Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
File: 448QoseS0NNlZ4o2yn9_FAnKOv0.mft (raw, json)
Hash identifier: ldRvt5B/Afo6ZQtzHCUhOtrFBCCJz/293b5zRlMAsak=
Subject key identifier: D0:16:2C:17:83:5F:7F:B6:27:85:21:B8:2B:C9:34:AD:1E:6B:DB:51
Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
Certificate issuer: /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Certificate serial: 01988B7CC847FF08BABE77A0EC00B2F40627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 21:01:07 +0000
Manifest this update: Fri 08 Aug 2025 21:01:07 +0000
Manifest next update: Sat 09 Aug 2025 21:01:07 +0000
Files and hashes: 1: 448QoseS0NNlZ4o2yn9_FAnKOv0.crl (hash: L4Gigee3+53805tvAtgrpOeDqxoghgAZ+UJWTHwn+vg=)
2: cbASN3fk18Tj9McpzsqARVXR-pM.roa (hash: aAGlbD4TDLIdbw1wI2aN8qbwooD1yBpWxGj+IoRRzpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:c8:47:ff:08:ba:be:77:a0:ec:00:b2:f4:06:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Validity
Not Before: Aug 8 21:01:07 2025 GMT
Not After : Aug 9 21:01:07 2025 GMT
Subject: CN=d0162c17835f7fb6278521b82bc934ad1e6bdb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:42:3c:8b:06:c3:ee:ba:80:a9:9b:11:f0:27:
4e:76:f4:7c:2d:a5:26:4f:e6:28:cc:10:f7:03:91:
59:ef:c0:dc:2b:82:ba:1e:38:82:55:c0:36:ef:f3:
19:b2:b3:1c:52:d6:a4:1b:30:e8:1c:49:d6:08:53:
9e:b7:4f:8f:28:c4:5a:98:71:6e:d8:af:77:c1:15:
39:bf:a1:db:2d:f9:90:7b:19:ca:29:b5:23:df:f8:
65:63:9f:39:a6:df:ca:d3:44:6c:e9:ec:85:83:c6:
f4:a4:0c:30:e8:10:d3:7c:42:d2:03:fc:ca:9c:c8:
cd:66:e8:aa:10:1a:67:4e:dc:9e:35:0c:82:20:73:
2e:57:5b:92:22:f0:f9:61:2e:d8:04:bc:ee:fe:3e:
c0:a0:dc:63:5c:c1:08:52:0c:ab:40:f2:5a:3a:72:
ff:d2:b0:4a:e6:7a:51:1c:ce:55:31:ad:6a:2f:80:
f4:72:4f:77:6d:38:4e:f3:e0:ad:50:bd:61:5b:08:
77:cf:7c:25:8b:74:65:cb:51:6d:55:c4:b3:f9:65:
97:b6:8e:06:41:2b:16:ab:2a:e8:8c:6d:7f:c1:a6:
6c:c9:7d:3b:57:fe:61:00:c7:9a:f6:5c:15:10:f3:
8e:5e:65:33:7b:27:5a:7f:d1:97:38:49:d3:c0:fc:
8c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:16:2C:17:83:5F:7F:B6:27:85:21:B8:2B:C9:34:AD:1E:6B:DB:51
X509v3 Authority Key Identifier:
keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2b:f7:18:53:b1:9f:98:fb:b5:cc:8c:41:53:46:f9:24:15:
53:8d:c7:b1:78:e0:69:6b:88:99:ee:f5:ec:3e:fd:8d:11:56:
85:e1:44:84:74:92:68:d8:e0:5d:c0:07:1e:ea:4f:d3:44:44:
79:1e:d7:75:2c:3f:49:f8:f1:4a:97:9c:3b:64:40:07:f2:cd:
18:04:a0:ff:a5:84:26:49:13:54:2e:ba:3e:11:55:a1:a7:4c:
1e:59:01:ec:a6:90:0e:50:0b:cb:bf:fe:16:10:07:e8:f9:67:
ba:08:20:87:81:d2:6a:46:7b:b0:0b:e4:41:b8:4c:27:2e:e6:
48:4c:53:9f:17:5e:e9:a7:f4:59:5c:5e:2a:c1:d9:a5:15:63:
a2:98:52:5e:d8:90:20:8e:46:b4:9d:e9:7f:b5:cc:ba:f9:60:
75:d6:0a:34:1b:a2:79:14:64:cc:6d:97:ca:7e:36:b1:38:ad:
e1:cf:e4:1d:99:87:d7:d6:3d:fd:2b:a2:80:ab:30:a2:48:39:
88:5b:14:1c:7c:99:c0:06:ad:89:a7:c7:3a:35:40:ca:9a:22:
e0:ac:c1:13:8f:a5:57:1a:d4:bd:92:3f:71:c2:4a:b7:74:c8:
50:4f:0a:41:43:04:0d:f7:b0:eb:cc:42:cc:cf:eb:05:d7:f5:
6b:49:c1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:19:21 2025 by rpki-client