Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
File: cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft (raw, json)
Hash identifier: lf9E6MMhhDW43BEO+m5UPfVVyHn3e2ZcuwtXtbE+dcU=
Subject key identifier: 5F:2A:C9:16:81:34:19:6C:77:25:BB:83:80:98:46:27:2C:C7:0C:21
Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
Certificate issuer: /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Certificate serial: 0198D5835AA1E37E1F9E03B2E081D21E674E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
Manifest number: 0A64
Signing time: Sat 23 Aug 2025 06:00:12 +0000
Manifest this update: Sat 23 Aug 2025 06:00:12 +0000
Manifest next update: Sun 24 Aug 2025 06:00:12 +0000
Files and hashes: 1: cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl (hash: y6uDkGzMqdazOE3I9+lvBMfKFQ/9DRjOpyS1iIdziNM=)
2: rs9tHLr8zyXOfjLVtvASmrQRyII.roa (hash: TPmV5eCt75VU6HkVEIxwqSqz2UP53y06YcldQPwtkco=)
3: yrE5IOAO5wezku-a_RJR7TB3CkA.roa (hash: 7HAAXilZN5MLFA2Yt1+6x9clHUzDWGtePYkFTFw0/Hk=)
4: zX3z-Ivq7H5_KU4k1lIkOCnGhd0.roa (hash: 0LyNXWO0Wf/6GO5a+bSTGSO0K4OEPsxkW9pcYGNMQq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:5a:a1:e3:7e:1f:9e:03:b2:e0:81:d2:1e:67:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Validity
Not Before: Aug 23 06:00:12 2025 GMT
Not After : Aug 24 06:00:12 2025 GMT
Subject: CN=5f2ac9168134196c7725bb83809846272cc70c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c4:f0:9b:3a:b6:20:48:a0:8f:73:7c:d7:c1:
12:93:53:48:2f:52:4c:f2:23:94:4b:c1:1e:86:a0:
e6:1c:b2:a6:95:20:f4:bd:ea:f2:f1:78:fd:1d:64:
4d:50:e7:df:5f:6f:64:59:10:f8:bc:4b:4f:81:cb:
0c:c9:63:4c:d2:3b:5a:f7:34:9b:00:8d:51:b3:4e:
ba:28:fd:dc:64:c9:63:df:f4:30:99:77:ab:ab:1c:
d5:38:04:4c:f8:0f:d9:83:5f:35:8b:c8:33:01:ad:
72:ce:d2:a8:72:98:1c:d6:8b:64:6a:15:0f:51:cc:
e1:28:c4:7e:2a:a0:14:01:ee:1e:0f:fa:2b:39:e4:
b9:f3:6d:94:94:1c:5d:57:d6:88:fb:aa:98:53:50:
35:4c:98:13:fc:2c:a7:e8:6f:51:43:95:f4:5b:ef:
09:24:bb:ee:68:57:9a:e0:8f:4f:c5:0d:66:af:02:
02:63:d2:be:2b:0b:0c:0b:6e:6e:1e:cf:d0:a1:30:
67:cb:a9:d0:61:c9:75:83:d8:0a:83:fa:b3:3d:2c:
dd:ef:3b:43:47:ba:c2:7f:47:67:88:5e:e4:c7:06:
ca:f0:87:de:6a:7f:5c:a9:a1:84:4b:61:35:d6:75:
73:01:25:4f:b3:81:0c:c1:fc:cc:c4:e5:bb:bd:e6:
ad:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2A:C9:16:81:34:19:6C:77:25:BB:83:80:98:46:27:2C:C7:0C:21
X509v3 Authority Key Identifier:
keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ab:fe:37:ef:b9:ce:1c:15:fd:6b:0a:b6:09:f4:f7:43:95:
bb:0e:2d:71:c6:73:79:2e:55:fe:28:97:01:36:ef:33:5b:53:
da:95:a9:0b:72:eb:da:e6:98:d7:51:b6:38:30:dd:c6:57:34:
5f:72:18:61:b6:f0:cd:b3:d4:2b:09:8c:da:98:64:87:48:fe:
09:13:79:92:db:ab:1d:06:54:3a:52:21:c9:fa:76:86:2b:90:
9b:ef:7d:17:e1:92:25:11:51:b4:4a:0a:90:55:d7:27:0b:87:
e3:f9:21:9e:a3:aa:93:a2:da:8b:5a:89:86:a5:4f:01:fa:64:
69:c0:d2:fc:bc:4d:67:a0:51:f7:7a:f8:eb:c3:71:9f:03:f9:
6e:49:58:cd:4f:96:74:68:d8:a6:c6:d0:de:f9:54:f3:90:22:
c4:47:53:33:db:be:ed:fe:f6:cc:d9:2e:62:81:7a:6f:78:6a:
d4:47:a4:be:90:56:ed:ac:c2:aa:e5:d4:88:04:54:81:ac:8d:
50:4f:8b:7f:41:b8:68:5a:0d:1d:08:e1:ed:d1:6f:c8:ae:9a:
9f:bf:d5:b3:6e:b1:fe:16:63:3e:39:b9:09:c8:68:77:24:de:
24:1e:9f:57:87:df:54:04:9d:c8:d7:5f:bd:cb:8e:d2:f6:8e:
db:3b:a6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:35 2025 by rpki-client