Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
File: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft (raw, json)
Hash identifier: 24FBhWBwbhFW3nmAMJFFwwzqtc0fD2PwicrEy+APvOE=
Subject key identifier: 82:66:3D:DA:31:E4:DD:82:14:11:81:CB:67:D2:D9:20:9A:6D:89:CF
Authority key identifier: 4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB
Certificate issuer: /CN=4b1a238e043fe063a723b63159015393a64afceb
Certificate serial: 0198D47314AF3BEBE03692BA480831E3DCEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
Manifest number: 0574
Signing time: Sat 23 Aug 2025 01:02:48 +0000
Manifest this update: Sat 23 Aug 2025 01:02:48 +0000
Manifest next update: Sun 24 Aug 2025 01:02:48 +0000
Files and hashes: 1: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl (hash: bwpf9t0CdtBwuybk9W3EFIQuM2cDF6KSa2lkh9Q/Vlc=)
2: irUXbj8pGyxrPmrP5os28F3HvOo.roa (hash: NW1tIg5uUb1UHmkij/j3iUK3J1fgZQvXI2Lvvn/5OOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:14:af:3b:eb:e0:36:92:ba:48:08:31:e3:dc:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b1a238e043fe063a723b63159015393a64afceb
Validity
Not Before: Aug 23 01:02:48 2025 GMT
Not After : Aug 24 01:02:48 2025 GMT
Subject: CN=82663dda31e4dd82141181cb67d2d9209a6d89cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e4:43:80:53:6f:b5:e2:15:26:9a:fc:2c:b7:
62:0d:c6:24:97:3a:be:a6:46:9a:80:e8:7c:d9:5d:
ea:29:78:9f:a4:88:39:da:5c:4b:21:af:78:3e:ca:
80:e4:7f:cd:0d:b3:d3:36:e2:b8:ed:e5:42:44:ad:
5a:d7:22:12:39:9b:be:ff:fe:81:9f:11:98:81:78:
e4:9a:44:ba:a7:af:98:ec:6d:6b:83:01:4a:05:b7:
64:6d:e8:a9:f4:df:ca:a3:b6:6b:88:74:69:af:4d:
c3:16:1b:cb:91:bb:15:33:51:32:0d:21:e7:51:50:
23:42:38:ca:ba:47:8e:a3:f7:f8:f3:83:38:da:a6:
02:79:13:9e:6a:57:68:63:3d:3f:9b:52:c0:6d:e4:
74:34:c5:7b:21:72:ba:e8:2c:78:80:66:13:01:cf:
0f:2e:3f:8d:76:ed:8e:10:ae:f6:fb:55:0d:f6:25:
78:38:4f:52:c8:10:30:70:e8:7f:1a:a2:5d:07:4c:
dc:bb:2b:8c:d0:55:d5:05:22:4d:e3:ea:0e:4b:73:
13:5a:f1:2c:28:d3:ad:39:08:24:75:29:bb:49:85:
20:ab:64:60:2f:c8:10:1f:5a:df:95:44:05:bf:f4:
3c:e3:78:81:8a:db:fa:e1:f1:d1:3a:71:4f:27:8f:
3f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:66:3D:DA:31:E4:DD:82:14:11:81:CB:67:D2:D9:20:9A:6D:89:CF
X509v3 Authority Key Identifier:
keyid:4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:1d:b6:f9:91:a8:9c:fd:35:e9:5e:48:1d:c2:40:86:2f:a6:
8b:e8:5d:81:0f:11:b1:9a:b7:7a:a6:18:d3:4d:4f:02:93:92:
34:e9:d0:ec:7c:cb:25:18:88:da:06:18:96:0b:68:78:43:56:
cc:c9:bd:51:61:66:83:55:f7:95:d6:21:b0:56:3d:34:68:5c:
06:e6:82:a6:c5:e9:e6:95:12:db:69:38:cd:97:d6:10:67:6b:
3d:6a:78:9e:0f:78:f7:2a:63:48:ae:c0:39:4b:41:ae:ee:db:
b9:21:8b:4c:64:7e:af:15:c5:7b:df:40:21:18:30:eb:00:3d:
75:ce:1a:b8:bd:d7:86:ec:bb:f7:33:e2:64:c0:d7:e2:69:88:
97:b6:10:96:b9:85:b5:69:6e:92:ee:ae:c7:4d:53:07:84:84:
16:ae:a8:fd:38:71:74:95:95:c5:4d:0f:bf:be:3c:fd:64:88:
70:4c:f0:ac:fe:8b:00:93:f3:ac:25:71:fb:5b:e1:d7:d6:a6:
e9:68:7d:60:77:72:69:29:af:af:80:4e:08:0c:7b:cf:17:e3:
79:50:0f:8e:24:3a:e7:ce:40:5e:89:c8:b3:87:83:a3:0c:b5:
47:02:7b:c6:e2:d9:c2:da:5a:4b:6b:ce:43:f8:ce:b7:e9:2d:
f8:27:0d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:54 2025 by rpki-client