Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
File: rN3HO1mh_N7iLiWCTUCswnKGqlI.mft (raw, json)
Hash identifier: ya7QZzLhbsClomP42+WFRUQ76d+IL+kDmE5bkxDJzec=
Subject key identifier: 01:93:DD:CA:3E:DF:D8:DF:CB:B1:B9:87:57:86:D6:B7:60:CD:42:C0
Authority key identifier: AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
Certificate issuer: /CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Certificate serial: 0198D51605917CC75320F738A3267D21E31D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
Manifest number: 029E
Signing time: Sat 23 Aug 2025 04:00:46 +0000
Manifest this update: Sat 23 Aug 2025 04:00:46 +0000
Manifest next update: Sun 24 Aug 2025 04:00:46 +0000
Files and hashes: 1: 9BGILAnZ0E1buckVknM_BD_9cHw.roa (hash: B/wVfv0goOmUGD/dZEjtMoprzU5nQZjGpEWlTzk5/cI=)
2: rN3HO1mh_N7iLiWCTUCswnKGqlI.crl (hash: JG9eNEkq9HSuw+IECd7foWUIh9+hMh5yiAXNNgiHa/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:05:91:7c:c7:53:20:f7:38:a3:26:7d:21:e3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Validity
Not Before: Aug 23 04:00:46 2025 GMT
Not After : Aug 24 04:00:46 2025 GMT
Subject: CN=0193ddca3edfd8dfcbb1b9875786d6b760cd42c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:6a:b7:99:85:b1:b5:0d:30:99:11:1f:8f:
fa:cc:7f:15:83:a5:43:19:a4:1c:14:97:94:0c:c9:
27:37:17:a6:02:5c:55:b0:10:4b:ab:d3:c7:54:0d:
c9:87:cb:e8:1f:5a:21:bd:be:4a:dd:fa:60:b1:fa:
72:14:e5:a9:d1:c5:35:ba:18:63:3d:7f:14:f7:7d:
32:e2:cd:1c:90:17:f5:f0:33:2b:c6:18:73:d4:86:
fb:6f:2e:0a:ee:ac:ae:db:34:87:20:bc:ed:d2:ec:
95:e0:55:9a:c8:d7:b4:8a:5b:e3:54:fb:81:b2:d8:
0b:50:d6:21:f3:51:df:6e:41:6c:a2:21:a3:90:ad:
bb:20:c6:9d:1c:da:5c:7e:df:ed:cb:8b:35:e7:9a:
6d:bc:2f:93:9c:5f:92:54:6a:df:9a:79:aa:58:f4:
aa:c9:a2:ca:fe:42:00:4d:33:c7:2f:3c:3e:ba:55:
28:bb:f7:7e:9f:82:3d:ea:32:e5:f2:4f:98:ca:48:
8c:5e:c0:56:7d:f4:98:0f:5a:97:65:24:8b:2b:5c:
24:63:4d:e6:5a:de:39:98:ee:3d:64:d8:2c:33:3a:
6a:63:77:5a:5f:c7:15:a5:99:8b:36:09:57:91:4e:
16:cf:a1:b2:e0:bf:89:75:15:da:2e:60:ff:b8:7b:
16:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:93:DD:CA:3E:DF:D8:DF:CB:B1:B9:87:57:86:D6:B7:60:CD:42:C0
X509v3 Authority Key Identifier:
keyid:AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:a6:b8:34:fa:ad:e7:57:2c:b7:7c:57:ac:14:c0:38:21:ad:
d7:05:71:22:97:07:ba:88:3f:e7:2f:28:16:d1:19:b5:36:21:
dc:32:ee:94:16:9d:25:fd:9e:d7:d3:b2:c5:47:11:eb:ba:3f:
c9:2e:1c:d1:e3:32:ae:e3:65:55:7a:e2:6b:86:3e:9d:0d:0f:
25:9b:7d:cb:e5:b6:0b:98:91:5d:db:05:2e:c4:d9:54:fd:00:
c2:27:15:77:e0:e3:10:fd:86:30:71:f4:57:e9:4a:83:2d:8c:
2f:46:3b:75:c5:99:48:b4:9d:00:8b:30:40:d5:0a:74:ff:a6:
99:e3:d1:21:8a:eb:72:62:a6:d0:64:94:83:4f:1a:dd:42:a4:
90:4f:00:8e:b9:aa:37:9a:1e:cc:18:17:f6:ce:86:c2:ca:7e:
19:d5:97:3d:89:36:d9:ad:af:36:eb:cd:ec:df:6d:34:da:9d:
bb:8c:2f:a1:17:7d:5d:b2:a5:c2:b6:ac:a4:9c:f8:d0:48:34:
aa:68:3a:20:fe:a2:8c:0a:55:3d:f6:44:c0:92:ce:bb:f4:b1:
99:16:2c:aa:84:dd:07:6c:d4:9d:df:7c:6e:82:c1:c1:66:8e:
2b:e6:2c:20:6c:43:2a:59:2a:14:16:75:aa:c2:94:16:a9:e5:
50:5c:31:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:09:46 2025 by rpki-client