Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier: YbhVtV4z9LIsY2/VirpA8FbwG3gIAosP9dHEL71yMvw=
Subject key identifier: D9:06:4D:4B:90:53:93:31:08:24:74:3A:63:84:2E:D6:93:FC:1A:36
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 0198D850D3F27EB4032A2647494EA3E83A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number: 04A0
Signing time: Sat 23 Aug 2025 19:03:52 +0000
Manifest this update: Sat 23 Aug 2025 19:03:52 +0000
Manifest next update: Sun 24 Aug 2025 19:03:52 +0000
Files and hashes: 1: 4ZmOjsOwgULv_B_QMvBBmXG9f0w.roa (hash: x7k9BFugEad58s4inzjh5oIEa4SPB8OHd1xRzbFg5n8=)
2: BuhLOhQsyBTsy289mKisTf0E47Q.roa (hash: aKuhf01k9TU7vUcFwfvkZL/qxoA5uBGJCmVJQlfg6tY=)
3: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: ZWjOySZwLC9elQojt5h0yZ38+8gcagHn6lu9ofvfHpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:d3:f2:7e:b4:03:2a:26:47:49:4e:a3:e8:3a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: Aug 23 19:03:52 2025 GMT
Not After : Aug 24 19:03:52 2025 GMT
Subject: CN=d9064d4b905393310824743a63842ed693fc1a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:48:40:da:d6:20:d3:1a:94:e1:f3:d3:43:59:
39:1e:1e:6b:0a:0c:44:91:83:d2:15:22:ac:cb:5b:
2e:e5:cb:d4:6c:ed:9c:c4:3d:41:64:0b:6e:01:65:
0b:c9:00:2b:81:29:10:50:81:7b:43:59:24:0e:86:
58:5b:7f:8b:e1:61:d7:85:01:a8:df:8e:d7:15:c4:
59:7b:09:27:23:2e:db:d4:b2:c0:ff:3d:4b:ff:ce:
1c:ed:96:f5:90:95:7a:15:59:42:25:54:61:69:d2:
25:a2:03:bb:eb:0a:e5:42:d4:b4:8b:84:38:22:b8:
ce:2d:0e:f3:ef:7e:32:63:4b:69:47:33:c8:85:66:
d8:3e:9f:ee:55:23:cc:c5:4c:c8:39:90:9a:75:e4:
28:b4:31:77:ba:0d:5d:ce:4e:7b:27:77:72:56:89:
b3:e2:be:f3:37:05:eb:26:c7:7a:34:6e:f4:79:e7:
ad:a0:e0:95:e5:ba:69:34:7c:d7:67:86:1e:77:f3:
d5:70:14:dd:29:26:65:20:97:89:f6:b0:33:69:25:
ea:fc:67:40:38:a7:96:35:92:1b:75:c2:7d:82:6c:
8a:21:37:48:29:70:01:e4:1f:c8:4c:3e:b0:dc:5d:
87:23:cd:81:55:5c:35:02:45:c0:02:6e:a1:bd:10:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:06:4D:4B:90:53:93:31:08:24:74:3A:63:84:2E:D6:93:FC:1A:36
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:38:96:7f:04:33:8a:44:ac:02:e2:84:b5:90:c1:e9:09:1d:
d4:ab:47:80:d2:2a:f2:37:32:cb:37:c8:34:25:69:58:e2:a7:
a6:ad:7f:14:b3:f3:6c:11:ef:17:5d:da:25:cc:d3:33:d4:f4:
3f:cd:56:eb:c9:65:ab:29:85:d3:58:82:07:f3:d7:4e:5b:86:
54:0c:89:87:d5:ca:30:03:ed:12:b9:1d:b9:6d:0f:84:30:38:
25:4d:27:06:0e:cd:9c:6c:12:a1:35:b2:e6:ac:1b:58:81:6a:
7b:cd:5d:f5:6d:0c:eb:1e:40:ef:88:4a:5e:96:ca:ee:89:e9:
c2:0f:2c:21:cc:53:b8:ea:f0:a9:d6:a3:d6:1d:8b:39:05:08:
29:e3:db:c3:ff:1f:85:c7:63:c7:e0:67:08:2e:d2:1b:c5:22:
44:c9:cc:4d:ce:30:1a:f8:5f:87:2d:05:13:1d:cc:de:0d:a7:
9f:3e:fa:bf:ce:65:ed:4e:36:d6:5a:1a:2d:ce:9a:7e:ca:c2:
c5:20:7f:f1:ea:6d:d1:18:de:c8:b2:5e:e6:33:cc:d3:f8:b1:
d1:03:14:1e:88:53:a3:60:5a:26:44:e3:82:fd:c3:46:d2:37:
eb:e4:13:1e:ed:91:de:72:74:50:ab:c5:c5:86:6f:cf:87:2c:
ad:b5:fd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:16:58 2025 by rpki-client