Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
File: rS044g8k0OMLhszYJhrAAX8XpaQ.mft (raw, json)
Hash identifier: xxRLy00sfFXAhEDo68vG6tf1DUHbqL45fyXoIKhtrW4=
Subject key identifier: 70:E0:A1:A4:14:82:2C:60:15:20:45:D1:7E:1D:65:3E:F7:EB:3F:7F
Authority key identifier: AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
Certificate issuer: /CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Certificate serial: 0197CD28A9F0F76E098BE8FF269706D53012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
Manifest number: 088E
Signing time: Wed 02 Jul 2025 22:01:23 +0000
Manifest this update: Wed 02 Jul 2025 22:01:23 +0000
Manifest next update: Thu 03 Jul 2025 22:01:23 +0000
Files and hashes: 1: IhFmVxbE3gn_IPAxvOuH1Dxlo9o.roa (hash: oKXrmB0pSBgjznKzRYUFbiw4D9My9SBHtgqoNaUCBKA=)
2: rS044g8k0OMLhszYJhrAAX8XpaQ.crl (hash: bALkm/sg3/rwku6ckFocPTEOFvmfL2F5SuDLgG6PcfM=)
3: wbXeB63VhLi_7WMIhOdMpk0lCW4.roa (hash: d7dOr+7PutspTBpcReyCrf+E8CzcxyNVV7Zc8qzo3dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:28:a9:f0:f7:6e:09:8b:e8:ff:26:97:06:d5:30:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Validity
Not Before: Jul 2 22:01:23 2025 GMT
Not After : Jul 3 22:01:23 2025 GMT
Subject: CN=70e0a1a414822c60152045d17e1d653ef7eb3f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:55:f0:a4:17:8c:a4:14:8b:fe:be:15:82:30:
4f:fa:1b:bd:88:2d:3b:9e:d5:05:e5:65:ee:0c:9e:
c0:a8:70:d3:cf:b8:75:73:82:9b:a3:f0:c2:4f:4e:
b8:f5:31:a8:5a:ba:32:37:5f:f4:e6:bb:91:41:91:
cf:97:88:dc:a1:39:dc:7d:1c:fc:6a:8f:02:90:bf:
c3:c3:9d:0f:fb:e3:89:87:1b:f3:57:fa:31:49:14:
7f:16:06:10:fb:51:e8:ec:1b:09:8a:44:dc:9d:0c:
01:23:bb:fc:cb:b6:fe:5f:3f:6a:c9:a6:6f:67:49:
4b:9d:0c:19:e4:47:01:98:55:4f:20:ec:9d:4c:e3:
34:7b:fb:e7:94:14:4a:fc:cf:29:ad:6b:e0:b9:94:
71:85:93:73:18:e9:6f:aa:45:e3:3d:17:7d:07:53:
cd:34:5c:08:66:d8:cd:b9:18:4a:27:6c:f4:f4:46:
6b:1f:45:4f:d5:39:a8:f1:e8:16:41:27:43:d1:26:
ee:86:ca:04:d2:12:db:c8:7a:53:a1:c0:f1:5b:4b:
00:d1:ca:6d:d0:80:d3:5c:6c:3f:02:eb:a4:bd:69:
f3:1d:d8:5e:78:24:d0:83:ca:d2:39:58:26:7d:01:
1b:06:0d:c3:ff:fd:10:f6:4d:2c:cc:bc:cb:fd:10:
d6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E0:A1:A4:14:82:2C:60:15:20:45:D1:7E:1D:65:3E:F7:EB:3F:7F
X509v3 Authority Key Identifier:
keyid:AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b4:1e:59:39:89:42:87:3d:c2:7c:05:6a:58:4a:66:90:fe:
25:59:5b:3d:a3:f2:f3:8a:24:88:d7:21:37:a1:d2:39:5d:de:
87:1d:1c:55:c3:f3:cb:3e:44:da:52:c0:7b:54:f3:cf:6c:75:
4f:12:e5:34:3e:09:07:92:f7:e2:17:5a:11:e0:ea:12:8b:79:
2d:7b:b5:77:7d:33:3f:ff:14:c0:4b:48:82:88:bf:3f:43:0a:
f0:a8:18:67:8b:6b:c3:b1:08:cc:c2:17:75:38:d3:de:39:a3:
78:e5:b0:12:45:23:5f:28:f2:de:de:e7:04:c6:89:d2:ba:8c:
72:8c:9c:76:13:74:27:b7:2a:47:b1:40:ab:0b:33:18:2a:f9:
6a:65:ef:8e:64:c6:33:6c:19:33:15:bc:fb:de:0f:93:91:db:
fc:ff:c6:98:96:b7:4f:07:96:f9:69:ab:83:bd:35:ce:42:9c:
4c:41:6d:67:1e:f3:22:2a:40:89:1a:61:52:5e:91:55:42:24:
88:a7:03:07:9d:fb:67:47:6c:b7:f0:53:b8:32:d3:25:af:24:
81:bc:4c:a8:64:2f:0f:89:e3:42:7d:00:f2:4e:56:2b:a0:27:
b3:b8:5f:4b:ed:60:04:88:63:93:eb:71:d1:25:69:54:be:75:
7e:fb:d3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:54:59 2025 by rpki-client