Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
File: sSQfEp2_xKFlH-zboDEI_NLMHfI.mft (raw, json)
Hash identifier: KlP0x+jDCG3rmWmw/PHeoSq3LgPZan6drE9c1pgTLBg=
Subject key identifier: 2D:0D:5E:E7:11:42:DA:01:9E:8A:1A:46:8B:44:A6:B0:26:E1:DC:6F
Authority key identifier: B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
Certificate issuer: /CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Certificate serial: 0198729F23CFDFFB2D2D34D9DC209455254D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
Manifest number: 09C0
Signing time: Mon 04 Aug 2025 01:08:08 +0000
Manifest this update: Mon 04 Aug 2025 01:08:08 +0000
Manifest next update: Tue 05 Aug 2025 01:08:08 +0000
Files and hashes: 1: 0YQNQfPH4Cu72DoID5FMdAcNaLI.roa (hash: spBps2jYr/x0LCQGlcWxdN+sgAztOxCYMMvfbn6x0Mw=)
2: sSQfEp2_xKFlH-zboDEI_NLMHfI.crl (hash: nux5Xj0xX7tUv5wdRVyLdUo9XQfsyKVBGcMWPvUvZ1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:9f:23:cf:df:fb:2d:2d:34:d9:dc:20:94:55:25:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Validity
Not Before: Aug 4 01:08:08 2025 GMT
Not After : Aug 5 01:08:08 2025 GMT
Subject: CN=2d0d5ee71142da019e8a1a468b44a6b026e1dc6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:f1:dd:e4:58:3d:96:f4:21:2d:96:1b:99:
f6:94:84:22:a7:8a:82:e6:07:99:cd:22:4d:c0:79:
1f:39:71:17:82:1f:60:73:8a:0f:e8:89:bd:04:89:
22:2f:bc:0b:95:8b:c9:cf:40:cc:4a:82:a3:03:d1:
ea:fd:df:f4:76:76:cb:d6:c8:e9:42:53:38:db:a2:
73:24:95:5d:a2:0d:a4:54:15:c0:52:59:b2:23:49:
dd:0e:e5:ab:4a:61:08:e5:38:1a:65:4a:9f:37:16:
0a:e0:b5:84:56:e5:51:c3:ce:07:17:fd:9b:b7:60:
84:43:f7:a0:5f:4e:d0:73:d4:69:7d:67:5d:00:ba:
67:da:f0:75:d9:3c:11:0c:f2:b3:6a:25:21:da:fc:
8a:ac:51:fa:6c:b8:40:e0:7d:75:57:f8:c7:fe:9e:
0b:5a:a9:bd:f2:77:98:94:7e:74:f9:20:9d:59:b0:
78:06:63:9d:71:5e:71:8e:9d:f9:5c:f9:c8:e9:fb:
ed:03:17:99:1e:4f:07:78:86:6e:8e:11:20:72:02:
ab:44:32:e7:ad:b9:3d:b1:cd:d0:10:b7:55:8c:d3:
12:07:df:b0:56:d2:de:66:6f:3a:7d:e8:55:68:5c:
9a:94:60:5b:ac:c9:c2:f1:e8:31:5a:f9:0c:d8:f5:
27:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0D:5E:E7:11:42:DA:01:9E:8A:1A:46:8B:44:A6:B0:26:E1:DC:6F
X509v3 Authority Key Identifier:
keyid:B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e6:03:d1:e2:03:0d:9b:66:42:e9:bf:04:0a:0c:ba:f2:2d:
42:4e:04:ce:14:e0:ef:1b:8f:60:06:c0:8b:8a:e9:a0:93:0b:
81:9e:50:e0:d9:e1:56:ff:2e:f3:9c:0f:8c:72:bc:d2:21:47:
61:42:11:d2:54:db:0d:41:fc:13:7a:12:1a:25:6d:e5:d3:38:
92:5e:56:3c:d7:fa:f5:13:51:ac:61:53:f4:f0:06:ff:24:7a:
ea:28:bd:ca:06:0d:ef:78:8d:40:4d:ed:9a:6d:17:bb:4e:8b:
3f:43:ae:c4:58:63:2b:c2:73:16:27:03:c7:b7:57:d1:94:75:
05:77:99:82:cd:21:1a:ec:b7:8f:7f:0a:16:4e:d9:1c:2f:03:
b4:f4:d8:d6:1e:63:a3:71:9d:d3:a9:db:c2:46:40:f8:18:c8:
a8:5c:6d:30:d2:8c:85:3c:38:d1:5d:09:99:1b:bd:59:05:84:
20:8b:0d:c1:54:79:4a:bb:6b:55:a2:94:c8:e1:cc:12:e1:06:
95:1c:14:55:4a:26:c6:a6:12:b1:5f:75:4e:c8:ef:df:2b:be:
ca:82:09:ab:ce:f6:ac:72:05:0e:2f:e0:53:d7:9b:b2:81:17:
4c:8f:03:f6:8d:84:99:db:7e:28:8e:9d:36:9c:84:25:e4:86:
32:36:e4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:51 2025 by rpki-client