Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
File: sX6_RB7hCFYx7rdxmomC39gFe-E.mft (raw, json)
Hash identifier: /a7s6ctyYulRs107NQyJQEK0/Zfh58azktyOLEtIq+I=
Subject key identifier: 1D:BB:E4:0A:A4:05:23:38:B3:1F:AC:B6:10:4E:4A:84:80:4C:88:31
Authority key identifier: B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1
Certificate issuer: /CN=b17ebf441ee1085631eeb7719a8982dfd8057be1
Certificate serial: 0198D47452CDF7D465F597DADB508EB4C7B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
Manifest number: 099E
Signing time: Sat 23 Aug 2025 01:04:09 +0000
Manifest this update: Sat 23 Aug 2025 01:04:09 +0000
Manifest next update: Sun 24 Aug 2025 01:04:09 +0000
Files and hashes: 1: JCqxOWvRMd2lIIGe0fYoaGdhwgI.roa (hash: q79BmLDis9K2JVt9ulN+DMiX99ELtsqzHLGGugITbVk=)
2: sX6_RB7hCFYx7rdxmomC39gFe-E.crl (hash: 3URmqL2RJGmTQKw/6IHts+JzDvTP9mi1KEVI8zj8oOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:52:cd:f7:d4:65:f5:97:da:db:50:8e:b4:c7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17ebf441ee1085631eeb7719a8982dfd8057be1
Validity
Not Before: Aug 23 01:04:09 2025 GMT
Not After : Aug 24 01:04:09 2025 GMT
Subject: CN=1dbbe40aa4052338b31facb6104e4a84804c8831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5d:f5:43:16:38:76:7d:e4:a4:89:92:64:9c:
3f:21:1f:40:cd:47:f4:f2:2b:3c:85:71:ad:86:2f:
25:19:f4:0c:62:77:7d:1c:ba:31:83:07:e3:cb:7c:
c6:15:25:90:b7:b4:be:d0:27:b0:72:a3:5a:ac:7a:
97:0d:2b:02:34:b2:8a:a1:80:b6:0a:35:91:3f:a0:
66:ec:33:98:8e:20:ca:fb:d8:f1:fb:f0:4e:dc:4e:
13:fb:1f:b9:69:63:5d:6c:f0:f1:5c:22:c2:c7:f3:
9e:b5:fc:1a:4f:ad:b6:eb:80:4f:c7:9a:44:05:68:
e1:3e:11:9b:d7:47:53:52:10:ca:c6:e5:d8:04:d9:
d5:2f:10:c8:87:b9:c3:55:b3:8d:c7:ea:17:18:39:
66:99:d0:dd:fa:af:69:0f:bb:b4:db:39:8a:6a:19:
70:2b:95:a8:60:b3:b4:3c:7b:bf:4d:2d:1f:ed:f6:
0a:06:ad:96:09:07:9f:94:e0:38:b9:54:6c:48:c7:
b9:00:04:c5:7b:44:9e:36:89:53:a2:c0:d7:f6:73:
d2:49:54:6b:d2:8d:1d:2a:81:d2:99:db:6b:5a:e9:
69:26:20:5c:e8:51:20:bd:d3:ec:f4:78:c1:3a:3f:
d5:5f:f7:d9:84:e4:cc:cb:b3:05:58:aa:15:ba:fb:
f4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BB:E4:0A:A4:05:23:38:B3:1F:AC:B6:10:4E:4A:84:80:4C:88:31
X509v3 Authority Key Identifier:
keyid:B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:46:a2:71:ef:f9:f2:3e:60:ea:94:94:94:39:a1:55:cd:96:
6c:98:6c:cc:c4:98:49:cd:37:e4:45:d3:2f:00:31:46:98:9b:
65:52:80:50:91:8f:38:bc:b4:b0:21:5d:94:48:2c:34:25:2d:
fa:d3:12:39:66:c1:ce:b0:6f:1f:01:11:e1:5c:fa:25:7a:c0:
5d:f1:d8:b2:66:95:a3:3b:e2:1c:93:d7:0e:59:3d:3f:74:d4:
6f:34:95:9f:8d:13:6c:e7:44:0f:c7:13:c6:d5:a3:20:95:40:
fa:d0:98:fe:4a:52:ad:59:67:18:cd:70:9d:d8:12:36:4b:a0:
ad:ff:a3:19:61:6e:44:18:4e:07:e5:a7:33:53:8b:f4:ea:ce:
25:ae:95:de:e0:03:79:76:af:3e:da:64:7b:97:da:a6:63:97:
26:ef:14:42:52:7b:27:a5:ce:cf:13:c3:37:55:4c:54:90:49:
5c:3e:f1:9d:23:b7:93:28:11:77:79:f7:df:13:81:6c:f3:f6:
82:0a:a1:56:69:52:c8:5e:5e:ea:46:1b:c6:c6:ff:d6:a3:de:
60:77:4d:e5:76:a3:b5:b2:02:12:93:b8:91:08:e2:bd:da:40:
d7:0a:f3:e2:89:8c:a1:48:3f:26:a6:d8:59:6f:40:bf:5d:ed:
0b:2e:7e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:06:28 2025 by rpki-client