Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File: RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier: xB7EAWJDrCpFWyB6IfRT+dF7FigvERFceIyCOjF09UU=
Subject key identifier: 6D:C8:E8:D2:E4:87:50:FF:52:9E:3C:0F:3F:6B:06:18:35:0E:C6:B3
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 0198D404E15C805A533707BEF3738172A999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number: 0AB3
Signing time: Fri 22 Aug 2025 23:02:26 +0000
Manifest this update: Fri 22 Aug 2025 23:02:26 +0000
Manifest next update: Sat 23 Aug 2025 23:02:26 +0000
Files and hashes: 1: 0k2RQNwafgZ-e81VbpAz2vrqb3k.roa (hash: F4mQI6q3szQ65tq8yOXleP2UVhZpsKUbEGpteoYml/c=)
2: 8V7ejxEv_GEeH4w675eVpJxAMGA.roa (hash: dpmJ8CsMRM0G3BSxOyWtbvqZ7FYrfuSdRQhIjIL3rWg=)
3: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: Kb0H7AwkGUpW5R+GEjWUd6anlYuihoE1VPXl813KIE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:e1:5c:80:5a:53:37:07:be:f3:73:81:72:a9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: Aug 22 23:02:26 2025 GMT
Not After : Aug 23 23:02:26 2025 GMT
Subject: CN=6dc8e8d2e48750ff529e3c0f3f6b0618350ec6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dc:c7:e3:59:2e:b3:8c:48:7e:a8:09:9c:ca:
3c:f9:6a:7e:7d:69:76:40:5d:b0:70:b0:06:51:b9:
7f:c8:75:d1:5c:68:3b:f8:63:61:a1:ad:3f:b8:58:
18:ee:a7:ac:3b:fa:36:1d:f0:bf:1b:b2:f3:62:10:
21:6a:18:a1:29:49:60:ef:84:46:7c:50:f7:ea:f1:
c1:9e:08:09:61:76:d9:33:d1:85:e2:8b:46:89:36:
17:61:ac:f4:89:cb:8b:4e:f7:1b:b5:34:bc:7d:ef:
8b:da:21:f4:4b:73:00:02:3e:a9:e1:a4:83:1d:f2:
3e:e9:d9:b3:cb:9a:fd:8c:75:e1:1c:6f:27:ac:9d:
ea:60:16:10:f1:2d:d9:96:18:10:e7:55:53:b6:5b:
3c:ef:35:1c:d4:39:f0:ee:5c:2a:39:07:42:33:35:
4e:c1:d5:b1:25:c5:61:da:84:13:ea:d3:7d:f1:2f:
2e:ae:66:29:31:97:00:53:f4:02:fa:2a:5a:49:7a:
bf:7f:64:4c:b8:16:e2:2e:a0:f3:64:cf:81:f4:f5:
1a:f1:f1:81:72:fe:ee:2b:f0:64:a4:2c:43:0c:15:
9b:a3:e1:97:7c:10:75:39:d3:c5:5f:84:71:34:e1:
49:cc:d0:c9:35:91:2f:98:d3:6c:91:c6:e6:59:33:
d5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C8:E8:D2:E4:87:50:FF:52:9E:3C:0F:3F:6B:06:18:35:0E:C6:B3
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:1f:ef:ac:a4:82:f8:79:32:bc:bb:06:ca:11:bc:7c:78:f2:
a2:1a:d2:77:d0:c7:17:87:11:df:c7:be:eb:38:5a:a7:ec:e6:
a9:b4:a0:5e:17:65:db:72:9c:4f:31:fd:db:26:84:7b:3d:bb:
80:94:d5:19:89:f1:1b:48:80:bc:74:b1:b8:66:f4:56:0f:2f:
75:1f:40:b6:27:d0:94:eb:c3:7c:c4:6e:8e:93:fc:27:17:c9:
1b:e0:cd:0b:2c:f5:e2:07:3f:24:7e:97:76:d3:4e:2d:2e:05:
dd:0d:62:b8:c4:95:3f:cf:84:de:ee:d5:91:66:a9:76:fe:3d:
f1:70:b2:9c:f4:2f:b0:2e:13:98:c3:d8:94:75:8b:23:fc:34:
9f:ad:02:30:df:bd:47:89:7e:77:cf:a6:33:1e:4e:b9:1a:07:
d0:a1:21:29:fa:c4:d8:c8:2e:4d:73:94:5f:1a:e0:fc:62:bf:
d1:19:e6:e1:52:71:cf:30:75:c0:43:02:78:f8:c9:b6:80:ce:
72:ad:5f:b3:50:90:e5:fd:7e:e7:fd:6b:23:fb:e9:5c:cb:6c:
36:07:56:77:9e:84:3c:ef:7e:d9:5d:e5:1d:b9:0f:e2:26:47:
a2:2e:3b:5f:66:58:de:42:91:d6:a8:91:09:ec:c7:16:46:0d:
0d:97:5c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:33 2025 by rpki-client