Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
File: sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json)
Hash identifier: oHxXVAIblJHVHC1QboZYy5C8/YvxoL8M0G9QDilJ6qM=
Subject key identifier: 55:FD:BE:B5:74:5C:83:63:B4:EC:5D:11:D2:44:B1:27:A6:E1:6B:49
Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
Certificate issuer: /CN=b039ab8298fa363ae837e530028969cc5cbf104e
Certificate serial: 0198D584027C29BFC1FA2B0EDB40CA90397F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
Manifest number: 04AA
Signing time: Sat 23 Aug 2025 06:00:55 +0000
Manifest this update: Sat 23 Aug 2025 06:00:55 +0000
Manifest next update: Sun 24 Aug 2025 06:00:55 +0000
Files and hashes: 1: mMP3R6Y_E5t6fees10l8AYe8F8o.roa (hash: GVxHnVRZ4k3nHcgJKtEX5VgjvPdVGaTcdXcLRvNp8IM=)
2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: ft1lKgpfXhAyoWBLv6nlmdOXvcTDPmxXoA735CFR8Ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:84:02:7c:29:bf:c1:fa:2b:0e:db:40:ca:90:39:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e
Validity
Not Before: Aug 23 06:00:55 2025 GMT
Not After : Aug 24 06:00:55 2025 GMT
Subject: CN=55fdbeb5745c8363b4ec5d11d244b127a6e16b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:0b:d3:44:6d:9c:ae:2a:f0:d5:f0:11:a2:
f7:f1:c6:0b:90:0f:77:f3:8e:95:23:2b:23:c1:93:
c2:2c:67:63:e2:ba:9f:81:5e:c9:d6:45:76:4b:41:
73:e9:6a:6e:d0:58:54:99:9a:c9:cd:83:d2:83:f1:
93:a0:45:d9:19:a9:47:71:8c:4c:2c:ae:38:df:0e:
a6:b9:e2:45:1d:0f:b7:9b:65:d9:a7:46:32:cb:4a:
93:3c:6c:78:38:9a:d5:35:d9:58:f1:cc:36:fa:5d:
86:23:a5:e1:65:fe:ae:08:ea:3a:57:56:48:e7:ef:
27:ef:f0:8b:b7:4a:45:b4:a4:32:8f:49:c5:a1:0b:
de:60:9e:c9:08:4d:35:08:2b:e2:7c:8e:e3:61:ba:
c5:50:cc:0f:38:66:fd:0a:2a:12:60:e8:d4:84:dc:
80:19:01:43:ff:12:39:6a:d9:5f:05:92:4c:04:32:
d7:d9:7c:a1:c5:da:23:ac:6a:0c:6c:88:bb:68:ec:
0a:b1:87:6e:95:a1:0c:c8:ed:fa:84:e6:02:84:82:
97:9a:75:d4:f6:86:1b:5e:1a:e7:ad:fd:7d:3d:b1:
7d:68:7b:89:5b:73:b5:a9:49:e6:a2:67:ba:4f:49:
d1:6d:79:28:d4:d9:10:4b:5b:8d:6a:35:31:30:fa:
63:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FD:BE:B5:74:5C:83:63:B4:EC:5D:11:D2:44:B1:27:A6:E1:6B:49
X509v3 Authority Key Identifier:
keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:8e:a6:2b:96:cf:9c:20:4a:bd:e9:f7:b7:33:47:da:c7:6d:
cf:64:c2:78:7f:dc:ee:3b:4b:3a:ed:ce:fe:db:46:0b:e1:e9:
52:76:97:1a:54:08:7a:5a:c6:32:55:dd:f4:76:50:dd:59:2b:
dd:a6:59:75:21:d3:f2:94:7d:46:93:99:4c:69:49:80:a1:82:
08:e8:59:ba:b8:88:13:a3:45:30:8f:32:71:21:d9:a1:65:5b:
e1:c4:88:87:32:e4:a8:0b:05:5e:22:e3:fd:75:8a:71:96:74:
98:56:ba:e7:fa:7c:d5:a5:af:56:97:a0:d9:11:e8:45:e7:d2:
3d:a2:dc:09:bc:d5:26:ef:91:9f:43:ed:8c:44:2d:d5:bc:82:
c3:29:b2:93:a2:86:f0:72:82:90:0c:43:75:66:8a:48:65:59:
90:ef:20:85:1d:e5:0a:77:ba:59:2b:8f:53:ff:ad:6c:a9:1c:
a2:78:d0:ee:d9:91:c5:cb:05:90:ce:02:e6:07:92:1c:a5:ca:
f1:bc:39:9b:b5:f1:4b:28:d3:0b:f6:78:4c:70:d3:c3:52:47:
be:ed:60:62:76:c2:1e:54:41:3c:b7:22:f0:c9:c7:43:e5:59:
b7:11:25:90:b7:d9:bd:3f:58:e8:ae:5f:2b:3d:79:3c:b4:25:
fe:8d:15:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:54 2025 by rpki-client