Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
File: sDQCUfGCY0f06WRfaCTTuT9H5d4.mft (raw, json)
Hash identifier: IrMkiYgW/ArAX12a6mVt0a/jlkuhxJFFaESGU4L2UzE=
Subject key identifier: 83:BD:EC:38:98:9A:C5:98:E5:F8:7F:3E:30:9A:19:12:01:BD:8B:C4
Authority key identifier: B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
Certificate issuer: /CN=b0340251f1826347f4e9645f6824d3b93f47e5de
Certificate serial: 0198D515B0FBC9C88C1C8D37FB580E0A2DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
Manifest number: 0C4D
Signing time: Sat 23 Aug 2025 04:00:25 +0000
Manifest this update: Sat 23 Aug 2025 04:00:25 +0000
Manifest next update: Sun 24 Aug 2025 04:00:25 +0000
Files and hashes: 1: qrqtK-ZhNnqsmvUdjEvFxU-EYdM.roa (hash: w1CKR1mGTdMnfdWKUqyIUV2nyHBupF+j5wpw/8wUJ44=)
2: sDQCUfGCY0f06WRfaCTTuT9H5d4.crl (hash: t68Bhg7CVPELrocyXkXJPcMVXXuiOhr9iht2jHYX/j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:b0:fb:c9:c8:8c:1c:8d:37:fb:58:0e:0a:2d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0340251f1826347f4e9645f6824d3b93f47e5de
Validity
Not Before: Aug 23 04:00:25 2025 GMT
Not After : Aug 24 04:00:25 2025 GMT
Subject: CN=83bdec38989ac598e5f87f3e309a191201bd8bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bb:a6:9f:d5:cc:39:71:3a:bd:62:59:d0:a3:
d3:36:eb:70:7a:28:de:b3:61:2a:78:cb:08:93:de:
73:01:55:b9:72:45:87:a4:aa:c1:99:6e:5f:3a:f7:
64:eb:02:7f:dd:a1:cd:61:f3:a2:a4:47:62:5c:aa:
27:d2:f0:89:70:b1:f4:88:f3:5a:e1:fa:b9:9f:eb:
88:1f:33:3a:0f:48:2a:a7:1b:c3:4a:0e:cf:23:ee:
7a:9f:be:50:ee:dd:27:b2:cb:8b:cd:93:1b:d5:5b:
25:45:ec:de:99:10:51:31:23:84:9d:eb:6c:26:f9:
12:84:e2:b9:5a:19:9b:48:bb:ac:54:af:b9:f5:8d:
8f:af:20:78:a0:16:d1:bd:df:38:85:da:2f:78:ce:
bc:55:e0:8b:d3:ce:db:66:4f:f7:cb:fc:5b:79:72:
f7:36:46:89:3e:37:28:39:e1:51:a3:3b:35:8b:06:
d7:f3:ee:f4:82:3b:75:2a:f9:d9:a0:45:e3:c7:a7:
77:11:8d:9e:98:17:5e:3a:8b:62:db:ac:e1:23:8f:
70:44:c4:c9:e6:b1:0e:a2:99:ea:0d:0d:ab:c7:33:
5a:00:29:99:4d:96:c7:e2:73:01:31:8c:91:10:3a:
58:08:50:fc:05:34:36:0e:c5:22:60:83:be:0f:f4:
e6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BD:EC:38:98:9A:C5:98:E5:F8:7F:3E:30:9A:19:12:01:BD:8B:C4
X509v3 Authority Key Identifier:
keyid:B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:04:e0:d8:d4:98:98:98:3c:57:c2:b4:2d:12:c0:84:c9:5c:
52:73:89:be:fb:ad:dc:0a:d0:bd:c4:d1:57:fd:1d:f7:f3:16:
5f:c4:90:66:d7:32:7a:53:c3:17:26:08:61:83:dd:fa:c3:9a:
87:bf:de:ed:f5:b5:32:7f:9c:f2:80:65:de:98:3b:81:e7:12:
ff:a9:5e:05:6b:26:1b:da:76:78:39:c1:84:46:ad:52:e8:e6:
78:71:69:55:d8:cb:c2:42:d9:48:c4:85:40:6e:35:99:82:b6:
a1:82:72:bc:8d:32:fb:7f:f3:f2:3d:bf:ab:49:dd:7b:af:b8:
32:0e:1b:2c:a9:a3:fe:1a:49:9c:73:df:81:c0:61:4f:b8:54:
8d:04:28:57:15:3a:fd:71:76:37:86:7a:b8:a8:f6:d9:fc:da:
12:3b:aa:d6:68:63:d7:95:2c:74:91:d0:5d:3a:1a:5c:a2:77:
c4:60:7d:9f:9e:f7:9d:93:dc:9f:05:02:99:bb:43:78:ed:ea:
1d:eb:e9:4b:52:bf:7a:f9:99:7c:d1:26:75:83:51:17:c4:06:
eb:24:87:aa:fa:b2:1f:df:0e:40:dd:7a:c9:53:07:a3:8b:e0:
df:02:41:4d:7b:39:91:19:83:1a:93:d5:4a:50:66:79:76:87:
ae:4a:9b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:42 2025 by rpki-client