Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
File: ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft (raw, json)
Hash identifier: UVEVNwoXGChVb3qOSgWb07zgwB/0HS0IZmu3GM/g4jc=
Subject key identifier: 4A:80:FE:26:F0:59:ED:3E:44:95:68:B1:C8:1E:06:61:CA:29:20:36
Authority key identifier: AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
Certificate issuer: /CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Certificate serial: 0198D54EBD2F5EABF741F54C8BED6A32E21C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
Manifest number: 0B45
Signing time: Sat 23 Aug 2025 05:02:43 +0000
Manifest this update: Sat 23 Aug 2025 05:02:43 +0000
Manifest next update: Sun 24 Aug 2025 05:02:43 +0000
Files and hashes: 1: TK8oRVgmC_iGkqpkIUxL12Jskyo.roa (hash: WWQSgn1wOK2i+o7wtaeqJibMN9Pjr41qBXdRO7I04u0=)
2: Z6cP8UU8ou5UZa2tgmGF-TWXv7o.roa (hash: 4wKWfKiX6etE7Y85veoMkmwG3aEsU0NvUo1kjzyAViY=)
3: kcWTfdAykr4V6or-J5DNrcGjkPY.roa (hash: ogmpuXD/e22gpKD4xD0G9j8Nblm4BJXQE5obj3J5Qcg=)
4: ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl (hash: /7eU2e+l629KhX2ZOBZw4oSBFainVmH5uEEg3atYPY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:bd:2f:5e:ab:f7:41:f5:4c:8b:ed:6a:32:e2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Validity
Not Before: Aug 23 05:02:43 2025 GMT
Not After : Aug 24 05:02:43 2025 GMT
Subject: CN=4a80fe26f059ed3e449568b1c81e0661ca292036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:58:7e:51:73:b6:fa:9f:09:ab:40:ef:7e:45:
ca:b7:4d:4e:3d:78:de:6e:ad:04:ce:e3:56:23:0e:
39:65:96:27:0a:75:d0:ee:cd:37:5c:20:14:73:e9:
85:39:c3:24:7c:a7:7b:b2:c8:ca:52:06:b4:32:95:
25:5e:61:ce:e2:9e:0f:80:99:14:41:35:9c:68:a6:
ea:6e:b7:57:89:82:bb:d8:a6:1f:82:82:e8:85:75:
b7:89:d0:0c:33:c6:9f:7b:46:f3:1b:c2:0d:ae:5c:
c3:fb:bf:4a:ee:5d:c4:e5:e0:47:7c:44:a1:b4:3d:
0a:be:3d:2b:c5:9b:2e:ac:94:53:b1:7e:49:03:b5:
81:17:56:4e:ed:89:ca:55:54:66:7d:d4:bc:8b:14:
44:36:2d:8d:1b:fe:93:8f:6f:b5:d8:52:f7:c5:09:
32:0e:da:58:db:e1:bf:e4:7e:18:26:13:2d:e2:f1:
d0:38:a7:f6:35:1c:c6:86:a3:66:22:ff:4e:db:c4:
55:80:88:24:7c:2a:bc:74:3c:75:bb:bf:12:b4:ba:
a9:69:ac:ee:85:80:09:d6:70:6a:be:16:f7:18:cc:
0b:2c:b5:4e:3c:47:01:a5:96:df:d5:c5:2c:ee:25:
2d:de:9f:68:95:1a:a9:b1:d3:f9:32:cb:73:aa:cf:
f5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:80:FE:26:F0:59:ED:3E:44:95:68:B1:C8:1E:06:61:CA:29:20:36
X509v3 Authority Key Identifier:
keyid:AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:8d:1a:a1:d2:f6:a8:a0:58:42:72:f8:9a:f9:46:d2:56:c5:
98:67:cb:ee:87:c9:3f:aa:2f:89:b0:3f:eb:ee:28:d3:32:e1:
0b:ca:a4:23:0a:4e:59:1d:fe:65:ea:b0:8d:11:ce:9f:23:f1:
d2:97:35:0f:4b:be:2e:38:dc:4c:99:ed:05:05:9e:e1:4b:0a:
94:4e:82:36:d1:0a:73:c9:4c:86:77:d5:ee:66:e3:eb:1d:b4:
4f:14:03:8e:10:d8:1f:46:fe:30:fb:5c:fe:05:ab:df:b4:5d:
0b:98:f7:ad:a9:58:b9:ee:03:cf:4c:d7:4c:d2:91:4b:c2:4d:
04:18:65:4a:00:46:f7:cc:8c:6e:04:23:71:c7:be:31:48:7b:
8c:84:c7:f6:f2:61:a0:3f:8e:3b:72:03:54:b1:05:b3:3a:24:
02:1c:04:53:eb:d2:01:f5:f3:23:e5:1d:ec:d8:8e:17:dc:36:
fb:b3:5e:b0:29:5a:4a:a6:47:f6:f2:cc:ab:73:8d:5c:71:73:
11:94:8f:20:81:e7:6a:fa:73:08:19:79:5d:46:6c:1e:36:c8:
7a:9f:eb:81:fa:36:b1:eb:0a:9d:33:3b:89:64:c4:e6:fe:7b:
38:17:b9:e5:c3:a2:bf:65:94:07:3e:33:a6:d1:bd:f7:97:0f:
8c:7c:f5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:17 2025 by rpki-client