Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
File: sXtEkEx2lKVAig0pcsOf8LGwPqU.mft (raw, json)
Hash identifier: HEj4NNSf8TTQJZJZ68iR3LWq+Dd4DssMQ3PlJ8prup0=
Subject key identifier: 67:32:13:AB:EE:70:C8:3B:BA:4B:25:E2:60:06:AF:6C:C8:F8:FE:FE
Authority key identifier: B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
Certificate issuer: /CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Certificate serial: 0198D8BCD95AAF0B6842A801BE05E9FC3FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
Manifest number: 0E95
Signing time: Sat 23 Aug 2025 21:01:51 +0000
Manifest this update: Sat 23 Aug 2025 21:01:51 +0000
Manifest next update: Sun 24 Aug 2025 21:01:51 +0000
Files and hashes: 1: UDhX8BuvHOYMS5e9vYOFjWjGBYk.roa (hash: C1cyztzqKdd1lIZCQFArU9xrG3gU6hCt1VPEU5YkilM=)
2: sXtEkEx2lKVAig0pcsOf8LGwPqU.crl (hash: CkyIHhZbP7xR7d5kBKLVMgOAeRaY4lWVAAX5TjwnzhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bc:d9:5a:af:0b:68:42:a8:01:be:05:e9:fc:3f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Validity
Not Before: Aug 23 21:01:51 2025 GMT
Not After : Aug 24 21:01:51 2025 GMT
Subject: CN=673213abee70c83bba4b25e26006af6cc8f8fefe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ec:4e:e4:57:27:bd:44:ff:ee:98:ed:69:b4:
f2:fa:ad:b8:33:2e:3f:79:c1:33:a2:1c:73:92:69:
3b:a0:35:cc:6a:ea:4f:33:7d:a5:39:17:6d:86:19:
83:6a:2c:88:3e:dc:31:84:46:d6:85:ee:2d:f0:0f:
7d:33:7f:5a:59:47:f1:78:ec:8e:1f:62:b0:24:b0:
21:06:ce:fc:62:14:44:0b:f2:48:b4:17:4d:1a:b8:
e2:c1:8f:0d:f1:45:76:3a:a4:21:ee:df:a0:e8:c4:
19:4e:01:1d:62:70:c5:e7:ef:86:f8:42:13:a5:7c:
c2:bd:e4:4d:11:d6:ae:5e:e2:35:04:45:f3:ad:c4:
af:a5:27:7d:c9:42:2d:65:0d:7d:bb:94:21:9d:59:
e8:e8:34:a5:69:5a:93:7d:cb:f6:33:28:43:57:94:
18:05:3f:ee:7a:ed:0e:54:19:58:a8:62:e9:15:1a:
8b:21:b5:83:30:06:4f:17:62:46:24:11:b7:d2:7d:
c9:44:d6:ce:ef:e4:77:3d:84:43:8c:61:c1:25:53:
e6:c4:d2:c5:3e:c7:7d:81:bd:36:28:30:22:05:1f:
c9:49:a8:ef:b7:9b:0c:80:1d:5f:f4:ce:de:3a:8a:
b3:8f:f1:09:03:95:7b:b0:50:1d:61:c5:c0:c2:2f:
27:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:32:13:AB:EE:70:C8:3B:BA:4B:25:E2:60:06:AF:6C:C8:F8:FE:FE
X509v3 Authority Key Identifier:
keyid:B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:95:29:c1:24:a6:c8:33:63:ac:5d:cd:b2:13:70:b9:22:e3:
0f:f9:47:9f:38:6e:76:5f:da:54:f0:a7:9e:30:5d:09:c0:0d:
08:78:80:e3:07:c2:ac:f6:cd:f0:e1:e4:a3:51:bc:84:1f:ab:
39:93:42:07:a7:c6:28:02:3b:a9:e8:21:b9:10:9a:84:c5:a1:
35:5e:e2:4d:1a:45:e5:28:8a:2c:a1:19:26:aa:b4:6b:ab:de:
f6:77:6c:07:94:fb:54:74:74:f0:9b:dd:b3:6c:65:49:6e:28:
65:bf:d3:15:5d:70:66:9c:0f:a5:84:d7:2e:fc:ad:b0:72:79:
a0:43:07:de:6e:50:3b:29:84:8a:e5:73:e3:9c:b0:cc:3b:17:
a2:ba:29:1c:1e:45:06:f7:d0:29:10:e9:39:db:54:c3:43:32:
d6:e0:2c:35:e1:83:98:aa:e5:98:20:17:fe:70:77:64:99:e7:
c2:47:1e:f6:f2:a7:5d:da:15:a2:b5:74:35:97:9c:a8:cc:f2:
1e:47:ee:b9:73:af:37:85:ca:43:2b:fa:60:37:53:44:6f:9a:
39:73:74:72:a3:74:78:29:2f:ba:11:07:b7:6d:9d:ec:92:3c:
2b:34:93:35:39:8a:1d:a7:19:97:89:3b:b9:95:77:0c:ed:33:
d2:63:cf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:08:45 2025 by rpki-client