Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
File: 43O80yVaDa1fSjUNEdyJH6C-BDc.mft (raw, json)
Hash identifier: QNt9Gza/91MmRdz/d3IEXxifUzuszzJ50wdAm+1aRuI=
Subject key identifier: 24:24:15:8D:7B:A1:A7:0E:49:47:F1:35:F0:67:7D:E9:50:FC:4C:A7
Authority key identifier: E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
Certificate issuer: /CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Certificate serial: 0198D7A9090BE090A530F20076F95004D2F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
Manifest number: 071A
Signing time: Sat 23 Aug 2025 16:00:36 +0000
Manifest this update: Sat 23 Aug 2025 16:00:36 +0000
Manifest next update: Sun 24 Aug 2025 16:00:36 +0000
Files and hashes: 1: 1-AKJmO9q5axmG2bLlo_CKWpT7rI.roa (hash: IzbOHhtlqnCQLwohTNVhlpmomMZIZO83L4rK6yCvODA=)
2: 43O80yVaDa1fSjUNEdyJH6C-BDc.crl (hash: ia9otKDFrDZrqW3p88Eb80tWdMPRqsbtoKTR85ia1QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:09:0b:e0:90:a5:30:f2:00:76:f9:50:04:d2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Validity
Not Before: Aug 23 16:00:36 2025 GMT
Not After : Aug 24 16:00:36 2025 GMT
Subject: CN=2424158d7ba1a70e4947f135f0677de950fc4ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5f:6d:08:7b:81:39:65:d7:05:8e:53:0c:19:
2e:00:74:ee:99:3a:20:bc:42:eb:11:12:f9:52:6d:
67:bc:df:a2:6d:c2:05:60:9b:67:9a:f3:34:7d:2a:
52:2d:85:5b:aa:71:d8:30:bf:b9:da:35:b5:d7:e0:
88:5e:40:78:cb:8e:b6:97:f9:aa:e0:b7:89:c1:2f:
8b:7c:47:56:5e:65:ee:ff:1e:df:1d:25:04:64:d2:
f6:87:fd:09:1e:df:32:6b:ed:aa:39:d1:5a:16:27:
ba:12:61:1f:18:51:65:85:ac:4d:3f:65:68:27:32:
64:3a:7c:16:4b:d0:fc:fb:cf:5e:81:2d:d3:f8:17:
1c:14:98:75:3d:11:ab:15:3b:ad:d2:59:fd:c9:13:
72:d1:ec:b1:4c:53:76:d5:3e:e1:42:2c:f9:1a:58:
4b:9f:fd:a1:ad:10:6f:d8:9e:75:ac:e5:19:8e:a1:
7d:cb:91:9f:ec:18:22:8e:18:8c:6f:7f:62:11:1e:
a0:fd:ec:78:f2:73:6b:a8:26:9c:b7:42:c3:ca:a2:
92:55:cf:90:d1:27:90:94:c7:7f:ad:d2:e0:90:a6:
7f:c4:53:27:28:06:ae:2a:a4:8a:a2:93:42:b8:29:
c9:c3:9e:a8:f8:26:21:78:dd:d3:dd:f2:2d:cb:f0:
94:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:24:15:8D:7B:A1:A7:0E:49:47:F1:35:F0:67:7D:E9:50:FC:4C:A7
X509v3 Authority Key Identifier:
keyid:E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:8a:f1:7a:c9:e7:7e:06:27:92:5b:bd:81:28:34:9b:61:76:
b3:ac:a6:b6:25:ce:45:fa:ae:18:a5:4a:42:70:0a:61:56:1d:
f3:4b:ad:98:35:18:f0:21:ce:0f:0f:72:49:8c:de:7a:64:e6:
85:bf:7e:7a:b7:3a:35:8b:25:bf:86:02:83:9b:57:5a:df:82:
58:56:3a:9d:ab:5f:f8:e2:fd:ca:ec:69:b5:64:2b:ec:54:0c:
ea:f1:de:13:02:5f:e6:22:e3:f5:69:1e:8f:c2:99:e0:b6:95:
1a:9f:20:4b:eb:e8:67:11:91:11:2d:dc:7e:79:2e:48:81:86:
f9:ab:94:d0:fb:40:cb:9c:94:a8:b0:11:89:f3:a4:8b:17:34:
7b:56:ed:37:c4:7b:aa:d5:e4:d1:b4:a8:1f:b5:20:ab:87:c2:
c3:a0:cb:e2:5e:a9:45:c5:86:dd:2a:49:67:02:cb:97:51:2e:
b3:ae:35:76:6c:c5:12:a0:01:5b:64:e1:c4:8e:c4:ce:b5:dd:
65:38:51:9f:c3:f0:69:90:46:e8:da:bb:3c:17:8a:36:ab:56:
af:3e:28:b7:6b:dc:4f:0c:bf:5d:d6:e1:14:4c:3b:d1:44:e7:
de:c5:bb:ca:76:b1:a3:16:57:0b:40:f9:f3:0e:26:fa:96:22:
05:68:f1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:46:25 2025 by rpki-client