Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
File: RFJjMnSx2IapJ1f2UhnC51RuzfU.mft (raw, json)
Hash identifier: TxI3I8TCdZcZMYrJmR+wNBvE53/sPxtV7PkweZQLaNg=
Subject key identifier: 0E:6D:58:26:51:63:29:A1:10:1D:DA:39:E0:81:FF:45:BE:6C:2A:CC
Authority key identifier: 44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5
Certificate issuer: /CN=4452633274b1d886a92757f65219c2e7546ecdf5
Certificate serial: 0198D58378CA1FCB28303068B3DCF8C5BDC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 06:00:19 +0000
Manifest this update: Sat 23 Aug 2025 06:00:19 +0000
Manifest next update: Sun 24 Aug 2025 06:00:19 +0000
Files and hashes: 1: 1-2BRV4sfO38uFELp8sV79L0B1lw.roa (hash: APyNfY72IzRC6P6hQGMuA+VkTRyCwcNbDRlCp4K0Vjw=)
2: RFJjMnSx2IapJ1f2UhnC51RuzfU.crl (hash: LbdqP2pgnMH5AY5CUNoVMDvxS+4+CTiuzTGYmvjp+mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:78:ca:1f:cb:28:30:30:68:b3:dc:f8:c5:bd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4452633274b1d886a92757f65219c2e7546ecdf5
Validity
Not Before: Aug 23 06:00:19 2025 GMT
Not After : Aug 24 06:00:19 2025 GMT
Subject: CN=0e6d5826516329a1101dda39e081ff45be6c2acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:72:e7:66:44:26:a5:ea:9d:15:af:99:c8:
c8:f1:71:17:ef:eb:3b:85:55:a6:27:8a:d1:8b:e6:
62:7b:df:3f:e6:62:f5:f6:4c:4d:23:3d:64:8a:67:
ce:eb:da:98:44:7f:02:26:b4:0d:cb:e9:68:cf:44:
be:9a:be:86:81:c9:df:5a:4d:0b:f9:04:64:1d:bc:
e7:a6:f6:28:b6:40:78:b8:1b:50:68:5e:7b:31:45:
08:a5:44:b5:ec:01:3f:a9:b7:1d:3c:fe:3d:76:e0:
99:3c:03:94:8b:c8:60:36:62:ba:e2:67:4a:2d:c6:
38:96:38:6f:9c:9c:32:b7:2c:ec:a8:d7:97:6a:99:
07:99:45:e4:fd:88:09:1f:2e:90:c3:6d:b0:77:17:
12:57:d0:ac:2d:94:80:5a:70:39:e2:cf:8a:ff:c1:
2e:15:c7:f7:59:01:be:ba:9a:e6:5b:88:e6:b2:30:
9b:cf:bd:78:da:a2:bd:1a:34:65:3e:eb:a6:0e:2d:
02:19:9a:bf:5b:1d:57:73:2e:af:ae:bf:a7:63:2b:
a3:c7:0e:5d:f1:60:81:62:d2:59:4e:11:df:a9:78:
7f:c8:57:ca:38:c7:6a:5d:38:82:23:19:59:cb:b0:
00:45:f9:a4:d9:58:37:96:80:e1:b5:3f:61:75:0a:
4d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6D:58:26:51:63:29:A1:10:1D:DA:39:E0:81:FF:45:BE:6C:2A:CC
X509v3 Authority Key Identifier:
keyid:44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a0:d4:1c:51:75:0e:41:d4:db:01:2a:2b:50:2e:09:a3:a9:
96:57:f0:fe:38:fe:df:29:4f:ad:57:b2:6d:c7:cc:4d:27:00:
a3:d7:32:47:07:c5:43:88:06:3d:29:38:09:13:ae:79:b3:c1:
e4:63:26:6f:32:ed:a4:14:a3:39:42:cf:63:d1:30:b9:80:e1:
01:0e:6b:bd:a9:4a:3d:e2:f7:23:d7:ee:14:73:13:a0:15:87:
0e:34:76:8c:1a:39:1a:09:db:bc:fb:ef:30:ce:eb:56:04:0e:
6e:f4:f9:89:50:3a:8f:b1:f1:ad:96:11:55:60:df:3f:98:d0:
77:2c:bb:64:96:98:ca:18:e6:cc:ae:dc:56:73:dc:04:8d:e1:
33:5c:34:9f:0b:7b:f6:c0:48:d8:98:0e:da:e9:9e:73:7a:7a:
66:50:b8:b1:97:85:83:e1:5f:d6:95:3f:b6:2e:98:72:14:08:
51:50:09:68:34:ab:b8:34:00:3d:cf:e2:fc:8e:e1:d3:85:53:
9f:bf:8c:f9:66:b6:17:85:ea:6e:b8:da:10:aa:1f:a1:e3:bb:
79:61:25:cb:8d:c3:4e:a3:12:b5:ee:7c:18:91:a5:69:21:a3:
ac:61:b3:01:0c:0c:ab:73:b3:0b:1e:17:35:e1:dc:3a:da:f9:
02:13:d5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:31 2025 by rpki-client