Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
File: rSzfJ9neZesk5c_J0xDkyKAwFGA.mft (raw, json)
Hash identifier: cnjSRUTSFJKCdhVEjmfE71nxXQIDbI5ENhNBR91ousU=
Subject key identifier: 88:AF:16:11:65:24:EA:9E:0A:99:80:56:23:EA:78:58:B5:99:24:BA
Authority key identifier: AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
Certificate issuer: /CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Certificate serial: 01987306562C5559D17A626F442F1EA70AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
Manifest number: 0C1F
Signing time: Mon 04 Aug 2025 03:00:51 +0000
Manifest this update: Mon 04 Aug 2025 03:00:51 +0000
Manifest next update: Tue 05 Aug 2025 03:00:51 +0000
Files and hashes: 1: Zp_o_Avy64dimsDN37AJZ_vsvNw.roa (hash: w725AD9grVqnjs1N3X5smX0OnVgWb9b37Wpm1j4UCoQ=)
2: rSzfJ9neZesk5c_J0xDkyKAwFGA.crl (hash: 1k382VlpR4mjI4aMmJmBgWZG1u9QV80mUD/BmRCzCw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:56:2c:55:59:d1:7a:62:6f:44:2f:1e:a7:0a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Validity
Not Before: Aug 4 03:00:51 2025 GMT
Not After : Aug 5 03:00:51 2025 GMT
Subject: CN=88af16116524ea9e0a99805623ea7858b59924ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4a:bf:11:79:75:af:f9:9e:4e:d4:5d:c4:50:
0b:e8:b7:f3:28:77:b6:c9:27:be:b0:8f:80:95:2d:
23:e9:2c:dd:af:7f:38:82:d0:70:af:1c:a3:75:de:
a2:26:b8:7d:0e:fa:e7:92:2d:3f:db:7e:93:9d:9c:
3d:df:7e:db:79:45:9f:97:6e:0c:62:c3:28:6c:f2:
52:13:c7:e9:a2:9e:e9:cc:0f:21:8c:cf:17:eb:d8:
96:e5:0b:21:c4:24:dd:25:7f:05:fe:f5:8c:d0:94:
34:ad:c6:fe:c6:ab:5f:61:c5:d4:9f:83:00:23:68:
ba:05:dc:e5:7d:69:5d:22:81:71:76:a3:c8:90:eb:
c8:1b:8b:5a:72:cb:09:f8:2e:ab:b5:f1:8f:b7:21:
5f:65:ba:32:fe:36:77:0b:39:58:ed:32:6f:d0:9f:
8b:98:d2:0d:ce:7f:62:05:86:9f:a5:4c:bf:78:dc:
e4:a3:b0:7b:4b:5c:05:de:b7:36:f0:3a:b2:8b:16:
e2:e7:5f:a2:dd:d2:52:70:cb:08:03:78:8b:7f:a5:
62:6d:be:d6:4a:16:3a:a5:26:da:fc:b5:cd:e4:a7:
bd:69:8a:ad:06:3b:f8:bb:6e:c9:59:98:86:3a:92:
ea:c5:47:31:fe:7c:84:fd:da:f4:17:15:5e:d8:bb:
14:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AF:16:11:65:24:EA:9E:0A:99:80:56:23:EA:78:58:B5:99:24:BA
X509v3 Authority Key Identifier:
keyid:AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:be:e6:94:e0:2d:bf:66:b0:ab:92:cb:4b:6a:63:76:46:3f:
48:6e:88:ff:75:4b:16:95:98:95:61:e4:6a:0a:e3:13:d0:37:
0b:19:64:ad:e9:e6:0f:92:b4:af:9d:b3:ff:e4:93:f2:e9:a8:
4f:aa:ff:3d:d4:12:92:85:e3:2f:4b:f8:fa:e0:0f:dd:64:18:
39:44:9d:35:1a:d7:6a:f1:18:1e:a0:29:0c:04:3b:c7:38:5f:
e5:8f:b5:6a:f5:3e:9d:df:4d:53:2f:78:93:e7:82:a3:3e:70:
83:32:6f:a6:8e:9f:13:ba:a7:20:b5:9c:d3:52:d5:c4:89:83:
15:e0:ea:31:ab:94:c4:e9:f2:a7:c1:8e:b3:10:a8:0e:55:bd:
d8:f7:fd:ce:3d:39:19:2c:89:94:8e:e2:1d:c6:bf:02:bb:37:
2e:c5:38:5f:01:97:3e:3f:01:76:38:22:f5:0f:95:e3:90:c6:
3c:35:44:ef:b3:8e:43:c6:62:a2:d0:6f:4b:8b:32:08:c9:9c:
d5:7a:6f:17:95:f5:e4:dc:b5:00:88:f2:89:fc:de:e9:78:ec:
b6:5b:ef:57:21:7b:8c:2a:c2:d4:c0:3d:62:0a:45:ac:35:af:
a6:35:dc:e9:0a:69:7b:22:48:13:f1:6f:b4:e5:3c:92:52:de:
7f:2d:73:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:24 2025 by rpki-client