Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
File: 43HOIIaAX5EvhRK3nF5mqcn01NI.mft (raw, json)
Hash identifier: pbGl9eb4EGDtaV3Hu6I2Q5drMxMMMDoNpNh6bwnB4E4=
Subject key identifier: 39:C0:13:38:6E:A9:15:E0:80:C7:EA:63:10:3A:7B:31:5E:BB:71:CD
Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
Certificate issuer: /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Certificate serial: 0198D4A7E36F7497B93563ADE1B01C0DDEAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
Manifest number: 0AA2
Signing time: Sat 23 Aug 2025 02:00:29 +0000
Manifest this update: Sat 23 Aug 2025 02:00:29 +0000
Manifest next update: Sun 24 Aug 2025 02:00:29 +0000
Files and hashes: 1: 43HOIIaAX5EvhRK3nF5mqcn01NI.crl (hash: COG9fWodF107KADz9DS1qhQJvzAAIY87PTufW+NzN+U=)
2: oNzr7e9N0_nB7NG8uVVH1YFW8SA.roa (hash: E5UVvjB7YIozDhZ03PLtgPckm/pTCCT/ml1aJ8kENsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:e3:6f:74:97:b9:35:63:ad:e1:b0:1c:0d:de:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Validity
Not Before: Aug 23 02:00:29 2025 GMT
Not After : Aug 24 02:00:29 2025 GMT
Subject: CN=39c013386ea915e080c7ea63103a7b315ebb71cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d9:08:2f:22:01:98:4d:b0:e6:77:11:86:f3:
8d:31:50:aa:ac:51:b4:4b:57:34:f4:f2:f9:9a:d8:
ea:b7:03:7c:4e:4a:68:3f:56:e8:b8:91:63:1b:95:
ff:98:18:e2:52:cf:d1:c4:fa:86:53:fd:d1:0b:d9:
33:93:1e:13:e3:94:14:ff:5e:ce:0b:4f:fc:bf:e5:
64:13:1a:c7:d1:8a:49:08:5a:29:81:07:11:a9:ab:
bf:be:b7:8d:21:d4:da:47:ac:34:11:20:f9:3f:7f:
13:89:00:cc:9c:d1:bb:fb:b6:e1:7c:d2:b4:b6:14:
e6:5c:41:bf:44:15:5b:bb:a8:54:26:43:6d:1b:7e:
0f:76:84:71:29:e5:f7:83:d4:89:03:d6:2e:8c:e5:
4c:65:f9:5c:fe:13:ae:b0:9d:e9:9c:8d:ae:d5:ee:
67:c1:40:d8:2b:bc:62:08:33:a2:22:05:15:d2:41:
9b:59:48:e3:cc:c8:59:07:53:66:82:97:fc:e4:31:
d1:9e:07:d1:65:03:b8:5c:8d:ec:60:57:6c:00:08:
e5:6a:49:1d:86:19:d8:0c:ce:a0:30:e3:ba:b8:fd:
03:c7:33:5f:db:40:5f:ea:fe:0b:d6:25:6f:ad:a0:
33:94:79:3f:8d:ee:ee:fd:d0:f9:66:ab:6a:6f:59:
74:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C0:13:38:6E:A9:15:E0:80:C7:EA:63:10:3A:7B:31:5E:BB:71:CD
X509v3 Authority Key Identifier:
keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:5a:fc:0a:ce:80:8d:d1:69:7d:04:ff:eb:58:9a:3e:8a:61:
08:d1:01:e1:5a:8e:a4:8c:83:a2:ef:93:36:bd:f4:ed:7f:5c:
87:ba:a0:b5:e6:09:1f:54:c2:01:ef:b1:20:c5:61:41:58:3c:
ad:a0:4b:b2:b3:98:0b:e2:95:e9:59:36:6f:35:f4:85:5f:37:
c6:42:5b:83:81:3d:59:b8:f3:da:6e:4b:97:dc:35:91:8d:a2:
0c:a2:6a:dc:0d:33:60:a1:d2:69:07:f4:a8:dc:fa:bd:6a:bb:
20:86:e7:8e:de:71:1b:46:ea:72:15:26:0f:d7:4e:c0:9e:fd:
05:68:e2:3d:d5:a2:db:ce:c9:49:82:56:c0:1e:73:5d:83:29:
bc:7f:37:d4:fc:db:37:f1:91:3b:10:1f:bc:46:c3:db:2d:37:
6f:aa:02:ac:3c:dc:db:e6:2f:ac:03:6d:6c:47:d9:52:a0:72:
5e:f2:52:b8:25:fb:90:5b:d0:11:1e:a9:2c:06:48:0e:bd:2a:
54:4e:b9:f5:57:63:77:5f:2d:20:08:97:78:ce:fa:b9:87:1c:
eb:b5:7f:2c:3d:48:e8:e0:35:c8:55:f2:7e:ee:02:c5:eb:95:
c7:0d:59:47:e2:2c:be:14:5a:29:c2:f6:66:f9:6b:f3:64:56:
d6:37:78:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:34 2025 by rpki-client