Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
File: sVXa3bhxudalPNa0f3diUIN_d3Q.mft (raw, json)
Hash identifier: yodZ2rn7W3zRPlUqSvnUYhayKj+gz4Tv5x0hdRpsarI=
Subject key identifier: E7:54:73:C3:5C:1A:41:35:F0:F5:C7:7F:A2:03:36:C7:2B:15:21:49
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial: 0198D54E3596894A62E15B680125208D6041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
Manifest number: 10D6
Signing time: Sat 23 Aug 2025 05:02:09 +0000
Manifest this update: Sat 23 Aug 2025 05:02:09 +0000
Manifest next update: Sun 24 Aug 2025 05:02:09 +0000
Files and hashes: 1: SEy_q8yasarL4vhAyv6DcTF7WB8.roa (hash: B1SRh1WwCZtBHMAKkgvifQJ/iJUggGCgGgLLkNss5Nw=)
2: ahvH7VwsREz5RE_ZFd3kIxelgEQ.roa (hash: udwWfKom+EbN8jk91UYE1hrtLtfJILvdv1JBZTIFT0w=)
3: qFzA_pZ_xGWwQzfJMInzfWDKkuQ.roa (hash: 9OvJ6Tjvc0ybgSO+B/2T4VgdwfSjKx3tRoZuZYIdcTc=)
4: sVXa3bhxudalPNa0f3diUIN_d3Q.crl (hash: 2M1CJQKlH1plJfqVRfmeiRzwapgTrmOD4KGyWPu1NYI=)
5: wZzuntLr1Qz8EEQrI8gaxN9PJzk.roa (hash: /amIoY3uoWrTi9ErwL/m7gwpV0plV6uE2N5Muk44yLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:35:96:89:4a:62:e1:5b:68:01:25:20:8d:60:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
Validity
Not Before: Aug 23 05:02:09 2025 GMT
Not After : Aug 24 05:02:09 2025 GMT
Subject: CN=e75473c35c1a4135f0f5c77fa20336c72b152149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:98:14:fc:e6:6b:ec:3d:b4:77:8a:4b:27:eb:
3f:68:74:11:50:b6:9c:e4:56:9b:15:3d:08:1f:8d:
94:69:a0:52:d2:45:60:2e:16:50:d5:da:32:c7:ad:
e4:de:18:18:a9:fc:bc:e6:97:01:1a:d1:c7:38:f9:
f0:2e:59:71:37:b9:b2:57:fa:39:fa:7a:bd:a0:78:
32:bf:c0:94:92:3f:2a:5a:14:86:f5:55:d9:16:a4:
9e:5f:26:da:01:95:ee:e5:a0:44:7a:55:2f:2b:57:
a6:e7:5b:7a:d1:94:50:23:8a:b0:37:30:6a:94:4f:
f0:36:f2:cd:f4:39:bc:fc:64:c5:16:a6:83:30:2b:
99:57:64:06:79:c1:5a:a8:9d:85:95:97:05:68:82:
8f:c4:1e:51:c7:15:96:7b:6e:da:c9:08:d1:a9:e0:
af:4d:0c:0b:68:c2:cd:c7:26:55:7a:6c:81:99:c1:
a1:90:25:0d:94:ca:c2:93:a1:08:64:b8:48:29:61:
3b:ca:72:6e:f1:cd:bf:89:a2:40:c7:1f:49:3a:bb:
a7:c7:57:34:5f:db:68:a3:7e:f5:ef:dc:e5:11:cb:
82:9d:aa:16:cf:53:ba:f8:f8:9f:87:41:0e:81:7d:
c7:34:61:d7:fb:df:78:26:f4:41:f5:bb:aa:ba:42:
87:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:54:73:C3:5C:1A:41:35:F0:F5:C7:7F:A2:03:36:C7:2B:15:21:49
X509v3 Authority Key Identifier:
keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:94:df:47:ef:bc:fb:82:8d:b0:77:87:8b:ef:a7:a6:b2:dc:
3c:31:45:a9:7b:86:bb:dd:d7:6a:ad:af:79:00:a3:1d:74:c7:
87:29:7d:ef:73:e3:1f:f2:2f:21:97:70:a4:9e:10:a2:35:3d:
9a:4e:bb:ed:60:da:5b:9f:72:9b:98:0f:9d:ca:c1:bb:27:38:
2b:53:cf:4b:83:0e:7c:d8:70:f3:5c:2d:05:a1:20:2a:02:8d:
3e:85:15:f9:f1:40:68:72:79:a7:7f:a7:a5:a1:af:66:75:85:
c6:ac:10:81:9b:a5:9a:17:e5:42:92:5f:7d:cb:09:8f:70:99:
5c:f7:8a:a9:c3:5f:2f:9d:a5:a8:0f:16:f3:05:7a:bc:8a:c6:
eb:49:58:6c:39:d7:31:4c:50:6e:63:f6:c3:e5:e7:c4:4e:4d:
07:60:48:7f:e2:6e:be:90:94:bd:fa:97:14:81:aa:98:7d:0b:
5e:19:90:33:f0:b8:75:50:b2:ee:6d:35:11:86:25:1b:8a:3a:
dd:0d:97:1d:ec:b4:7e:84:c4:76:55:e9:c1:7b:97:80:28:cf:
ac:36:a6:26:5f:f1:5d:0c:6f:d2:f3:fa:0e:f3:ca:99:7a:58:
fe:37:61:0d:45:66:25:3e:41:9b:80:ea:61:52:31:44:46:f6:
40:a7:1d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:06 2025 by rpki-client