Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
File: R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft (raw, json)
Hash identifier: qeXZb56y44XRWWFtXLvsVvcdQiMGOLsuYp8KkBoBnOs=
Subject key identifier: AE:6A:68:C3:D7:14:1F:DC:6C:6E:24:F1:FE:88:9B:78:5B:80:6B:75
Authority key identifier: 47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34
Certificate issuer: /CN=47e5d333dad9d62d5328d12578a31def42af8f34
Certificate serial: 0198D660168909F537747D9B2DD5C5AB9CBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
Manifest number: 08CA
Signing time: Sat 23 Aug 2025 10:01:17 +0000
Manifest this update: Sat 23 Aug 2025 10:01:17 +0000
Manifest next update: Sun 24 Aug 2025 10:01:17 +0000
Files and hashes: 1: I_0zk_rD0Gdq5jU6WeRSly4SVcs.roa (hash: JHLttM3n9KjjQEXLZtpKJI1GYGGri8Vj45nM2EhgE4A=)
2: R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl (hash: fgFyd4pNxPxW3Y/15fcPchFkvgYqoYb/cAw93kPPTYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:16:89:09:f5:37:74:7d:9b:2d:d5:c5:ab:9c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e5d333dad9d62d5328d12578a31def42af8f34
Validity
Not Before: Aug 23 10:01:17 2025 GMT
Not After : Aug 24 10:01:17 2025 GMT
Subject: CN=ae6a68c3d7141fdc6c6e24f1fe889b785b806b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:09:21:b2:29:e0:50:62:4d:be:e7:fa:f3:b0:
a0:5a:cf:02:e4:00:4a:2e:30:cc:12:5a:32:fb:85:
9c:97:91:41:e7:eb:2f:7e:78:0a:b9:ba:88:88:6e:
54:0b:b8:3f:c1:63:08:9e:d8:07:a1:9e:9b:d2:86:
a3:91:f7:05:7a:3c:3f:b7:9f:af:d8:b6:04:bc:69:
30:00:59:ff:64:0d:b3:74:0a:9e:d3:d2:04:bc:8e:
9c:2c:ef:0b:9f:ef:fe:ad:0c:af:48:a3:3a:38:7d:
d0:a5:15:04:b6:db:73:be:9c:75:80:8c:06:91:4b:
75:e2:63:88:0b:b8:8f:37:07:dd:2a:15:9a:29:81:
ec:57:d0:20:f2:f3:e5:7a:28:2c:49:50:ce:84:e5:
0d:60:fb:9c:d4:f5:84:09:9d:bf:e0:4e:8a:7d:37:
98:aa:66:25:ea:31:a0:3f:e0:63:14:83:af:ff:18:
b5:cf:a3:46:3e:7a:6b:5a:ee:d2:b6:53:c7:ab:fb:
92:17:59:79:87:e0:63:84:1d:f2:58:bd:36:56:22:
10:a2:f5:bd:25:db:2d:1a:9e:e4:7e:de:74:d9:1d:
93:07:89:c7:10:21:fb:78:ed:99:df:ac:fb:3b:58:
c1:6f:6d:30:26:00:ac:81:63:a2:ca:41:ea:d1:a2:
c2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6A:68:C3:D7:14:1F:DC:6C:6E:24:F1:FE:88:9B:78:5B:80:6B:75
X509v3 Authority Key Identifier:
keyid:47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:11:b6:69:b5:0f:75:18:03:07:98:88:4f:96:60:27:89:c8:
44:6f:c8:17:90:2e:3f:06:a4:00:64:34:fe:13:e2:8b:85:09:
9b:4f:9f:a3:12:2b:b2:cc:a9:e4:ca:0f:a2:7d:af:57:eb:d1:
af:e8:e1:38:e5:5b:1a:d2:95:8d:fd:7f:af:57:97:ba:06:16:
7d:be:c4:d2:7c:28:3c:11:7a:c5:8f:00:6e:93:ad:a5:98:83:
fd:70:75:ac:b6:93:0e:75:fe:f4:58:e2:e6:e0:af:6b:2a:c6:
2b:0d:f0:28:9f:93:a8:bb:78:44:1d:56:55:3c:69:e1:de:ac:
6f:d0:f2:b5:11:35:93:47:f7:38:99:10:fe:8a:58:42:3a:c5:
36:51:e7:a3:4b:0a:02:ec:61:f4:e7:82:95:55:09:37:0d:54:
c3:f0:01:4d:96:5d:79:77:ec:27:a5:36:a6:1d:71:07:4c:c4:
a7:6a:eb:55:cf:bf:32:aa:d0:ea:02:e1:5c:47:5b:5b:06:46:
e7:32:8e:fe:9f:db:cd:6e:4c:ba:17:b5:8b:20:c4:c4:88:63:
4b:2a:c2:27:31:bd:68:15:01:ba:2e:b7:ae:5e:75:81:e2:68:
38:96:8a:ce:80:92:a0:35:bd:16:06:12:3a:d3:86:1c:b6:76:
ab:b3:e3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:30 2025 by rpki-client