Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.mft
File: sIrODrPi30n9u3dyZxb7Zed3eWQ.mft (raw, json)
Hash identifier: Oh+phstTQCUpel989fhpw+a+j54mHyRaL9nIGY+0ppE=
Subject key identifier: 98:4E:17:DD:99:A0:47:0D:3D:07:7F:BF:78:9C:3B:1F:82:E1:C5:53
Authority key identifier: B0:8A:CE:0E:B3:E2:DF:49:FD:BB:77:72:67:16:FB:65:E7:77:79:64
Certificate issuer: /CN=b08ace0eb3e2df49fdbb77726716fb65e7777964
Certificate serial: 01987298DF5ABD0CF07C5B435DCF3168D340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIrODrPi30n9u3dyZxb7Zed3eWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.mft
Manifest number: 0A0A
Signing time: Mon 04 Aug 2025 01:01:17 +0000
Manifest this update: Mon 04 Aug 2025 01:01:17 +0000
Manifest next update: Tue 05 Aug 2025 01:01:17 +0000
Files and hashes: 1: diUYpUKMIXz1gLgZaNSVSKV18U8.roa (hash: 2LacqRpLn+KwsMEDop6qn6ZSkweQldM8ZPPhx+K/olo=)
2: sIrODrPi30n9u3dyZxb7Zed3eWQ.crl (hash: +Sx+VMN6nXmiCnk4eN1vfIXXuN4JqlhzTixuQMy+mAs=)
3: ypDy4xS2R6Ye6aWBkCNFAdcm0wI.roa (hash: hjIAAkji2+ZqYHRNKyPRkJEyLfHtgHEfz/xpi/TOXR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIrODrPi30n9u3dyZxb7Zed3eWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:df:5a:bd:0c:f0:7c:5b:43:5d:cf:31:68:d3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b08ace0eb3e2df49fdbb77726716fb65e7777964
Validity
Not Before: Aug 4 01:01:17 2025 GMT
Not After : Aug 5 01:01:17 2025 GMT
Subject: CN=984e17dd99a0470d3d077fbf789c3b1f82e1c553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:61:b8:23:36:d9:67:0b:bd:b4:cb:87:6d:96:
9c:dd:3d:38:fe:86:68:fb:85:5d:0b:bb:26:cb:47:
af:8d:62:15:68:dd:85:04:ef:89:23:43:c1:27:03:
8c:6a:91:fb:bc:25:e0:4c:ea:5e:cf:9d:f8:58:48:
79:04:ec:60:74:e9:55:cc:9f:e5:20:81:7e:f2:53:
fb:c7:e9:cc:96:1b:cc:94:92:74:e8:c5:58:4c:6a:
0b:42:e4:5e:7d:62:33:5d:c4:3a:8a:9d:64:87:18:
00:a7:65:11:af:fe:a3:68:3f:4c:40:5f:72:05:91:
01:61:25:ab:4c:b0:5b:06:c6:a2:a4:20:81:70:48:
54:7d:60:bd:3c:44:32:ea:6c:20:b2:06:20:0e:74:
47:9b:38:1d:e8:1b:59:86:4a:f0:33:7f:54:ad:62:
b0:36:5e:d4:9d:0d:cb:f0:c0:77:1f:2c:36:64:73:
39:b6:8e:30:26:2e:d2:3c:cd:86:09:a6:c4:6f:9d:
4c:9f:62:63:01:03:aa:48:ce:1e:14:69:f0:04:8c:
61:b6:ff:ee:a8:1e:a8:d8:a8:87:fc:da:3f:eb:f2:
02:72:43:0f:5b:86:b8:66:f9:b8:e9:63:f5:b2:55:
06:59:57:2f:eb:cb:d3:28:b1:7e:18:c7:06:81:72:
5d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4E:17:DD:99:A0:47:0D:3D:07:7F:BF:78:9C:3B:1F:82:E1:C5:53
X509v3 Authority Key Identifier:
keyid:B0:8A:CE:0E:B3:E2:DF:49:FD:BB:77:72:67:16:FB:65:E7:77:79:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIrODrPi30n9u3dyZxb7Zed3eWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2d:b8:00:aa:b8:97:af:54:c4:35:9f:e9:dc:20:d1:09:59:
09:f4:a4:c2:36:d0:c9:6c:3e:e2:70:56:c0:72:48:37:c1:f5:
dc:90:fe:af:11:4a:df:90:71:db:19:20:f7:0a:38:fc:f8:4e:
a5:3d:59:b2:64:2d:b1:12:74:85:f3:26:d6:87:40:01:32:2e:
38:ec:6d:d3:e1:50:65:c8:f6:05:ef:cc:f3:3e:bd:d2:bf:8a:
42:84:ab:e7:fe:57:64:3f:a3:2c:1f:60:32:d5:03:d9:a8:11:
74:74:ec:f1:86:9f:bf:10:01:89:95:a2:ff:10:81:98:46:e9:
d8:02:50:26:bf:84:84:77:ce:ed:36:2c:23:c3:88:30:39:6d:
07:f2:47:c3:bd:0d:aa:29:5b:55:01:3b:13:88:1d:d4:02:13:
d3:ef:fa:1f:97:4e:d6:e7:98:cd:f1:d1:d0:38:d7:be:73:94:
22:9d:d1:a1:21:0a:93:3c:81:5a:37:80:d8:57:0d:d2:18:29:
5d:9b:7c:f5:f2:84:39:f4:17:47:2b:f6:01:82:33:9b:91:00:
9c:45:d1:18:46:d2:30:c6:62:7f:4e:f3:49:fe:32:de:47:d3:
75:85:85:77:3a:07:dd:96:3a:be:55:c2:35:8a:41:20:51:b0:
05:db:e1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:07 2025 by rpki-client