Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
File: s8hW6VbErdthWY88JInyvfbtHRg.mft (raw, json)
Hash identifier: 8YAJ4PZXv6JHt9iJRVrKtHh+pZpyQa66JLk/vtAZ6BY=
Subject key identifier: A1:9C:78:80:ED:B2:EA:98:F5:FE:60:4A:5F:45:F2:D1:15:B1:0E:EB
Authority key identifier: B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
Certificate issuer: /CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Certificate serial: 0198733D2E9E0F1C92B9E0060C997274C098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
Manifest number: 15A7
Signing time: Mon 04 Aug 2025 04:00:46 +0000
Manifest this update: Mon 04 Aug 2025 04:00:46 +0000
Manifest next update: Tue 05 Aug 2025 04:00:46 +0000
Files and hashes: 1: Kc4V5tzdi4xhmWeJoyXZlmZAD6U.roa (hash: gVw1MMRDs2rY597vN0xWVEhdeHW2cAUodm7HsTOIyc8=)
2: s8hW6VbErdthWY88JInyvfbtHRg.crl (hash: rOLE6tdOOrZ7qyCVYv36tQuOzozjksIbqahHIdTQzbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:2e:9e:0f:1c:92:b9:e0:06:0c:99:72:74:c0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Validity
Not Before: Aug 4 04:00:46 2025 GMT
Not After : Aug 5 04:00:46 2025 GMT
Subject: CN=a19c7880edb2ea98f5fe604a5f45f2d115b10eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:6a:28:7e:33:12:d0:76:be:5c:4b:6b:03:
77:16:0d:92:75:e1:bb:13:22:73:e5:8d:d7:0c:8c:
a3:4c:ed:c4:7e:be:ed:b8:ec:a8:f5:63:85:4f:60:
10:23:8c:45:8f:86:11:d7:c6:5e:3b:d8:71:a4:fa:
32:d0:04:45:36:09:3d:99:4e:f6:45:ec:0c:4d:d8:
e9:a5:d2:5d:5c:71:a3:c9:bd:12:42:63:08:4a:67:
90:97:8a:f8:aa:66:09:46:3d:df:13:f8:e8:c4:2b:
ae:73:03:35:c4:15:3b:d7:bb:e0:ce:77:c1:39:ff:
09:a7:95:82:8f:82:30:55:b7:cb:67:19:31:1b:62:
f2:99:74:f6:d6:42:c2:c4:a4:48:3c:f7:25:3d:79:
5d:0b:6f:b2:d3:99:9f:01:01:8c:3b:16:cd:71:a1:
cd:5f:4c:56:e9:fe:8a:63:99:36:90:f6:68:1c:9d:
d8:fb:cd:b0:a1:96:80:5a:0e:17:0e:a9:12:5d:b9:
8f:d9:bd:d6:37:4c:9a:f2:21:a3:92:ce:fc:6b:bd:
cd:0c:14:97:d7:f7:a3:60:6f:90:cb:02:5a:19:28:
21:b9:95:1c:8a:44:f5:a0:94:6f:68:6c:84:df:23:
a7:99:73:08:87:c8:51:cd:6b:06:16:09:8c:6d:3d:
ec:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9C:78:80:ED:B2:EA:98:F5:FE:60:4A:5F:45:F2:D1:15:B1:0E:EB
X509v3 Authority Key Identifier:
keyid:B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:dc:15:c6:ea:e4:6a:8d:fb:cf:44:49:17:f3:57:47:f3:6e:
b2:3a:e1:e1:4f:6f:69:d9:07:d7:48:3b:d0:72:9b:ae:ac:8d:
4a:af:e9:c2:90:2a:cf:3a:bb:9b:3e:90:b2:b9:ea:31:69:fb:
2c:b1:20:2a:13:9b:65:18:ed:ab:70:1b:bf:d9:2c:e8:bc:7d:
3c:71:d3:a6:7b:de:ed:38:ff:14:bc:59:08:95:84:b8:d2:9d:
df:be:09:02:5b:49:37:4f:43:82:c6:f3:0a:67:48:c6:d1:da:
0b:40:81:98:ef:63:ab:51:64:97:a7:c5:62:b8:e9:e6:05:3f:
d2:8e:53:96:7b:73:8e:3d:63:30:ac:55:84:9c:99:ef:c3:a6:
7b:b0:96:0d:73:28:94:9e:67:41:d4:c3:c2:79:ab:07:da:c2:
05:34:5f:48:6d:f2:f7:09:fe:6a:f3:83:56:d8:34:d0:c3:0b:
96:18:5a:a8:0d:fd:86:d3:96:bf:5f:31:e7:37:4d:fc:61:28:
ed:a3:00:cb:8e:13:1b:00:64:e6:28:4b:4e:79:27:44:fe:a5:
7d:51:7d:e9:d1:a8:55:44:43:27:aa:7e:a1:b8:4a:a0:47:fa:
ab:d4:db:8b:aa:5a:42:c8:ff:c7:cd:25:3e:76:52:7a:ff:b2:
86:87:c9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:19 2025 by rpki-client