Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
File: rnLkfVZpJJmnJr-ADqg4A2Letr4.mft (raw, json)
Hash identifier: XX+KfUv6k9ZUnhprTM6ZVV1fUSdF3HqvKI7jUZrfz9o=
Subject key identifier: 2C:44:87:5A:01:A3:52:F6:61:8F:BF:F4:E1:CA:18:31:4F:57:C4:DE
Authority key identifier: AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
Certificate issuer: /CN=ae72e47d56692499a726bf800ea8380362deb6be
Certificate serial: 01987D89C7AA68731D4537C859BC801C7D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
Manifest number: 1625
Signing time: Wed 06 Aug 2025 04:00:38 +0000
Manifest this update: Wed 06 Aug 2025 04:00:38 +0000
Manifest next update: Thu 07 Aug 2025 04:00:38 +0000
Files and hashes: 1: 8tE73tTyc50FXb5YFWLLM8iDRuI.roa (hash: u90hDSgERXDnRD/Za5EPngqSUsaFRKPCGbCgiZ9sIyo=)
2: jNjUfwqgx7FxjC22ZM2tNJxUovE.roa (hash: CYjABvddLBiX5OMQlguXfrahjaGdNxRrjgGTFThsYz4=)
3: rnLkfVZpJJmnJr-ADqg4A2Letr4.crl (hash: i5yRqixn1p57PR7VwmrOlo4TMO33NHUO7ydIFoynoZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:89:c7:aa:68:73:1d:45:37:c8:59:bc:80:1c:7d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae72e47d56692499a726bf800ea8380362deb6be
Validity
Not Before: Aug 6 04:00:38 2025 GMT
Not After : Aug 7 04:00:38 2025 GMT
Subject: CN=2c44875a01a352f6618fbff4e1ca18314f57c4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:82:84:fc:73:34:a4:12:f2:93:81:8e:82:1e:
2e:9b:b0:57:94:df:ac:3d:32:8d:df:a8:8d:a5:3e:
33:35:0f:cc:3b:97:c6:7d:83:d7:e9:3f:25:09:4b:
a6:ae:88:46:c9:19:64:71:16:c3:ee:43:01:e0:5a:
f1:83:ab:71:07:58:18:ac:87:4e:a0:58:18:43:3f:
48:5d:56:17:db:e6:03:7e:de:1c:ad:3b:b0:06:bd:
dc:0e:f1:6f:5c:a6:b7:d6:1a:12:f0:7d:ff:4a:c2:
16:0a:f1:41:ad:74:1e:61:5f:f0:51:46:b3:ce:a9:
6c:77:b1:67:5f:2e:ad:2e:84:d0:6b:79:ac:d2:03:
54:48:1c:a0:25:71:74:73:af:2b:34:79:57:33:2b:
b9:d7:d5:6a:e3:97:e5:c1:12:04:5f:59:10:17:87:
6c:8d:32:40:43:18:16:7f:b6:50:4e:85:58:23:4d:
21:de:65:98:6f:9b:05:21:19:9e:ce:64:67:71:dc:
e5:9c:8c:02:5f:5f:3c:1a:12:f5:26:29:a7:86:74:
e3:6f:c7:fc:2f:0c:6b:85:de:b0:48:2f:98:34:f7:
9b:9f:46:2a:1c:d5:5c:bd:ea:9d:ac:65:a0:05:07:
dd:97:2a:c4:c9:02:6a:d2:65:00:47:d8:14:06:64:
3d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:44:87:5A:01:A3:52:F6:61:8F:BF:F4:E1:CA:18:31:4F:57:C4:DE
X509v3 Authority Key Identifier:
keyid:AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:28:68:4a:2d:21:05:4d:8d:1f:54:49:2f:88:f7:ca:63:41:
62:f6:12:e4:37:cc:1b:ea:13:31:2b:53:88:95:98:8a:bf:4a:
13:a3:d7:fa:73:75:6d:fe:62:00:3f:41:17:64:2a:6e:5d:1f:
b3:ee:b6:f3:b1:96:e2:bb:73:b5:52:c1:80:13:27:cb:d9:26:
44:15:44:f2:9e:22:29:5b:f5:03:35:91:5a:ba:ec:00:48:0e:
02:b2:8a:2d:e0:dd:be:0d:f9:6f:40:62:c1:14:d1:32:bf:6c:
0c:84:9a:a6:44:cb:11:c5:bd:73:72:7b:67:45:02:45:86:6b:
1f:1e:11:ba:ca:32:d1:e5:5f:a1:a4:db:41:1a:c7:d8:52:58:
bd:a4:c1:2e:bf:d5:39:c2:a6:21:bc:7a:17:39:d5:87:c0:f8:
c5:d4:5a:93:26:d2:6b:74:22:1e:4a:cb:ae:98:ad:be:aa:82:
4c:40:ed:61:45:21:e7:42:3a:78:94:32:72:17:ee:fd:c1:e5:
42:0a:37:99:a6:0d:1b:99:f3:2e:f6:53:f3:f4:81:50:4e:87:
43:ec:5d:42:1a:b1:2a:82:13:a8:fd:d4:65:31:ed:45:9c:b6:
f8:1b:4a:7f:cc:71:20:ea:80:8f:4a:2f:f7:47:39:f1:83:18:
af:5c:f3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:23:33 2025 by rpki-client