Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
File: raXVKzyodFRXW2W3IO74GiYqXzo.mft (raw, json)
Hash identifier: /qAo3WRT79PehcI9bLxu1klrUcwYHNVjbMD+GBkU/J4=
Subject key identifier: CD:E4:B9:1E:E2:55:E8:4B:E0:DF:2C:AD:D9:DF:92:49:24:48:70:89
Authority key identifier: AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
Certificate issuer: /CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Certificate serial: 0198744FC39E9012A7E28FDC680D76975D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
Manifest number: 0F56
Signing time: Mon 04 Aug 2025 09:00:40 +0000
Manifest this update: Mon 04 Aug 2025 09:00:40 +0000
Manifest next update: Tue 05 Aug 2025 09:00:40 +0000
Files and hashes: 1: YkyLNJe8eg5_ZWWXRqgb1FEedCU.roa (hash: yKbeF3cM/odTGzY3J6HPYew0I5seEJaLqL9iFLq9XbY=)
2: raXVKzyodFRXW2W3IO74GiYqXzo.crl (hash: ufYbmMLH36ywPjHciJayO0AacoGueKvIH0nTtQ9ABUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:c3:9e:90:12:a7:e2:8f:dc:68:0d:76:97:5d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Validity
Not Before: Aug 4 09:00:40 2025 GMT
Not After : Aug 5 09:00:40 2025 GMT
Subject: CN=cde4b91ee255e84be0df2cadd9df924924487089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7b:2c:02:be:7f:67:fa:a9:47:a5:40:32:83:
e2:70:fe:59:92:f2:48:a9:05:79:cf:15:c9:b4:ff:
63:7a:b2:9e:eb:c0:42:e8:de:99:3b:ee:b9:4e:cc:
da:f4:44:b1:75:0a:8e:d4:b2:31:01:58:b9:92:05:
19:71:a1:65:a9:69:61:9d:b7:86:77:ab:da:61:c1:
60:7c:ad:cd:ab:2a:c8:97:fe:46:12:08:06:29:b6:
38:65:74:df:96:56:82:4e:d1:a5:d0:90:4e:08:57:
bd:ac:99:e3:3b:66:62:9b:84:02:3c:97:d7:e3:5a:
40:86:03:a6:e5:07:02:8b:48:5a:3f:89:51:35:08:
71:07:1e:72:b1:3a:c8:18:44:14:19:51:93:23:77:
ee:df:c2:3f:22:14:69:13:2e:8f:bc:f1:91:27:99:
d2:d2:d5:f8:74:43:b0:e9:f8:f0:78:12:88:d1:0a:
7d:1e:c3:67:64:62:8f:61:b4:b7:f8:e1:3f:cb:8e:
f9:b3:d4:8d:d7:76:eb:27:86:a0:6f:0d:5c:5c:58:
03:d7:2c:3f:6b:5b:40:f0:b8:e5:5b:c0:ee:9d:b4:
71:e7:16:e6:6f:7d:61:8b:e5:75:8a:53:5d:15:7c:
f0:6c:8b:a6:cb:14:9b:b5:53:64:e5:af:97:85:2c:
ff:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E4:B9:1E:E2:55:E8:4B:E0:DF:2C:AD:D9:DF:92:49:24:48:70:89
X509v3 Authority Key Identifier:
keyid:AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:29:74:39:78:ca:b1:53:04:88:b4:32:2a:af:d3:f1:99:83:
ae:6f:b7:5c:d1:d7:a8:15:0a:55:77:95:82:e3:84:15:76:c1:
50:b4:24:75:81:d2:7a:28:1d:de:e9:79:39:66:e4:1d:a8:6a:
a4:fd:51:13:96:d7:c4:3a:7a:13:2e:18:48:34:01:97:3d:35:
e7:8e:13:f6:6d:73:50:a9:5c:e2:cd:d0:54:f0:b3:7d:83:ea:
a8:2e:fb:a8:2a:ef:fe:9c:0b:36:6a:92:ab:bc:45:e9:e4:cb:
2e:29:07:69:bd:42:ec:c2:5a:1a:48:43:0a:9c:3c:66:b8:bd:
80:f7:16:47:49:cd:52:f1:27:cc:c9:58:9b:72:0a:0d:15:db:
61:7f:c2:5d:8a:8c:aa:9e:01:c3:fa:40:3a:4a:2e:a5:23:b7:
d6:78:36:25:2e:d4:8e:2c:68:e2:0d:51:4b:40:b4:27:16:7a:
07:bb:a6:dc:38:52:3f:23:d4:86:50:9b:35:bd:09:5e:64:06:
8c:8b:7f:6e:d9:ee:91:a0:12:47:66:aa:51:bc:42:79:b2:0c:
2f:f2:99:49:67:45:44:b4:af:34:f0:ac:0f:bb:22:50:ab:9f:
e2:a4:7f:01:4e:f6:09:d2:18:5d:da:0d:35:f9:97:ce:78:43:
7e:69:8d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:14:17 2025 by rpki-client