8:a4:75:0f:41:1f:
ed:a9:ee:e0:7a:ce:d0:2e:0d:80:e1:69:d8:1a:72:
b3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4C:16:B5:AD:B0:86:08:EA:8E:A8:F0:2A:B4:64:03:21:72:EC:18
X509v3 Authority Key Identifier:
keyid:47:5A:06:CA:D7:BD:0C:3D:B9:F8:A3:81:F1:EB:9C:D6:C7:5A:AB:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R1oGyte9DD25-KOB8euc1sdaqyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:04:95:f0:81:28:cf:81:81:48:12:5e:97:f0:d4:35:fc:da:
81:2a:64:2a:37:ea:e8:69:04:f8:15:4e:79:9a:f0:95:c9:d3:
aa:50:7c:00:73:4e:c5:8a:9c:cd:7c:91:22:8e:3a:c4:f6:43:
1f:93:ce:cb:d9:00:28:71:20:f9:94:6b:ac:99:44:ef:d1:5b:
35:35:d7:02:d1:85:1b:9c:80:c8:38:11:04:13:ad:59:97:e9:
d9:99:53:3f:5e:52:72:69:25:0e:af:91:f5:84:2d:a6:80:2d:
71:7a:cb:54:22:97:6a:d2:04:ed:3b:62:8a:64:4c:a0:f7:f1:
2a:fb:3f:ad:82:c1:b9:d2:d1:fa:2b:0b:c0:6e:94:ec:da:91:
79:01:1e:02:0c:1f:19:5d:5f:01:42:b7:53:5a:cb:9a:0e:61:
88:16:2a:ef:71:6a:59:16:cc:9a:64:e2:bb:1b:b1:5c:2c:57:
a9:48:62:e3:ae:f6:6b:72:01:53:4e:8f:15:ad:3c:fc:14:99:
cb:88:83:fd:e6:67:9e:bb:08:47:d5:cd:4a:5c:17:68:78:d6:
ac:10:f5:54:28:9b:37:1b:5b:44:17:30:82:90:e9:b9:e7:33:
3e:fa:03:1a:63:a1:07:73:c0:76:d8:48:a9:04:5a:f9:b0:fd:
1c:7d:0f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:11:36 2025 by rpki-client