Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
File: p7He9pWIXq3lzMi0vioCuxYHnpw.mft (raw, json)
Hash identifier: binl8mxIp3U09jKJxjgdA9gpB7msAo9K//rEwIoqOZk=
Subject key identifier: A3:FA:A3:C3:13:54:19:13:DB:10:BB:67:F8:EF:CE:DD:49:E8:32:0B
Authority key identifier: A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C
Certificate issuer: /CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c
Certificate serial: 0198D54EA30D75DDFD6E9510B949A5208DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
Manifest number: 089A
Signing time: Sat 23 Aug 2025 05:02:37 +0000
Manifest this update: Sat 23 Aug 2025 05:02:37 +0000
Manifest next update: Sun 24 Aug 2025 05:02:37 +0000
Files and hashes: 1: 2ZXONPsq8Wq-C73Y4ZOdG8CP47o.roa (hash: 23qtSB8U1yvtJIhVOx0ex1wgA9IS3rvYP3HTfvaa5cc=)
2: p7He9pWIXq3lzMi0vioCuxYHnpw.crl (hash: REqxaIDEt2BC7GKzNSBThDPinBvQpr5rEoDnSPP17uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a3:0d:75:dd:fd:6e:95:10:b9:49:a5:20:8d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c
Validity
Not Before: Aug 23 05:02:37 2025 GMT
Not After : Aug 24 05:02:37 2025 GMT
Subject: CN=a3faa3c313541913db10bb67f8efcedd49e8320b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:54:cc:8a:c3:47:18:d9:67:92:f5:96:2f:
bc:73:cc:71:f5:1f:3a:b1:ce:88:ed:f2:09:b0:a0:
b4:61:0e:75:bb:be:fd:a8:c6:cd:7c:6a:ef:c9:c4:
2f:c9:53:5d:1e:ab:ab:e6:2b:bc:28:70:73:82:16:
57:6d:88:f7:d8:4e:c0:7b:05:ab:3d:7e:79:b3:72:
91:cc:e3:61:0c:e4:a7:6d:8a:20:a5:0a:84:d2:49:
3a:29:3a:6c:2a:74:14:3b:e8:32:d1:c4:f3:f9:ca:
7b:b7:3d:12:c7:20:58:ac:21:ac:a3:df:b7:ab:11:
82:df:ff:d8:00:5d:c3:72:d6:84:30:09:29:f9:80:
09:e9:5a:02:e9:8a:b9:db:59:6a:19:b2:8e:99:a2:
cf:9d:5f:5a:ed:bc:4e:08:13:b0:b5:58:c7:59:6b:
9f:65:74:d6:11:6d:1e:44:30:ff:a1:81:2e:e1:19:
fa:b3:2e:43:8a:33:e7:12:ac:17:b4:5f:87:71:2a:
c1:5a:fa:7d:e3:d5:35:30:a5:79:02:72:0d:59:2f:
24:0f:6f:08:dc:5f:d5:30:d0:f9:58:08:d6:77:1f:
0c:f3:96:49:31:c0:f3:cf:6e:54:9e:3c:02:b9:1d:
91:bd:09:ad:21:ca:ed:3f:86:a7:67:fe:d8:45:53:
d1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FA:A3:C3:13:54:19:13:DB:10:BB:67:F8:EF:CE:DD:49:E8:32:0B
X509v3 Authority Key Identifier:
keyid:A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:92:07:56:6f:ed:3c:2d:1c:38:43:a0:e9:bc:31:30:4c:de:
95:e2:50:4c:ab:02:35:4a:48:04:36:e9:80:ef:01:e6:ea:27:
9a:73:8c:39:0c:f6:ea:75:42:1d:58:ea:0b:ad:f6:39:b8:d3:
e0:09:e8:03:7d:36:a4:26:16:58:ed:50:69:e1:84:0f:16:e4:
20:e1:74:6b:46:da:e0:b2:ac:2e:7f:64:04:f9:3f:d7:c9:68:
5e:c1:a4:11:b7:1a:7d:13:da:e4:fb:46:c3:a6:e0:de:b8:f5:
00:fe:ec:39:4b:5e:64:0e:99:23:2f:59:53:20:00:65:f8:fe:
03:25:a6:38:b1:7b:d4:92:8a:a1:3d:32:e8:03:71:6e:04:5c:
2e:80:2f:31:2d:d9:97:ab:b2:51:db:c4:69:0a:e1:c0:fb:70:
85:fb:1f:4a:c3:a0:5e:74:aa:66:1d:aa:9b:93:6c:75:75:70:
18:5c:26:fe:3c:3b:f3:c6:d8:7d:27:8b:91:86:b7:58:d3:6f:
97:0a:7d:95:f0:a1:54:f2:d5:50:89:e4:5a:eb:56:e0:8e:01:
a4:34:9e:55:76:de:e6:51:41:26:9b:3d:40:00:43:f2:cb:09:
29:a8:e3:c5:d6:68:d1:d7:e5:5a:e0:8b:6f:e3:4b:49:ec:8e:
71:77:be:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:17 2025 by rpki-client