Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft
File: ROkQGinJOPhPhgRda-XfSz9Re9E.mft (raw, json)
Hash identifier: stjKHPGnHaG5vzgjPl7dNmKvDFdn3Jx6SXZOi6P/6dY=
Subject key identifier: 43:68:79:DE:93:DA:BA:D3:BC:B1:65:18:56:FF:8E:80:60:F6:55:60
Authority key identifier: 44:E9:10:1A:29:C9:38:F8:4F:86:04:5D:6B:E5:DF:4B:3F:51:7B:D1
Certificate issuer: /CN=44e9101a29c938f84f86045d6be5df4b3f517bd1
Certificate serial: 019892C821629218ADF30084A02CBC30C567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROkQGinJOPhPhgRda-XfSz9Re9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft
Manifest number: F1
Signing time: Sun 10 Aug 2025 07:00:45 +0000
Manifest this update: Sun 10 Aug 2025 07:00:45 +0000
Manifest next update: Mon 11 Aug 2025 07:00:45 +0000
Files and hashes: 1: 9Rl0BbPzjGtJ5SxKkQlNSxcKRIA.roa (hash: wlrYCSoZjr9jkjpsQGaOjVzZDExzEHE+3MSzP3WRJC0=)
2: ROkQGinJOPhPhgRda-XfSz9Re9E.crl (hash: pTLEgREAsPMSEHe3O4/6BGBQ5KiYpzoGcGqwOmwq2/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROkQGinJOPhPhgRda-XfSz9Re9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:21:62:92:18:ad:f3:00:84:a0:2c:bc:30:c5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e9101a29c938f84f86045d6be5df4b3f517bd1
Validity
Not Before: Aug 10 07:00:45 2025 GMT
Not After : Aug 11 07:00:45 2025 GMT
Subject: CN=436879de93dabad3bcb1651856ff8e8060f65560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:b8:54:5e:af:0f:9b:2d:61:eb:f9:b9:4e:
22:42:a5:22:49:23:8e:ea:30:61:23:04:bb:27:3e:
f4:b8:69:e3:b2:3c:49:f3:38:1a:dd:fd:2f:21:93:
a9:37:0d:af:6a:02:d1:cd:b6:82:ff:92:d5:ad:c8:
73:f4:1a:36:ec:1c:66:de:a2:fb:26:5b:4b:23:15:
b2:57:88:62:ac:ea:2f:aa:57:92:ad:e1:93:96:9b:
4a:39:45:df:80:80:63:60:39:28:27:d3:5c:76:60:
32:fd:77:59:49:33:e5:5c:1d:c9:1c:7f:29:c5:d2:
5c:30:06:75:ab:81:34:69:02:44:6f:d1:e8:3f:c8:
b0:8d:88:f9:70:51:77:6e:28:5e:fa:f1:92:a8:36:
f7:56:06:3f:c8:ea:3b:5b:3c:58:58:8a:0b:97:77:
ba:66:f1:70:0e:fe:78:21:59:80:81:14:e5:41:83:
ce:b7:1c:75:8e:36:aa:87:36:b3:32:07:73:ca:7d:
7b:c7:08:3a:1f:a9:c6:c5:97:ba:02:7f:dc:62:b1:
14:27:22:52:85:b3:5f:47:55:03:41:2c:e8:e8:3b:
15:68:95:bf:7e:b7:ec:cb:da:37:7f:d2:f9:a4:3d:
4e:94:fd:2f:80:2f:9c:75:9a:c4:ae:1e:3d:be:49:
c6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:68:79:DE:93:DA:BA:D3:BC:B1:65:18:56:FF:8E:80:60:F6:55:60
X509v3 Authority Key Identifier:
keyid:44:E9:10:1A:29:C9:38:F8:4F:86:04:5D:6B:E5:DF:4B:3F:51:7B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROkQGinJOPhPhgRda-XfSz9Re9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:1d:9a:05:99:73:7d:f1:00:92:7b:bc:d0:b3:1a:b6:d5:b5:
16:5e:4c:ee:05:0e:ae:03:ec:4a:ab:f1:f3:3b:38:b8:14:e5:
8f:ff:fe:ff:ea:5f:d1:51:cf:19:c4:68:24:04:cb:f3:ef:2d:
67:2b:9e:44:97:1d:49:5f:b8:35:9b:9a:f1:0d:87:1a:e9:9e:
0c:3d:c1:9f:eb:63:13:4b:80:a4:4f:50:56:81:e4:d7:7c:d2:
22:57:e9:fc:4c:5b:f7:af:90:93:0f:d3:a3:5d:fb:6e:af:0e:
22:f3:66:ac:75:91:8e:40:33:a3:f1:da:14:c2:a0:c5:ce:27:
32:49:af:f0:48:0c:d5:e8:98:3b:f9:af:cb:08:7f:78:bf:8d:
cd:00:68:4b:52:d0:26:87:72:6d:58:ad:5a:95:0f:7e:93:e0:
81:b7:32:8a:0c:19:91:af:89:44:76:22:d6:2f:1d:ee:06:88:
97:56:48:a0:a6:50:68:13:10:ae:96:f5:37:a7:96:b1:02:6c:
5e:c8:9c:8a:56:7f:59:9a:ea:8b:bb:a3:02:1b:13:4a:a2:6f:
ae:a0:4b:eb:36:4d:04:9c:2e:e7:a0:2f:22:4c:5b:ef:ac:b0:
e5:d0:2b:ee:fa:82:fb:3a:99:e6:c8:3b:7b:df:be:16:7d:39:
85:77:8e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:57:28 2025 by rpki-client