Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
File: 704eplKHok4gxmO1FhwVE_AMio0.mft (raw, json)
Hash identifier: GeT7tusUr+yd8M2CHN3JJIl8e2G9fef73DytIu/1sLE=
Subject key identifier: 1C:23:F0:8C:CA:DD:C7:AF:15:00:BF:DB:33:E5:24:43:E7:EB:66:9C
Authority key identifier: EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
Certificate issuer: /CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Certificate serial: 0198D705C7230DBA38109A311E761AB2B29A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
Manifest number: 0560
Signing time: Sat 23 Aug 2025 13:02:16 +0000
Manifest this update: Sat 23 Aug 2025 13:02:16 +0000
Manifest next update: Sun 24 Aug 2025 13:02:16 +0000
Files and hashes: 1: 1-x-3ccNzP71eAFgXPav3YRKbPc0.roa (hash: gcNVzNBHfGC67t/xgrOBlYz2dVPSnS4yGm9+O2azC54=)
2: 704eplKHok4gxmO1FhwVE_AMio0.crl (hash: goLjlBIq06jXV64J1i7kiJxILmqudMMnEHDUK1CaFFA=)
3: J5QgCxKNKik7O15LPyeeQADYm_g.roa (hash: R0sIPZo3mElg4IM+t4du68+jxxhuTbAlvWncgQxpH3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:c7:23:0d:ba:38:10:9a:31:1e:76:1a:b2:b2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Validity
Not Before: Aug 23 13:02:16 2025 GMT
Not After : Aug 24 13:02:16 2025 GMT
Subject: CN=1c23f08ccaddc7af1500bfdb33e52443e7eb669c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:54:0c:00:c0:c6:e8:95:1d:60:70:ea:cc:
65:39:61:53:b4:a2:39:33:27:0c:81:f1:b5:67:99:
23:31:bd:ca:d9:7e:1f:c7:2a:96:76:c5:0c:b4:e1:
74:d8:6a:f6:c8:81:fb:6d:d3:ee:d6:9c:4c:b2:81:
99:aa:8b:d5:c9:7c:d9:39:3a:38:dc:8e:a0:2b:0f:
44:2b:24:99:65:2c:d5:e2:b8:dc:a5:cb:04:56:8a:
e1:87:df:bc:4d:a4:11:ae:60:b9:99:96:48:2b:92:
ad:7e:00:aa:0f:eb:e3:0d:09:01:6f:57:b9:e9:ec:
d9:0f:7e:39:14:42:d0:2f:82:44:90:e4:01:41:35:
b6:f2:2c:5a:5a:49:bc:2b:ce:a5:11:ff:73:aa:9d:
de:3c:37:9d:0b:de:94:4c:4d:eb:b0:f8:42:fa:c6:
8a:74:ed:61:bd:77:a2:cb:78:06:dc:9f:37:bb:5b:
c6:70:a5:8c:46:5d:01:57:e7:73:25:22:b2:17:34:
67:16:69:38:04:96:69:f5:0e:f7:71:77:3c:ce:eb:
3e:20:3f:3a:ae:8d:c3:97:70:8f:a1:2c:c8:14:f3:
51:f5:1c:98:b3:50:6e:b8:e4:5a:b1:41:da:0b:20:
00:7d:96:a0:fc:f8:c5:1e:51:47:d8:9e:9c:b8:21:
53:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:23:F0:8C:CA:DD:C7:AF:15:00:BF:DB:33:E5:24:43:E7:EB:66:9C
X509v3 Authority Key Identifier:
keyid:EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2a:00:b0:84:2e:6c:14:9b:31:4d:dd:1e:5c:13:0a:e7:3e:
e7:9a:dc:30:e9:69:7b:9f:ff:9f:8d:31:77:d2:76:9c:1e:68:
92:c1:61:a0:8d:b6:f3:fd:6c:46:18:ab:83:ff:57:f5:e1:60:
ef:05:9a:a1:f6:3b:a5:a0:d8:c0:0b:3e:f3:75:16:5b:de:c6:
80:4d:c5:a0:57:72:8e:f2:d9:ca:af:78:b4:73:f3:9d:f2:85:
d6:b3:44:fb:8e:cf:72:64:e5:2c:29:e8:43:56:d5:3f:24:87:
8e:2f:08:f4:d4:f4:56:9d:cb:54:de:07:7f:0d:ac:1e:02:a2:
7b:5c:33:24:15:0e:8b:98:c7:88:e9:c4:54:f5:e8:98:93:a2:
4c:02:60:9f:99:3f:0d:17:b5:29:5a:ec:2e:f3:9b:24:bb:98:
af:3d:c8:35:c7:aa:e6:05:a5:0e:31:2b:f4:3f:3f:58:4e:70:
a2:1b:86:f0:55:9a:c4:0d:97:eb:f9:c3:58:96:c8:6e:fa:59:
49:2a:b9:a0:ee:61:2d:ef:99:6e:b8:63:04:42:6a:32:e2:4d:
0c:57:4b:fb:f9:c3:eb:60:b7:e1:9b:26:40:c9:95:1d:93:57:
e1:43:5e:f9:ed:62:bb:d9:46:62:a3:d4:90:1a:10:21:a8:4c:
51:85:7d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:38:34 2025 by rpki-client