Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
File: sxxM5mPh7CRedHzYRvGmnduDSzs.mft (raw, json)
Hash identifier: 32NucK4p8uhZpVd0sA/NCurxOtg2ekjF8KB0DFIGTPA=
Subject key identifier: 85:0A:B1:76:5F:23:3A:E2:5E:54:54:4A:94:FF:F9:B2:ED:A6:12:87
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 0198D58406F10487995FB98663351D19BA40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
Manifest number: 043D
Signing time: Sat 23 Aug 2025 06:00:56 +0000
Manifest this update: Sat 23 Aug 2025 06:00:56 +0000
Manifest next update: Sun 24 Aug 2025 06:00:56 +0000
Files and hashes: 1: jw_UZUOgx6yF78j9CZngLPh5MJg.roa (hash: CTLi772NuP6ENX6hf9k8r6vRlCcaoedrcUdbAIXJuzo=)
2: mHdbhQxgyf7CV9jCGJvliFVilXc.roa (hash: 4CdqTf57TkDxaRHOcnXl2aFyjkgmNRswPmW9ZMUYxw8=)
3: sxxM5mPh7CRedHzYRvGmnduDSzs.crl (hash: IfYm66eeFuFFXMDu/LGPVcqZxTSpXrGDtVEVZplBEQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:84:06:f1:04:87:99:5f:b9:86:63:35:1d:19:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Aug 23 06:00:56 2025 GMT
Not After : Aug 24 06:00:56 2025 GMT
Subject: CN=850ab1765f233ae25e54544a94fff9b2eda61287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5a:99:51:0d:37:78:30:cc:8d:91:50:93:50:
f1:1c:8e:5b:2c:71:8d:86:65:79:fc:d2:f1:06:a7:
45:84:73:16:c8:a8:2c:cb:54:07:0d:4a:c9:44:c5:
b1:04:5f:07:2c:1d:94:a0:a2:41:dd:ef:d9:03:5d:
18:46:25:27:8b:90:95:89:af:0e:3c:d1:5f:4c:21:
22:26:8f:f0:6c:88:cc:66:5c:a7:e3:7b:de:e5:58:
d9:87:8a:38:2d:b8:87:4c:3f:ea:5d:ea:4f:27:21:
49:01:aa:e2:cd:f9:26:b1:29:9a:a0:20:98:a9:1c:
ca:88:4b:95:63:a2:c3:83:42:15:1a:98:bd:bc:30:
a8:6b:03:c6:cd:9c:5e:55:9f:2b:df:8e:c2:e8:a5:
db:73:18:3d:62:61:24:85:f8:d6:71:a9:be:64:4d:
47:26:76:c7:d6:37:ab:10:3d:3b:6c:a4:7d:86:31:
92:6f:29:55:68:85:ab:40:08:bb:53:15:77:03:72:
72:90:cc:ee:b1:23:eb:3d:28:ca:be:ca:df:9f:bc:
c8:61:0f:16:e4:b1:fd:c0:95:6b:6e:bb:4c:43:39:
7f:47:0b:bb:e2:0f:c4:75:4c:0b:77:55:0b:a5:0d:
15:31:13:96:35:88:aa:b6:4b:ff:62:5a:bc:a7:62:
ba:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0A:B1:76:5F:23:3A:E2:5E:54:54:4A:94:FF:F9:B2:ED:A6:12:87
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:af:0c:b6:f4:eb:90:48:51:e6:4e:a6:18:7d:30:ec:32:73:
08:92:7d:94:55:4f:80:74:6c:0b:5c:12:3b:54:89:31:13:2c:
f0:db:c4:42:d2:1c:9c:ad:92:35:0f:96:5c:a3:a9:b4:1a:f0:
39:da:a5:72:01:37:db:fe:27:24:0b:56:2d:02:a1:b4:7e:c4:
8c:4d:60:00:63:78:09:f3:d3:0a:68:bc:2f:e2:c8:58:7e:f0:
55:f1:16:79:13:1c:a3:d6:28:6a:4c:98:be:f2:98:2f:9e:88:
6e:42:1b:40:fc:d7:61:16:4e:20:7f:c9:26:5f:4b:ac:ad:8e:
3a:e0:2f:dd:5e:e9:dc:4e:c0:73:e0:26:d1:70:8a:b7:87:2c:
1a:30:22:4b:4b:95:cf:60:da:80:0a:ea:95:43:de:db:59:2f:
30:ef:e0:42:57:aa:07:22:ea:36:32:62:4d:8f:98:92:bb:dd:
6b:39:94:32:6c:9f:8f:fd:50:d9:d3:01:c3:bf:68:2c:38:11:
fc:ed:7c:47:58:72:0b:0f:0e:e1:3c:eb:d7:27:89:b4:61:64:
54:70:f6:dc:ef:7a:c3:18:d7:a9:4d:20:36:cb:25:fb:1f:cf:
a8:5c:11:e9:0f:de:57:7c:1e:42:64:8b:ea:9b:a3:6d:61:ea:
81:af:0c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:38 2025 by rpki-client