Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier: H/nwZ8m53VLwB+1l7BhvHnrBCKv919V9L/SS5P/CCKc=
Subject key identifier: A2:25:36:71:59:9F:D5:86:1A:3B:A2:B4:8D:8D:22:E5:43:2E:87:B6
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial: 0198D6988A14A385057BE0D896B24E773E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 11:02:57 +0000
Manifest this update: Sat 23 Aug 2025 11:02:57 +0000
Manifest next update: Sun 24 Aug 2025 11:02:57 +0000
Files and hashes: 1: 3y9VMN9BUcZB2fmchyviGBmGtxw.roa (hash: WvArAvEQlUAHpEjB63U5q0z8PqLe+6GgRYCWBvbd2yM=)
2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: zdXZTqH3FdOiYpoMCgFvcVRD03bM9jj4+Lawiq6BCmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:8a:14:a3:85:05:7b:e0:d8:96:b2:4e:77:3e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Validity
Not Before: Aug 23 11:02:57 2025 GMT
Not After : Aug 24 11:02:57 2025 GMT
Subject: CN=a2253671599fd5861a3ba2b48d8d22e5432e87b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:29:be:a1:5d:09:05:84:27:cf:5c:b3:99:
56:68:78:71:7f:15:58:5d:79:41:73:ca:93:02:4a:
28:59:9a:e0:36:59:17:6e:c5:48:71:50:06:df:7a:
2e:6a:3f:13:e2:d0:dc:c8:9d:71:71:0c:5b:57:2f:
5a:93:52:c5:80:16:45:c9:13:d7:a6:2d:03:a8:73:
bb:12:b4:19:aa:e5:44:85:00:ad:0a:87:5b:92:a4:
3f:27:fa:11:b6:89:d5:dd:58:01:26:f0:29:30:60:
a1:2c:9b:66:63:29:06:be:06:08:17:77:39:f6:d8:
65:72:04:eb:d0:92:bf:75:e4:eb:44:e1:b2:db:36:
f7:81:4a:95:b4:d4:24:15:94:2d:28:9b:0e:af:14:
c7:da:8d:b2:27:6c:51:a8:a2:19:b1:c8:4a:55:06:
4c:22:d1:9d:fe:c9:8b:e6:b0:1a:9e:92:97:22:01:
97:07:a3:42:dd:e0:ce:5c:2e:25:0e:65:98:52:fa:
be:3e:e5:c9:ca:5b:51:c8:c3:73:81:5b:84:db:61:
64:b4:9d:7e:86:26:f4:cb:22:7e:97:42:7a:ec:a1:
97:6d:0e:8b:6f:6c:4a:4e:e9:e9:d8:46:1e:1f:b9:
66:00:a4:d0:bb:2b:06:1b:3d:9a:d1:7c:1a:07:ea:
54:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:25:36:71:59:9F:D5:86:1A:3B:A2:B4:8D:8D:22:E5:43:2E:87:B6
X509v3 Authority Key Identifier:
keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:18:41:44:29:d5:38:e1:c2:07:20:2c:e2:43:e2:a4:55:3e:
8e:5a:22:1d:d5:a3:9c:0a:85:62:1e:0a:0d:06:ce:ec:94:a2:
63:2a:1f:90:fb:b9:f7:5a:0e:03:03:ff:73:06:48:19:17:18:
18:db:18:89:39:ba:1c:d5:fa:f8:3d:d9:23:c9:90:57:40:16:
11:08:aa:53:37:dc:bb:50:d6:8e:c9:3f:f0:67:cb:ea:83:e2:
db:bc:f2:02:80:41:77:d6:06:90:d5:dc:f7:dd:8a:e8:a3:65:
fc:6d:fc:a2:03:ff:45:f9:c6:0a:48:26:37:fb:85:f3:1f:54:
40:08:31:6d:d0:50:6a:d1:27:d3:45:81:f1:08:cd:a9:01:c1:
79:55:7d:b8:57:ce:a7:14:bf:82:de:14:07:a8:24:f7:02:d9:
94:ba:36:2a:f7:8f:38:31:a0:ce:b1:9c:32:8f:c6:3f:b3:d5:
8c:28:f1:87:08:9e:b0:2c:2c:ac:b3:4d:72:14:cd:10:a0:0d:
29:49:1b:aa:c7:57:01:2a:0a:6b:1d:c0:e2:4d:33:f6:51:7b:
be:bf:e2:c6:04:4f:a3:de:ec:02:3f:b0:6c:1c:af:b4:f6:88:
12:30:f5:62:2a:5a:0a:ff:e1:31:28:53:59:d9:21:7d:7c:e5:
a7:b1:de:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:31 2025 by rpki-client