Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
File: R1Ng86GS3KodPRlNtkwCVMN0vUY.mft (raw, json)
Hash identifier: pP+hvcvR1dotufsBrvUmM6ZeWDdHanZlqLF44RC7Nu8=
Subject key identifier: 29:DA:30:F1:52:8F:D6:CB:E1:AF:44:F5:65:15:96:A7:AD:69:3C:E4
Authority key identifier: 47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46
Certificate issuer: /CN=475360f3a192dcaa1d3d194db64c0254c374bd46
Certificate serial: 0198D473038D9F887EB01E192C3886E1AFD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
Manifest number: 19
Signing time: Sat 23 Aug 2025 01:02:43 +0000
Manifest this update: Sat 23 Aug 2025 01:02:43 +0000
Manifest next update: Sun 24 Aug 2025 01:02:43 +0000
Files and hashes: 1: LkJWDbjbslz0nNAtvCL992PnNAo.roa (hash: RL1MW6ZhRKLWTzPdhCcY/dLPWGU6pPW/YpPEx5flQPg=)
2: R1Ng86GS3KodPRlNtkwCVMN0vUY.crl (hash: 4VoTN1JYR24htbjivfQcUAVbmowW4VD+ce7XfDGCMFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:03:8d:9f:88:7e:b0:1e:19:2c:38:86:e1:af:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=475360f3a192dcaa1d3d194db64c0254c374bd46
Validity
Not Before: Aug 23 01:02:43 2025 GMT
Not After : Aug 24 01:02:43 2025 GMT
Subject: CN=29da30f1528fd6cbe1af44f5651596a7ad693ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:0c:79:26:5e:e7:51:d0:3b:4a:72:5a:16:
e1:2a:14:38:d5:16:cb:75:74:ab:20:6b:af:1f:52:
c6:c4:e6:bf:c5:2e:7b:dc:23:cd:48:f1:83:1d:7e:
d9:fe:e9:03:27:60:04:58:69:26:97:98:0d:ac:69:
ca:eb:c2:2b:24:67:f6:94:67:f9:6b:1a:bc:90:56:
74:6e:fb:e7:fe:1f:aa:c3:ab:3c:01:42:67:5f:d1:
d3:d8:e6:63:81:2e:b2:f8:37:34:46:54:c9:8f:7d:
c3:7b:03:80:1f:e4:af:58:44:15:03:ee:2d:cd:13:
9f:92:11:a0:f4:f0:c9:d0:8e:85:c4:28:30:83:a7:
bb:87:fb:42:95:c2:67:6c:b3:e5:ec:88:b6:66:d7:
30:56:ee:9c:2f:ad:32:d4:fa:c7:bb:4a:58:51:28:
56:a5:67:18:57:30:b0:a6:62:23:61:73:94:34:0c:
7f:b2:2b:45:02:b9:f2:12:a4:c1:f1:a7:30:65:13:
b7:fd:1f:45:be:48:e2:20:6a:b1:30:29:ba:ec:62:
29:4b:72:0b:9d:0c:83:bb:62:10:11:d5:ba:66:a2:
48:b4:95:31:99:76:9f:dc:17:7c:75:d2:89:e1:25:
0f:e7:25:d2:54:ff:68:d4:02:c3:31:b9:01:2e:35:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DA:30:F1:52:8F:D6:CB:E1:AF:44:F5:65:15:96:A7:AD:69:3C:E4
X509v3 Authority Key Identifier:
keyid:47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fd:b6:19:11:11:aa:0e:5f:29:4c:13:ed:b5:c0:4a:12:12:
50:7a:68:24:d0:84:dc:13:52:7e:2b:79:cb:3c:15:12:2a:96:
5f:9f:9d:dd:10:0d:a6:34:8d:fd:3e:94:d1:28:d3:11:18:45:
d9:2d:03:20:a8:d2:41:57:21:ce:40:5e:b4:77:5c:95:81:72:
ed:58:f0:36:fe:29:33:56:bf:b1:16:4c:fd:41:ad:86:2f:84:
cd:f4:ce:48:37:1d:84:e8:e6:87:11:58:6a:1c:02:a8:aa:2f:
55:7a:cb:06:81:2a:12:da:1f:cc:bd:e3:41:70:24:3d:b4:66:
e6:45:41:96:5f:0d:c9:d9:71:4b:aa:4e:75:4b:71:1a:9c:47:
5a:4f:54:ec:7c:97:3e:8f:85:6e:e3:e8:d8:90:56:1d:2a:6d:
a3:95:4c:9d:d6:cf:9e:58:29:71:b4:e7:42:20:0c:be:4b:b4:
49:8c:c7:2a:20:da:52:07:11:b1:bb:4c:ee:88:70:16:1f:52:
63:a6:1c:bb:30:87:86:c0:f0:ed:5d:d5:b5:4d:1f:01:15:ad:
b6:16:84:a1:ea:fc:ac:5a:a2:ff:09:d2:32:33:1a:fa:d6:bb:
2e:89:09:4d:65:03:8b:38:32:e9:39:a2:38:fa:95:50:3d:17:
ec:97:83:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:23 2025 by rpki-client