Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
File: s901zP9sK4ah-tjxA7wgBw0J5Q0.mft (raw, json)
Hash identifier: y+fZeT+XC+SFaF9VfM331nAeNOiRMym0uL/qI8shUA8=
Subject key identifier: 6D:79:B1:37:C3:80:94:7A:0F:2B:CA:61:3C:BE:DE:B1:96:3D:60:A9
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial: 0198D698783CEA68FF895F42B4C49E808F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
Manifest number: 1659
Signing time: Sat 23 Aug 2025 11:02:53 +0000
Manifest this update: Sat 23 Aug 2025 11:02:53 +0000
Manifest next update: Sun 24 Aug 2025 11:02:53 +0000
Files and hashes: 1: 9-NB3ppe0EfeL2Nj37oF8VJ41t8.roa (hash: ZMKYndtOmSHpSKO5kfkDg42yZItGmF3H5NrIrUVaQPk=)
2: W3ef7yk_8thOKV8fePQf_c3aBKs.roa (hash: q4TpxDQr4+wv6OyV3D6r4UE1e0P7/7+4PMrtZl4uXJc=)
3: YRU1Ojg5qyXEoXOhvO7oLvQPC8c.roa (hash: TDJgwlET1jOQj6C/tybMD3s4rcsYrcr30h1aS7JqjFc=)
4: s901zP9sK4ah-tjxA7wgBw0J5Q0.crl (hash: su0jErikKhgrcvM7nhdExmGIDicvBIUgNQDfZRdSOC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:78:3c:ea:68:ff:89:5f:42:b4:c4:9e:80:8f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Validity
Not Before: Aug 23 11:02:53 2025 GMT
Not After : Aug 24 11:02:53 2025 GMT
Subject: CN=6d79b137c380947a0f2bca613cbedeb1963d60a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d5:5e:da:f1:b7:98:b0:64:26:b7:07:33:96:
5d:17:45:55:91:cc:31:1e:df:07:45:66:3f:74:ee:
6d:d5:36:33:e4:0d:57:a4:82:b2:23:92:36:12:ff:
dc:6c:9c:7e:58:98:62:9a:1e:11:ad:c0:a3:04:22:
cc:14:d4:25:f2:af:a0:d0:a1:1c:98:28:ad:dc:ae:
7e:b7:b5:a7:e9:b4:02:2f:67:01:f9:2d:c8:b4:47:
b7:c6:8a:15:23:1c:d5:8a:8f:6d:75:6c:8e:1a:16:
b4:0f:89:43:1a:25:f7:61:71:e3:c7:5c:95:a9:8a:
56:59:a8:f8:d4:c9:1d:ab:d2:53:2e:d9:c3:b4:cd:
f3:11:26:d1:9a:17:67:a0:27:b1:8c:3a:d7:bf:f9:
57:7f:cf:fa:cb:45:9a:1d:b7:44:37:b0:07:a0:32:
7a:70:3b:75:b6:f3:26:92:1c:be:e3:ac:8b:6e:b9:
5b:34:d1:58:31:5a:4a:1e:38:14:03:de:78:8e:e7:
a7:27:00:cd:3a:8f:bc:6a:a4:3a:52:65:61:d4:52:
a9:ff:99:da:2d:87:1b:dd:52:56:cd:c2:33:ff:da:
d8:0a:bf:f2:7f:18:e6:b2:25:4e:6e:87:2a:29:02:
1a:33:8a:00:c8:b3:63:c8:2c:d3:83:8e:f6:8b:58:
c2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:79:B1:37:C3:80:94:7A:0F:2B:CA:61:3C:BE:DE:B1:96:3D:60:A9
X509v3 Authority Key Identifier:
keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f8:a8:e9:23:3e:60:48:d5:9c:ad:95:0f:8b:1d:1b:64:b9:
98:d6:98:18:be:5e:d5:cb:85:d3:42:3c:51:b5:ad:e6:8a:e9:
7d:55:ec:cd:22:61:30:de:f4:a7:a1:36:bb:7e:20:de:7a:56:
0d:7e:4b:e0:af:3f:c0:46:2c:e2:a5:da:93:0d:6c:ce:6a:21:
23:1d:e8:e8:83:dc:28:bb:97:84:34:b8:06:a9:2b:c0:cc:f7:
b4:25:d5:5a:61:c4:ea:fe:40:fb:5f:9b:dc:ac:ed:3d:12:75:
bb:eb:a9:f3:e5:e4:02:2f:1c:65:ea:af:c3:3e:be:2d:fb:08:
77:d7:1a:6a:ce:8f:ea:1d:2f:b5:07:21:8f:69:57:06:cb:b5:
fc:8e:e9:02:c8:89:7a:6d:86:b9:bb:e3:35:47:81:2a:be:1d:
ee:ad:98:f4:3c:3d:76:48:da:0d:fd:d2:a1:0a:b7:25:8b:9a:
b0:9e:a2:7c:68:73:c0:ab:95:9a:16:0d:0b:58:66:f7:ac:0c:
5b:ee:28:6d:42:6a:5d:1c:06:77:30:00:f0:93:34:cb:aa:18:
39:36:c7:86:7d:33:72:b4:16:83:d8:4b:1d:6f:fc:c1:68:cf:
02:ca:94:0c:56:5a:ce:72:88:bc:bb:7d:0d:77:7b:ef:95:26:
0a:16:e0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:31:29 2025 by rpki-client