Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
File: _RGW2Y3s046wP18GtI5VbHTyMfQ.mft (raw, json)
Hash identifier: BiyhLT/gSeJk8++Q1q2J8GMRVHiK7l+ktIsizHB6+FM=
Subject key identifier: 88:D7:20:95:EB:CD:27:4F:CC:40:9B:47:65:03:AA:6C:78:B3:33:EF
Authority key identifier: FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4
Certificate issuer: /CN=fd1196d98decd38eb03f5f06b48e556c74f231f4
Certificate serial: 0198D473F9444B393058C3A480839E354F5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
Manifest number: 1247
Signing time: Sat 23 Aug 2025 01:03:46 +0000
Manifest this update: Sat 23 Aug 2025 01:03:46 +0000
Manifest next update: Sun 24 Aug 2025 01:03:46 +0000
Files and hashes: 1: 27FHmyzi6Se6krMAx8iyaZkkui4.roa (hash: hxU0+n4GJmSaVALTik02VPB85RwSKnzwnJh1oS8Qx2Y=)
2: Vt65vwu21Gw3Ig_WCeQCArrV49M.roa (hash: JhPPfXj32nubKkCUS1s8L7cjVu7ayJ+kkjBpXd9CNao=)
3: _RGW2Y3s046wP18GtI5VbHTyMfQ.crl (hash: xeejEs+2m7O1M+pV56bsDduJmwpLxa2aMcFy/Qy42/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:f9:44:4b:39:30:58:c3:a4:80:83:9e:35:4f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd1196d98decd38eb03f5f06b48e556c74f231f4
Validity
Not Before: Aug 23 01:03:46 2025 GMT
Not After : Aug 24 01:03:46 2025 GMT
Subject: CN=88d72095ebcd274fcc409b476503aa6c78b333ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:3d:80:08:dd:46:6b:c1:0e:58:70:17:dd:
13:8f:04:19:94:7a:b0:b8:68:2b:de:f8:a4:98:00:
ed:a3:bb:13:7a:85:b1:8d:fb:06:cb:67:dd:c6:aa:
9c:fe:ed:e3:4b:30:a7:20:6b:95:3d:8e:27:c5:a7:
9c:b8:b8:66:28:a5:fe:3c:7d:95:7d:a8:1f:48:bf:
49:74:f1:57:31:c4:0a:52:83:9c:cb:8d:3a:63:e1:
d8:72:5b:38:96:ee:f9:57:0a:a3:6e:67:21:4e:dd:
af:27:5d:e5:5d:3b:c7:3f:8b:f9:6d:74:1e:64:1b:
90:c0:f0:66:f8:b3:83:94:32:4b:87:0c:0b:3a:c2:
dd:fc:9d:ab:78:e1:bb:43:dc:94:ec:46:77:b5:94:
ec:71:50:e5:77:1e:24:c0:c2:c8:68:1f:f4:50:f4:
43:4d:a0:cf:6e:f3:b1:b4:51:60:9b:9c:94:5f:ce:
f6:70:5a:23:42:6f:20:16:13:0c:34:6e:16:f0:37:
69:f7:00:fc:69:2b:fe:68:e0:92:3f:f4:41:24:2b:
76:03:3d:19:14:72:72:43:cf:43:12:71:f0:66:c1:
e1:57:a3:e1:90:42:3e:af:d7:17:de:56:23:43:b6:
04:fe:d0:6d:78:f5:77:e9:86:f6:4d:b0:fd:9e:d3:
4c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D7:20:95:EB:CD:27:4F:CC:40:9B:47:65:03:AA:6C:78:B3:33:EF
X509v3 Authority Key Identifier:
keyid:FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6a:eb:b9:ab:76:2e:ee:b8:0e:ce:86:92:b3:7c:10:70:10:
be:a0:d8:81:d0:d4:92:7a:aa:aa:4a:bc:5e:6c:b2:54:6c:2d:
b2:6e:6a:ce:33:f7:7f:23:6c:2e:24:a1:c3:f9:21:4a:f8:bd:
82:22:c0:2b:9c:56:68:7c:ec:ab:5d:26:96:51:31:1d:29:af:
32:3b:40:f1:26:57:51:84:be:a1:38:71:4c:32:25:2f:b7:7d:
62:5c:b9:1d:7a:b0:62:c9:89:62:65:56:0a:e0:95:9c:01:c3:
36:ad:bd:91:1a:6f:34:af:6f:a7:f6:40:94:af:14:f3:b1:e8:
41:5f:46:95:f8:13:c9:d6:eb:63:1e:58:9a:00:7f:35:3d:54:
9a:50:ea:a8:5f:0a:20:16:27:24:5e:2e:9b:0c:97:54:8e:c1:
f5:c9:d7:cb:a0:a1:24:dc:92:5e:21:58:d4:21:6c:c1:da:a7:
91:7d:45:c3:48:6e:38:6f:f8:a2:17:d1:17:40:cc:b1:75:e7:
e5:7a:69:17:7f:df:d2:ba:0e:ca:4c:f5:a3:dd:d3:68:71:c6:
d2:d3:13:3f:bc:33:7c:99:7a:d6:d5:0b:e0:2b:82:77:f7:74:
0a:d4:3a:49:9c:62:ef:d1:d4:db:d2:5e:99:79:58:de:5f:25:
38:e9:8e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:24 2025 by rpki-client