Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
File: sIRyULOncSfffDx7je-MnZGdxLk.mft (raw, json)
Hash identifier: tCE2zWszgSCJcBRASzDu8mMRrdhhcNN2Oa0KL4s7rKU=
Subject key identifier: 6C:B3:72:4C:83:55:1F:1F:C9:9E:B6:8E:23:C9:5D:62:38:D5:35:10
Authority key identifier: B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
Certificate issuer: /CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Certificate serial: 01988FFE9C8AA7A9806389707B1E0D9C422E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
Manifest number: 0889
Signing time: Sat 09 Aug 2025 18:01:24 +0000
Manifest this update: Sat 09 Aug 2025 18:01:24 +0000
Manifest next update: Sun 10 Aug 2025 18:01:24 +0000
Files and hashes: 1: BEVOt5Hu7SlSOUV5TBn_pg8-Bq4.roa (hash: nEzdIf15rxzhFQC8rcsKrtOrx8pALRaykpAEEi2uLpo=)
2: sIRyULOncSfffDx7je-MnZGdxLk.crl (hash: mwZevz4Yct1BGrMl9OmGb059pIIriWv7LxFp6fq/D3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:9c:8a:a7:a9:80:63:89:70:7b:1e:0d:9c:42:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Validity
Not Before: Aug 9 18:01:24 2025 GMT
Not After : Aug 10 18:01:24 2025 GMT
Subject: CN=6cb3724c83551f1fc99eb68e23c95d6238d53510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:59:70:70:94:86:bc:5f:33:99:06:45:6e:bc:
56:e6:0f:43:ad:3a:5c:66:4c:d0:fa:3d:0f:38:d1:
85:4f:7f:9f:3a:21:28:6e:90:f1:8c:ea:e9:2c:cc:
72:aa:40:fb:15:83:36:50:c4:b2:0b:f2:d0:83:88:
17:56:5f:49:dc:f5:9f:80:91:bf:5b:64:4d:0a:74:
9f:09:7f:5a:e2:24:e7:ed:62:5d:65:13:5c:c4:70:
e5:f6:e4:b7:de:00:3c:65:16:0b:0b:79:dd:10:d8:
1c:21:e0:e2:aa:ae:df:b0:19:78:fc:ac:c0:d9:28:
b8:1e:34:e5:47:22:65:13:03:8d:10:f1:2f:e8:cb:
0a:1c:b5:6a:53:3c:db:6a:67:24:dd:7f:1f:1a:42:
24:98:3e:88:44:71:3b:61:50:35:76:37:82:db:60:
5a:c1:33:6a:67:6c:28:a8:5b:71:8e:61:40:21:ac:
7e:75:e7:34:fa:bd:71:75:03:1a:f2:55:47:42:9b:
c7:10:29:aa:18:1d:d6:7a:d5:13:82:d2:18:07:92:
79:51:4d:2c:8f:1b:9b:d6:6e:3c:ff:0b:e2:67:37:
6e:b2:95:f3:d9:84:82:29:d4:3f:31:78:cc:52:59:
a4:2f:a0:74:e9:3f:78:5e:e8:8d:41:e7:9b:8a:5d:
d6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B3:72:4C:83:55:1F:1F:C9:9E:B6:8E:23:C9:5D:62:38:D5:35:10
X509v3 Authority Key Identifier:
keyid:B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:80:21:0e:0c:91:f6:cf:94:b9:6d:78:f5:41:96:7e:70:ae:
78:e6:e9:29:ee:60:b4:11:dc:aa:e2:6e:89:a3:53:ef:51:43:
a2:fd:79:a8:c4:16:49:18:05:4a:d0:bb:41:2a:b1:c4:c7:c0:
fd:35:5c:cb:e5:de:8e:1f:41:b3:59:3c:96:55:ac:d5:dd:4e:
d6:a9:c2:57:51:f8:28:ff:d0:28:a1:85:0e:2f:10:9d:50:35:
5b:09:e1:6f:ed:86:f7:e1:e1:67:75:0b:26:32:aa:9c:c0:52:
c1:74:83:a7:b4:81:81:c4:45:6e:78:1e:d0:5c:85:a6:7b:7c:
0c:13:c4:13:91:70:85:7b:ef:33:f6:01:fe:0a:97:1f:85:c0:
ee:41:5e:19:18:d6:63:0e:ea:81:c7:0d:4a:c2:7c:52:6c:a3:
c0:a8:4d:0b:34:52:fe:3e:b7:d4:dc:64:dd:81:c1:92:95:8c:
9c:27:c2:b9:7e:31:2c:af:91:23:69:03:c8:cd:7c:f5:03:64:
cc:c1:99:41:4f:14:9a:b9:41:9d:a5:a4:40:cf:5a:df:7c:a8:
59:da:d1:dd:4a:a7:5e:f9:06:bf:20:d1:ab:07:4b:7a:3b:d8:
37:ed:da:5a:ba:5b:95:af:23:fe:d7:86:60:4f:8f:c1:7d:f3:
e6:59:d4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:39:20 2025 by rpki-client