Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
File: SrfcA3ifWGIbJejdDZJdyRtKWqI.mft (raw, json)
Hash identifier: epI0EFltmv+g6IcT9a+0e1pZlYuWEerv/QA/AbF4fsI=
Subject key identifier: 0D:57:29:7E:2E:9A:8C:5C:16:EF:C0:93:93:2A:D1:E0:31:36:5A:C0
Authority key identifier: 4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
Certificate issuer: /CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Certificate serial: 0198D4DFF19925FD03D2989A74B6D2351ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
Manifest number: 0AEE
Signing time: Sat 23 Aug 2025 03:01:42 +0000
Manifest this update: Sat 23 Aug 2025 03:01:42 +0000
Manifest next update: Sun 24 Aug 2025 03:01:42 +0000
Files and hashes: 1: EmdE4lFlfaABPtiZtlnbFIKNWhE.roa (hash: xZDQuK6O09neLie5Q456W4oztNFuHLsLoArEyWHRJSU=)
2: SrfcA3ifWGIbJejdDZJdyRtKWqI.crl (hash: AJhEE99fP50pLhOcQw/K+QESS/bzPMSBbs99hLC7KdE=)
3: lCpE9-_9vA0HzQAwKrWQ7gX2Gi8.roa (hash: YkwTTveNH0IQGCLC0ZIMEDB0zjPdx3yFhcYm5gkoPpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f1:99:25:fd:03:d2:98:9a:74:b6:d2:35:1e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Validity
Not Before: Aug 23 03:01:42 2025 GMT
Not After : Aug 24 03:01:42 2025 GMT
Subject: CN=0d57297e2e9a8c5c16efc093932ad1e031365ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b0:a5:7a:1a:b5:0f:b3:13:0c:a1:e4:70:cc:
a9:d0:d6:a7:43:c7:f2:17:83:c2:04:30:35:9a:c5:
58:c9:f3:1e:03:54:01:58:28:b1:f4:05:61:54:08:
23:88:2b:ca:98:0e:be:ef:dd:96:39:5f:64:eb:cd:
cb:5e:3d:35:ed:bc:36:9b:ba:3c:a5:81:c2:5d:fb:
3b:83:82:cf:71:5d:f2:73:60:79:3e:94:7f:0a:4b:
5d:a9:9e:1a:25:c8:47:f0:26:75:29:f9:6a:5c:ed:
86:fa:b4:39:24:07:34:a9:03:6f:d1:7f:11:1e:b3:
86:a9:6b:1f:4c:06:4c:51:58:2d:5c:21:3e:d4:75:
b4:9d:05:71:c7:23:c4:f2:1c:d9:1e:2f:ba:59:c8:
b5:35:d1:08:fb:01:a2:3b:4f:f2:97:dc:5c:1e:48:
53:59:90:0d:33:39:16:6e:f3:31:f1:b9:74:c2:fe:
14:63:95:39:e8:6a:31:c4:93:ab:59:29:47:5e:6b:
06:99:b7:33:53:d7:59:34:df:9f:5e:80:0a:f8:46:
22:93:4d:61:68:2d:53:bc:f2:f8:47:e7:42:8b:f6:
0e:2a:8f:88:b4:3b:c2:38:8e:85:31:77:5c:ec:1b:
50:60:bd:3e:b6:f8:86:c5:58:e9:e9:b6:2c:0d:4e:
92:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:57:29:7E:2E:9A:8C:5C:16:EF:C0:93:93:2A:D1:E0:31:36:5A:C0
X509v3 Authority Key Identifier:
keyid:4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a2:6b:7a:86:1c:48:a7:cb:92:99:7a:1f:b5:88:bd:72:df:
e4:9a:08:8f:90:27:32:6e:da:e6:bd:67:65:cb:a7:7a:c5:3a:
84:ed:e1:cf:60:bb:37:9e:5f:1a:90:91:c1:6c:55:95:d2:93:
a5:97:7a:94:2a:fa:3d:9f:36:ee:9f:c1:98:ca:da:01:54:1e:
4f:32:d4:d1:48:f2:8b:08:d3:b3:1e:0c:82:67:a6:74:78:49:
34:1e:da:e9:25:93:cc:56:47:f2:15:30:50:4e:01:5f:7a:fe:
a8:03:61:e0:d9:a2:76:19:fd:7b:a3:95:05:38:0d:1c:87:87:
3d:65:6b:97:1b:1d:70:31:7f:1e:db:d0:04:06:45:0e:2a:51:
9e:4e:a6:77:c0:71:ae:6d:79:fe:75:c7:ff:78:ce:5b:03:e5:
44:33:d8:91:88:30:b0:66:08:2a:97:1f:1d:c8:21:cd:08:d7:
f6:34:66:79:e9:9d:5a:a9:fa:6b:00:71:3f:b2:37:1e:0a:b0:
8c:ae:07:d4:3e:0d:7c:30:38:ab:67:7c:fd:21:e0:88:64:76:
0c:8a:07:75:08:b1:27:a0:7f:e0:ba:5e:53:32:64:e9:47:c7:
c0:22:db:1d:37:04:a9:bc:18:72:0d:5a:40:69:21:64:c3:3c:
88:04:04:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:09:49 2025 by rpki-client