Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
File: IDHrupQ_rRxUh1QOAQXhnCMs95w.mft (raw, json)
Hash identifier: bnF4cfa/k8piCGOdO+2zin6B0bkISDxHPln7D+McDPo=
Subject key identifier: 79:F5:26:AB:EF:7C:CF:69:AC:67:E5:04:BB:E4:E4:3F:A2:25:AE:C4
Authority key identifier: 20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C
Certificate issuer: /CN=2031ebba943fad1c5487540e0105e19c232cf79c
Certificate serial: 0198D73B6CB1705EA28BB525AF391BD3343D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
Manifest number: 0808
Signing time: Sat 23 Aug 2025 14:00:52 +0000
Manifest this update: Sat 23 Aug 2025 14:00:52 +0000
Manifest next update: Sun 24 Aug 2025 14:00:52 +0000
Files and hashes: 1: IDHrupQ_rRxUh1QOAQXhnCMs95w.crl (hash: 2LjZ1qLFMwEu1l5UX6Eci93CUo46r4XzKTClutGJIWM=)
2: tKV7ZxqGnJTtEa2_ye8Y1d8JNh0.roa (hash: 8oiml4GgGUwThCKHUcnZfuIG0l8a7ZiiCuW4RZzZ3cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:6c:b1:70:5e:a2:8b:b5:25:af:39:1b:d3:34:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2031ebba943fad1c5487540e0105e19c232cf79c
Validity
Not Before: Aug 23 14:00:52 2025 GMT
Not After : Aug 24 14:00:52 2025 GMT
Subject: CN=79f526abef7ccf69ac67e504bbe4e43fa225aec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:08:d0:09:e5:a0:a2:37:cf:59:f2:e5:f7:
46:02:a8:ff:1a:f1:f0:15:e9:c3:9b:27:5e:d4:c4:
1c:b8:ab:fa:f2:af:56:46:57:8f:27:7a:84:0e:3b:
4b:09:d7:5e:69:10:f5:c1:71:50:6a:63:8e:b4:17:
66:6b:46:f6:99:9d:cd:24:79:25:0b:7b:0f:c1:89:
76:99:a1:29:34:a3:5b:dc:2c:db:c0:8d:10:f8:16:
dd:a4:3a:06:5e:9a:dc:7d:ff:64:e8:c7:65:d3:21:
0c:62:73:e7:73:33:bd:55:b6:33:a2:26:28:47:e5:
38:22:f8:4a:5e:7a:73:2b:06:fb:c5:42:76:09:dd:
b3:d4:7c:17:2a:05:08:83:11:ca:57:03:8e:e8:6f:
93:6c:1e:b5:cc:9c:a8:01:2b:ce:9c:c9:74:51:f8:
96:19:3a:24:a8:f2:21:74:22:42:a8:e4:7b:09:08:
66:ef:71:12:3f:59:1e:b2:86:a8:b8:34:f3:e7:0f:
e9:6b:b4:4a:c3:08:af:a7:a8:a3:81:92:36:26:3f:
28:10:e2:07:97:2e:07:fb:06:71:48:b3:6b:71:af:
83:bf:0f:5a:45:23:75:af:5a:a2:8d:c1:da:4c:3f:
be:34:10:77:1b:a6:bb:47:ca:23:8b:e6:c7:cd:8a:
84:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F5:26:AB:EF:7C:CF:69:AC:67:E5:04:BB:E4:E4:3F:A2:25:AE:C4
X509v3 Authority Key Identifier:
keyid:20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ef:01:9b:ae:f4:ae:fa:df:97:0c:1b:75:03:1c:11:87:6a:
59:0a:11:53:a8:22:93:31:89:cd:28:bb:e4:81:07:25:1c:de:
6f:5a:3c:a9:d5:96:0e:6b:49:06:ea:63:76:46:11:c0:97:93:
55:7d:b0:74:6b:86:d0:12:82:ee:88:af:11:41:22:ee:ea:ec:
cd:85:3a:ef:8a:b3:62:a7:10:03:fb:d9:77:76:d9:e0:18:3e:
c6:1a:83:aa:1e:ec:fa:e8:24:6d:04:bf:a5:80:f5:1d:8a:59:
b5:4d:44:9b:bd:68:a7:41:2a:73:47:f9:f2:00:da:5b:fa:25:
94:d3:cc:19:97:e6:f7:0c:f2:db:5c:d8:ce:07:c2:dc:2a:28:
ee:a7:14:79:7f:93:f6:90:8f:1f:29:61:61:4d:5c:9c:9b:dd:
08:4b:5e:11:f0:37:7d:a1:d3:78:cf:11:80:d4:00:86:54:dc:
a4:6b:73:4c:60:1c:37:dc:de:23:ce:af:50:6c:c0:85:92:04:
71:76:a9:78:bc:cc:dc:ee:25:84:ff:c3:64:9c:1b:68:c8:f3:
c5:37:b9:58:82:69:32:e7:71:c9:09:62:5d:ee:4b:f9:ba:10:
c5:84:d9:f6:b8:de:28:75:49:e9:56:a6:e4:63:a7:2a:1e:1e:
b5:e0:fd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:58:27 2025 by rpki-client