Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
File: rS044g8k0OMLhszYJhrAAX8XpaQ.mft (raw, json)
Hash identifier: rh4k+LCJB+X31nmqyGkn7eEoF9baV+L7NVwqnRNyOa8=
Subject key identifier: EC:4D:A1:2B:11:80:D6:CF:13:93:E7:AA:F3:F4:10:A5:02:DE:84:AA
Authority key identifier: AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
Certificate issuer: /CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Certificate serial: 0198D7A8BA1B8ADDD7F5B48018D6C4BD33E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
Manifest number: 0918
Signing time: Sat 23 Aug 2025 16:00:15 +0000
Manifest this update: Sat 23 Aug 2025 16:00:15 +0000
Manifest next update: Sun 24 Aug 2025 16:00:15 +0000
Files and hashes: 1: IhFmVxbE3gn_IPAxvOuH1Dxlo9o.roa (hash: oKXrmB0pSBgjznKzRYUFbiw4D9My9SBHtgqoNaUCBKA=)
2: rS044g8k0OMLhszYJhrAAX8XpaQ.crl (hash: Uy6zbS8Y4RYTEPDJ4rWSQGpM8ch5CRPpajswbss0vLc=)
3: wbXeB63VhLi_7WMIhOdMpk0lCW4.roa (hash: d7dOr+7PutspTBpcReyCrf+E8CzcxyNVV7Zc8qzo3dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:ba:1b:8a:dd:d7:f5:b4:80:18:d6:c4:bd:33:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Validity
Not Before: Aug 23 16:00:15 2025 GMT
Not After : Aug 24 16:00:15 2025 GMT
Subject: CN=ec4da12b1180d6cf1393e7aaf3f410a502de84aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f8:0c:fa:74:58:d3:16:93:34:a0:83:6f:15:
ae:93:fa:5b:ef:cd:97:c2:12:80:b3:11:05:ed:24:
37:d3:b2:34:7b:02:a4:68:1f:8b:7a:44:3d:ae:eb:
93:29:a0:72:dc:48:d7:25:11:2d:aa:22:59:85:5a:
d0:a8:5b:dd:53:49:7b:7d:b9:87:60:44:cb:20:c4:
7d:1d:50:eb:ea:0f:8f:7d:49:60:2f:fd:e7:c3:d3:
12:0a:50:75:eb:eb:90:ff:ec:d2:74:b8:72:a6:3e:
17:ab:91:bd:5c:8d:d8:6a:f3:35:b3:74:4e:de:51:
43:39:83:bd:ed:78:90:39:e3:7a:e6:10:2f:f2:5c:
e3:b2:77:7c:ce:32:b4:fa:4e:30:ee:ce:62:ea:4c:
85:9e:91:b3:24:b3:97:99:e3:ab:44:e0:ac:b6:f1:
e2:ac:a9:55:a8:64:ea:16:aa:c6:6c:3a:7e:04:12:
82:8f:bd:1c:ea:a6:7f:f5:12:17:6b:78:04:87:42:
89:f1:23:f2:b4:2a:72:de:6a:4d:3e:83:13:f6:fc:
5a:57:34:38:a9:2b:d5:bd:60:ac:af:95:eb:7d:44:
36:79:ee:6c:81:6a:a3:7a:f0:af:3e:1b:78:f3:39:
f2:83:24:f5:d0:9c:cd:11:e6:38:62:3f:f8:5f:c8:
15:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4D:A1:2B:11:80:D6:CF:13:93:E7:AA:F3:F4:10:A5:02:DE:84:AA
X509v3 Authority Key Identifier:
keyid:AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d4:1b:cb:1b:90:e6:20:41:b4:37:13:62:85:64:6f:e1:e9:
df:62:62:13:17:a8:60:ff:0e:ac:3f:23:eb:7f:37:87:54:a7:
92:13:fd:95:20:ab:d3:ad:3f:83:3f:aa:83:1e:63:0b:3f:3e:
85:06:45:d0:cb:48:78:da:8b:eb:48:f4:58:65:3e:75:ca:22:
46:56:b7:06:c9:4a:81:97:be:54:28:53:01:ca:a1:75:9a:a5:
59:14:5e:1f:d7:9c:47:23:d2:fe:cd:f7:5b:3a:ad:fd:b1:17:
63:65:0a:71:d8:78:a2:ab:13:4b:ee:5f:b7:ed:f1:e4:25:65:
fb:9c:92:d1:fa:45:08:0f:7b:65:3a:94:e7:26:22:ad:71:4d:
1b:ca:9d:e9:4b:0a:8c:a3:2a:ad:18:5a:82:30:89:ae:39:01:
72:8b:83:3f:db:74:87:04:c4:54:29:d6:e4:72:c2:e0:c7:cf:
2a:82:f6:99:0c:b4:f3:3e:53:ff:7a:00:78:af:4e:70:88:78:
e4:4e:b8:f5:51:49:70:79:32:f3:43:8d:94:09:6f:3c:29:45:
a4:54:26:7c:fb:fd:00:63:3c:53:e6:68:f1:ec:a1:fa:ed:f0:
fe:14:27:5a:e4:62:04:46:fd:a8:28:d3:50:ae:3f:52:44:3d:
00:12:71:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:10:27 2025 by rpki-client