Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
File: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft (raw, json)
Hash identifier: A6/9mgeiZeBqJiDDx5nFNKo0oxF31T3bOf0Rly2NF0Y=
Subject key identifier: 61:17:B2:27:66:EE:F6:F3:92:19:47:76:03:B4:47:85:61:33:DD:AC
Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
Certificate issuer: /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Certificate serial: 0198D54DF9FA6D8B28DB007253957643264C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
Manifest number: 0A86
Signing time: Sat 23 Aug 2025 05:01:53 +0000
Manifest this update: Sat 23 Aug 2025 05:01:53 +0000
Manifest next update: Sun 24 Aug 2025 05:01:53 +0000
Files and hashes: 1: IDl9kroYhzoJI3fNYZt14M849Mw.roa (hash: QNB7O1WZxj1n2YGUs6WaUGgoWKZNY20yWJ5q+ijsbDA=)
2: ba5LTz6E_24Z-FWHvFExip3Bfu8.roa (hash: 78/BEK6gt2JG+WEEQwBhHL/YE4AHR9z4L0gDnYa5BSM=)
3: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl (hash: XdMVyblQqDbwQNzRo8vfcXicOW+bqmQYQk7nDsjZwzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f9:fa:6d:8b:28:db:00:72:53:95:76:43:26:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Validity
Not Before: Aug 23 05:01:53 2025 GMT
Not After : Aug 24 05:01:53 2025 GMT
Subject: CN=6117b22766eef6f39219477603b447856133ddac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:27:82:ca:ec:80:6d:1d:ee:f9:7f:10:a4:af:
da:29:73:28:60:40:fe:14:84:d2:c4:d3:cb:35:37:
13:92:c2:e3:7b:3f:cc:45:fe:34:37:9e:54:55:c6:
2e:6a:c4:d5:89:f6:36:c3:3f:db:53:fd:c3:05:66:
b1:bf:6f:a8:f4:9b:5a:b8:62:ba:54:14:c6:bc:92:
2a:72:79:21:9d:71:9c:28:5b:f6:d9:f0:46:bf:7b:
2b:32:54:76:a6:40:a7:a3:49:72:d1:ae:35:42:ed:
83:b1:83:59:c7:1b:03:97:d6:5a:11:4d:d4:e8:75:
65:8b:55:06:93:b9:2c:3d:ae:11:7a:89:fc:71:bc:
e8:f4:4b:29:42:ca:4a:c1:9c:73:2e:61:10:2e:70:
c4:7a:51:2b:f4:55:63:7a:09:f4:e5:6f:6c:78:75:
91:95:46:27:f4:4a:08:93:9a:af:f4:ed:51:70:4f:
71:74:5b:3d:0c:6f:ad:e0:e8:10:62:29:99:c7:98:
1b:0b:ed:a1:b2:5d:7b:0d:ee:05:17:46:fa:74:e0:
91:b2:b8:7b:e1:44:17:e2:31:35:40:34:55:73:af:
15:a3:64:5b:50:37:9c:45:8d:66:d6:e0:7d:d8:86:
0f:17:a9:94:79:c7:13:6d:f5:62:3f:c2:3c:b5:13:
40:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:17:B2:27:66:EE:F6:F3:92:19:47:76:03:B4:47:85:61:33:DD:AC
X509v3 Authority Key Identifier:
keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7d:d2:7e:ee:21:7d:01:e0:f5:fc:ae:9c:54:38:ad:e9:aa:
b6:9f:9d:a8:48:7d:b9:80:24:f5:e1:82:5c:b4:43:f8:0a:db:
9a:2e:65:c2:32:a6:33:71:fd:e5:91:c7:32:b0:6c:3f:08:14:
0e:c1:ea:1c:3b:d5:34:98:df:5b:80:b6:93:62:91:e0:5d:22:
ed:38:1d:31:61:35:ef:35:37:52:42:b6:7e:1b:05:d2:91:25:
f3:1e:c6:80:74:68:f4:38:27:08:ff:d8:f1:51:91:39:fc:8c:
76:1e:c1:73:e5:ac:06:fe:75:3e:db:20:03:25:d5:54:85:5a:
66:a9:d9:ff:c6:98:3a:68:85:be:a1:1f:a5:39:c6:1e:68:01:
1b:70:fd:38:f1:16:f6:ba:3c:c0:ee:81:89:6a:0a:63:36:ce:
35:9b:17:d7:d4:2c:67:29:8d:7b:25:ee:65:fd:d5:7e:83:f4:
01:4e:72:29:8e:8c:f8:32:cb:ab:19:1f:ac:89:e5:62:d5:7f:
8a:65:99:29:3d:45:67:70:af:84:01:68:3c:76:7f:6e:a9:35:
00:76:de:1a:6d:f9:fb:f1:22:3e:4d:bf:fe:bc:77:86:8d:89:
54:c0:6e:ce:92:ed:fd:a0:89:e2:aa:30:b2:a4:bb:6f:7b:b6:
76:62:e9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:23 2025 by rpki-client