Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
File: p_0_iTNdz4KGZrKPrYrpk71EiHg.mft (raw, json)
Hash identifier: A0qoehOdh7MNwGktyaRb55CqtARGBO+4ut8BNaxwogA=
Subject key identifier: AE:EB:F7:D6:C7:05:F3:6C:00:2B:C9:8E:8C:1D:E4:6B:73:7E:E4:1F
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 0198D4E086BFB6F47EEB902BBEA5DCFA8B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
Manifest number: 0DD3
Signing time: Sat 23 Aug 2025 03:02:20 +0000
Manifest this update: Sat 23 Aug 2025 03:02:20 +0000
Manifest next update: Sun 24 Aug 2025 03:02:20 +0000
Files and hashes: 1: 3DUEt-aAns-v1SVe6cG9Jeqaah4.roa (hash: 80+E6/cb26cmgMWADgR9cowpvlm1kb/qW3Qt9g0U5L8=)
2: Ap5URXBO93O7jJtjlLZVH2pw48c.roa (hash: p0iYaq767KbYvMNrK5KRomzTD5nBTVSwaVmB+7Atf7Y=)
3: JEudm5eaXMbpcorZfF2mGZr0koE.roa (hash: XbkPUoxJZnY0l62UTU5OlIMUIwc1e7/u/vIUsrvTLYY=)
4: gJZeDk4rmX44E5axtXtFWO80NO0.roa (hash: pUiSGUoY8i4KMd2N+BSEOVvNbEKEOnmR+nGAVe0LW6E=)
5: lejfRms_8jcNpkPTbPyQIBJyGvk.roa (hash: tyCtAQGeo8obwJOw9cT2nm1EzzLsrcw7uVb2b4sZkgw=)
6: p_0_iTNdz4KGZrKPrYrpk71EiHg.crl (hash: pKBmhSij3ZPSGSHZDhSOLwiaXOeuovrTgz4hS7pWxZ8=)
7: saa_0VvgXSNx1kkjSqyVEbVnkCY.roa (hash: v+RU7IsAtr1sKZAICZ44u+iiQ3vM7YjRtrxROuRMlCQ=)
8: x0T3yvJpLXpG0yBkBOlH0qchh3U.roa (hash: Lt2tpn0tH6x5Kf9HXc8LFADRTohAK1wE2pgpgUDlEXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:86:bf:b6:f4:7e:eb:90:2b:be:a5:dc:fa:8b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Aug 23 03:02:20 2025 GMT
Not After : Aug 24 03:02:20 2025 GMT
Subject: CN=aeebf7d6c705f36c002bc98e8c1de46b737ee41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:24:10:d3:fb:2d:73:34:8f:98:bb:1d:62:c8:
fc:83:58:6a:5b:b7:7c:b0:a7:0d:3f:d1:30:0e:5b:
64:c2:87:58:50:22:bf:0e:5a:6d:a4:89:a9:d1:e3:
3e:0b:b2:fc:e7:22:af:58:27:23:b1:6f:0c:aa:d3:
c7:3b:9d:38:78:96:80:ed:61:09:74:a1:48:4f:95:
d6:09:c5:b4:da:2e:59:c5:b8:ef:b1:04:19:82:38:
62:51:77:a4:b3:91:bc:67:8f:f6:2a:9c:ef:e5:9c:
c0:a8:e7:9a:70:03:b5:e0:bb:0e:4f:d9:2c:e3:23:
79:ed:af:04:ff:44:f1:05:e3:fd:82:3b:c5:1e:e8:
0a:7c:c0:82:ca:87:e0:d2:7f:b3:1e:4f:94:3b:81:
b8:03:29:90:b5:5f:b2:1d:72:5d:e1:e5:a0:bd:81:
71:5d:ff:66:71:f7:4b:02:3c:25:28:f3:8f:22:8e:
e5:2d:0c:1e:ca:ff:f6:d3:ad:d7:44:b0:54:6e:74:
fb:8a:94:f7:2f:5d:7f:cc:71:73:8e:19:b0:e3:34:
17:90:db:4a:40:8c:95:57:52:ab:8c:dc:34:e7:09:
8c:2a:06:0b:37:6c:e9:4a:ea:93:47:97:90:60:93:
2d:13:a6:0f:80:a1:2c:07:32:9b:a4:f9:f0:3e:2b:
3f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EB:F7:D6:C7:05:F3:6C:00:2B:C9:8E:8C:1D:E4:6B:73:7E:E4:1F
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b6:26:bf:23:68:c4:dc:82:08:71:26:d0:88:98:3e:4a:1f:
52:1f:5a:42:ef:1f:2d:f3:17:28:0e:36:89:52:30:dc:57:ba:
b9:f5:df:8c:d9:8d:3b:fc:9a:20:7d:48:b8:99:64:48:1a:01:
6b:4a:9f:32:e0:5f:35:ff:95:b2:41:2e:ab:a5:71:a1:e4:31:
71:db:f7:a5:24:c5:e4:55:0f:b2:b9:eb:f1:2c:a7:7a:a8:14:
97:1c:f4:26:5c:00:bf:d9:cb:c7:32:86:d6:28:71:5f:7f:eb:
00:30:4c:df:7f:13:72:19:92:ed:5e:02:10:40:86:35:f9:be:
5a:af:b4:72:76:f1:a4:93:45:39:99:5f:37:92:1d:97:8f:54:
d8:dc:8e:09:e3:ec:05:ae:62:5e:51:64:c1:4f:72:a1:07:cc:
29:0c:7d:1e:05:9b:96:fa:ff:2f:ca:c8:0d:d1:ce:28:1f:de:
0e:f9:8a:6b:f6:df:5d:7a:d6:e6:ac:19:c2:25:28:37:71:dc:
0e:df:86:c2:c1:be:b6:76:84:78:5d:7c:b6:5e:81:75:1a:7d:
c0:0f:95:98:19:9a:1c:af:77:f5:ea:51:b1:66:68:42:d8:f4:
db:ea:88:1a:ae:3b:c1:a1:23:ad:8c:ac:09:ae:1c:99:61:91:
65:2e:10:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:01 2025 by rpki-client