Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
File: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft (raw, json)
Hash identifier: AcqxItAg8ujdnPOfgFz3TcbifUaFEUz7CiOgcuzOqUU=
Subject key identifier: CE:4C:1C:65:44:BE:9A:66:C3:D6:2F:BB:30:18:3C:78:16:30:4D:4B
Authority key identifier: 45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
Certificate issuer: /CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Certificate serial: 01988B7CF56C2A8F92CE307AB67761662ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
Manifest number: 10D8
Signing time: Fri 08 Aug 2025 21:01:18 +0000
Manifest this update: Fri 08 Aug 2025 21:01:18 +0000
Manifest next update: Sat 09 Aug 2025 21:01:18 +0000
Files and hashes: 1: GL43VxH_h-aWzE3G-2pFMtY1WM4.roa (hash: GegNsbMfLWk2tMOCfqZsrF9iNh5KkVnxnNq29fJOObI=)
2: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl (hash: 9Qec2juF8X3i2aFNByQlwaURCn/Ox+D3hdD3vIHVVQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:f5:6c:2a:8f:92:ce:30:7a:b6:77:61:66:2a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Validity
Not Before: Aug 8 21:01:18 2025 GMT
Not After : Aug 9 21:01:18 2025 GMT
Subject: CN=ce4c1c6544be9a66c3d62fbb30183c7816304d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:95:03:b5:ae:11:e0:0b:b5:dc:46:14:7e:da:
e0:fd:37:bb:f0:a6:1f:e4:4d:2f:e1:43:af:a1:31:
80:54:51:b1:78:f9:5f:59:39:f5:71:8e:d0:0f:a0:
81:a0:ab:f0:6c:b1:e8:5f:f6:73:9a:8e:d5:74:a8:
9a:ef:46:f7:44:59:1d:de:ed:91:0b:25:35:a7:fb:
d2:f1:61:da:16:52:14:75:62:7b:66:17:8c:69:c1:
2f:34:76:f7:78:c2:f5:2f:9c:da:19:41:e9:e5:23:
9b:80:4c:d4:ab:ef:c9:c7:1f:8e:41:f0:6b:8e:7e:
71:69:fa:de:a3:18:66:1d:c4:a8:37:c2:c9:8e:a6:
bd:e8:a3:80:2a:79:6b:5d:d0:21:97:ea:c1:ae:4c:
10:ee:68:5b:8a:e2:af:41:a5:c3:07:50:5b:c5:ed:
70:fc:21:63:f8:68:70:36:44:b1:22:07:c6:a5:1f:
7a:d8:00:ce:a1:58:02:1f:1b:24:8e:7c:51:0e:a5:
20:3c:42:4e:8f:ef:ff:3a:0f:c7:29:cd:72:ac:46:
b3:18:9c:f4:ca:24:8d:9b:ec:3c:19:62:ed:2e:26:
fa:bf:a8:85:6f:93:8e:bf:8d:e9:44:a9:aa:39:00:
f7:3c:6f:bf:35:e7:72:b8:ff:f4:de:02:21:d4:63:
da:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4C:1C:65:44:BE:9A:66:C3:D6:2F:BB:30:18:3C:78:16:30:4D:4B
X509v3 Authority Key Identifier:
keyid:45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7c:72:a9:24:d2:b8:f4:8d:50:34:66:2f:4b:f7:26:c6:7a:
ed:21:49:f8:4d:04:47:24:ed:13:e2:93:97:ec:95:0e:c0:cb:
9a:c6:97:db:1f:6f:97:5f:9b:3c:a5:d6:f3:25:3d:fc:3a:0f:
e5:4f:c7:79:b2:a3:01:19:97:11:27:a8:d3:85:34:aa:1e:0e:
ca:a2:c5:ae:98:9b:cf:a8:e9:df:9c:a4:8a:0c:76:b1:9a:8d:
dc:1a:83:4b:07:a1:e1:fd:80:d5:da:21:72:24:fa:c5:1f:32:
fb:de:6f:cf:63:01:af:14:0a:b6:bc:49:e6:26:95:2f:86:5c:
71:8a:ba:63:6a:92:d9:26:13:e7:66:3a:6a:2d:4d:26:99:5c:
39:90:9d:41:c7:3f:54:b6:a3:74:60:0c:56:cc:54:39:f0:37:
5a:29:ad:34:5b:0e:09:79:a6:ac:f5:09:5b:ae:c6:bf:f1:ea:
f0:22:f4:cf:d2:4d:44:48:57:1b:d4:e1:17:c4:d0:9b:50:05:
7c:91:5e:36:fb:ab:34:f7:a7:51:7a:3e:87:41:fb:9d:21:c5:
bd:25:8f:9a:f3:9d:22:51:8a:44:c8:bc:e2:22:70:41:9b:0e:
a0:b1:5d:b9:db:0b:bb:f4:ae:51:d5:c8:4b:5b:bf:c0:96:0b:
6c:39:0d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:19:07 2025 by rpki-client