Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
File: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft (raw, json)
Hash identifier: RkYDc4jAW89T58xqYGensys08CkMi9+HGzbYIrKtN3I=
Subject key identifier: 71:A3:F9:12:39:95:0C:69:BB:42:F0:40:96:30:6C:7C:92:9F:5A:BA
Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
Certificate issuer: /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Certificate serial: 0198D65F9D861C33C9EFA33FCDEFEC810926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
Manifest number: 133A
Signing time: Sat 23 Aug 2025 10:00:47 +0000
Manifest this update: Sat 23 Aug 2025 10:00:47 +0000
Manifest next update: Sun 24 Aug 2025 10:00:47 +0000
Files and hashes: 1: 4jKaVB-LfLQCzkTYjVHTGVrvLiU.roa (hash: Dbf5cUJDTFeC16IHWdH+FZOyuiR9fHmIqJ0f+7DT0tY=)
2: L-kwHWoDaZVHymZSVKLj2CDl5JE.roa (hash: RzZtH5fSY0TqGEBtyH9cKZhJPNebxYKoH4rxiHLyN4M=)
3: VanRC4jdlI0kqk4muFN6P2QYkkM.roa (hash: UwcKA2rVfnEdm7lIuYa2eDQEpkXJsNm7mizYt8PPLFk=)
4: ZJAl9ImjoPtFm7tGn32RwL0IJHQ.roa (hash: 9vVACgeehLJBLJEdL35dqakk6HDNA29yLh2EDLIP5+w=)
5: ZljRltRiIrsMECExv8F7r5rYKsw.roa (hash: nxmE/fGDsanE/RF9PJbTsPR18T1YycJHuh5uUceeEDM=)
6: kYqAky72P3pEnQEl7_H71_oXMrA.roa (hash: OI+pqrPoYdkxRhXaxBipc3lXLF5qKe9eg06gVgRqd68=)
7: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl (hash: debjPdrDHacgZRL0T0MDzmzHWTrCgSqKEnXLC5sLTwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:9d:86:1c:33:c9:ef:a3:3f:cd:ef:ec:81:09:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Validity
Not Before: Aug 23 10:00:47 2025 GMT
Not After : Aug 24 10:00:47 2025 GMT
Subject: CN=71a3f91239950c69bb42f04096306c7c929f5aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:61:ba:8d:39:09:34:fc:f7:02:23:70:cb:10:
ea:2d:01:17:ef:23:38:f2:13:ad:11:63:8e:de:95:
24:9e:9a:ae:d1:29:f9:4a:39:a4:a3:53:a8:31:dc:
08:d7:96:79:ad:7e:65:ff:38:f8:60:21:bb:02:bb:
d9:76:a9:27:52:0a:8d:63:48:ba:a9:42:c7:9a:b6:
59:45:78:5e:e4:d1:69:38:e1:1c:db:bd:2e:f5:6e:
ab:73:b8:df:04:7c:ed:8d:b9:fa:b7:6e:ba:1e:50:
dc:7b:64:60:2d:1d:25:81:15:ed:12:a8:f8:09:eb:
e0:33:ee:6c:99:70:9d:74:35:ca:f1:fa:31:1f:9a:
84:47:a2:82:b3:27:d8:cc:46:9a:88:7a:e9:3d:99:
b8:6c:c2:77:8f:74:0f:5e:93:4c:fb:2a:04:6b:3e:
24:99:9b:4b:a3:7e:a5:11:df:4a:67:f0:dd:53:95:
e3:61:5e:f0:ae:21:4e:e1:ea:a2:8a:6a:58:70:11:
cc:de:de:fa:21:13:55:05:3e:da:e2:6c:1e:93:82:
29:aa:94:35:9d:6f:90:0c:65:b7:a8:1c:09:06:12:
a2:16:55:f7:29:8f:dc:c4:fb:62:5a:7b:0e:a9:43:
a4:1b:01:b6:ec:23:b2:f9:bd:df:ea:60:80:26:5e:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A3:F9:12:39:95:0C:69:BB:42:F0:40:96:30:6C:7C:92:9F:5A:BA
X509v3 Authority Key Identifier:
keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fe:c1:02:ce:bd:26:d8:48:3d:7b:7f:80:74:cc:88:ca:28:
ad:72:1c:ba:50:91:fb:23:3d:87:fc:9d:00:6f:71:82:1b:9c:
54:f4:c3:da:0a:a6:03:b0:1b:3d:3a:69:c0:7f:34:b8:57:b8:
96:79:5e:23:5e:db:96:43:68:14:db:cb:d9:d1:72:d5:5b:18:
0e:28:17:cd:3b:e2:ac:ea:da:42:40:6a:53:b4:be:5d:64:f4:
1a:a5:d1:19:66:e8:ef:98:36:04:ae:4a:b7:ea:f9:a8:8b:39:
5e:ba:26:60:a0:d2:04:81:fe:68:d9:3e:52:56:3d:b5:fd:b9:
03:c6:1a:a8:dd:8b:01:0f:08:61:55:ee:9a:b1:a4:4e:b4:69:
63:65:2d:17:a0:3e:cd:06:ac:5a:42:6b:a0:d8:cd:ee:01:b9:
1d:e7:85:99:29:cf:21:1f:8b:ad:61:f6:a1:59:bf:77:dc:73:
96:ef:ac:ca:b5:17:0c:78:db:76:b0:0a:73:25:9d:8b:f3:9a:
e0:97:c6:f9:0c:a1:b8:07:8b:6b:4d:99:a9:be:4f:3e:a9:df:
36:1d:ba:17:4a:70:c1:c6:47:f3:fb:a0:7e:08:63:3e:0d:dc:
04:c5:31:84:d4:3a:ba:25:cf:85:0a:02:5c:a5:4d:eb:3b:f8:
3f:95:d9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:23 2025 by rpki-client