Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
File: RlDGwCqb3k4XGH8FsOypUEg7-S0.mft (raw, json)
Hash identifier: IMTwl6ozKeiN69J6C+qTHx/913y0CszFX/UIvU1Cu3E=
Subject key identifier: 23:48:2C:1F:74:1A:C5:85:80:4D:2A:FF:41:B6:79:B5:C9:4C:79:9D
Authority key identifier: 46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D
Certificate issuer: /CN=4650c6c02a9bde4e17187f05b0eca950483bf92d
Certificate serial: 0198733D43EE5AA37F8F36E4E793B04DCC2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 04:00:51 +0000
Manifest this update: Mon 04 Aug 2025 04:00:51 +0000
Manifest next update: Tue 05 Aug 2025 04:00:51 +0000
Files and hashes: 1: 3NLIuHMmWgQs4wJxVy9Hy-aW-pg.roa (hash: E1YEQO+V+WEVpKPvVd6pcBugEFAnXKdDCtGzwwDY3UY=)
2: RlDGwCqb3k4XGH8FsOypUEg7-S0.crl (hash: muO07kyOflO/PXpeEmZZV27l+SPc/bp6UHvRHfimUNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:43:ee:5a:a3:7f:8f:36:e4:e7:93:b0:4d:cc:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4650c6c02a9bde4e17187f05b0eca950483bf92d
Validity
Not Before: Aug 4 04:00:51 2025 GMT
Not After : Aug 5 04:00:51 2025 GMT
Subject: CN=23482c1f741ac585804d2aff41b679b5c94c799d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:bd:59:c9:51:25:bb:0a:52:ab:68:66:41:
83:ec:06:32:95:47:17:34:da:50:76:ba:92:7f:52:
f4:ad:b6:17:59:58:8d:60:0f:00:fb:88:2a:ed:cd:
80:69:15:49:3e:4f:35:bf:6e:49:18:f5:77:67:1d:
a6:f2:45:7a:a3:93:d9:8e:4e:07:36:6c:50:95:49:
a6:e4:61:49:cf:7f:b1:71:02:70:0d:ac:6a:6a:b3:
f1:a3:00:97:a9:78:af:db:1f:4d:ec:53:c2:31:2f:
cb:14:93:5f:07:8e:a3:66:b4:b2:75:6e:ca:ef:5f:
9f:45:c8:05:eb:22:85:07:e2:f9:78:a5:19:65:b4:
85:9a:66:83:ef:23:ed:ad:73:56:31:4d:14:85:7e:
c3:f4:f6:8c:c8:b6:57:aa:3d:63:5e:50:d6:bf:1f:
81:58:79:f5:09:a9:c9:ec:ef:18:2b:2c:d9:12:6f:
b5:55:6a:0d:83:b2:a3:bf:f6:62:13:6e:bf:3d:7b:
e6:0c:ce:6b:da:6c:d0:11:8d:1b:18:26:99:09:97:
49:f3:cb:d4:53:5d:fa:3f:cc:db:83:7d:a9:11:c0:
4e:99:36:6d:d8:19:eb:65:b5:3b:3d:9e:91:38:7a:
c5:1e:4a:ca:98:73:36:21:e8:df:70:04:e3:ab:3b:
39:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:48:2C:1F:74:1A:C5:85:80:4D:2A:FF:41:B6:79:B5:C9:4C:79:9D
X509v3 Authority Key Identifier:
keyid:46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:37:5c:32:4b:41:e0:93:7b:e7:22:42:6c:f5:2b:f4:be:37:
2b:90:18:05:1d:1e:b3:eb:f1:85:6f:5d:df:8b:25:5c:64:da:
06:70:e0:82:2c:a7:e6:4d:c3:3b:a1:14:0b:fa:44:d2:6e:17:
70:99:5f:14:60:db:ca:e2:8f:3a:8a:dc:86:f6:c0:77:78:98:
d8:5d:ac:84:e2:d4:ff:d1:b2:5c:7b:18:9e:76:5a:1f:ea:55:
6a:a2:c5:8d:0c:bd:f2:e0:e5:e3:23:ea:89:61:3d:7b:86:87:
46:79:98:51:b9:4b:4a:79:e4:63:a5:6f:eb:58:b6:be:bc:36:
2a:85:24:6f:db:e5:bf:12:03:5d:bb:9b:f7:61:1e:2f:1b:bb:
e9:dd:81:d2:30:e6:63:8c:a5:5e:02:2d:c1:18:67:3a:82:bc:
cd:3a:6b:b0:3d:e8:24:31:cc:32:bb:8a:50:a5:f9:43:4e:20:
ef:ef:df:9d:f3:2b:98:b7:f9:5a:8c:25:78:06:00:98:42:b8:
c5:4d:ff:50:2e:f0:b4:34:02:61:d3:24:75:5b:0c:50:7a:07:
3f:41:87:78:1f:1b:66:3d:43:b5:57:20:d9:1d:36:c5:e9:d7:
2e:2c:81:b6:b7:3e:be:71:09:e7:fb:e2:5d:5a:11:bb:83:29:
9c:bc:78:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:22 2025 by rpki-client