Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
File: rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft (raw, json)
Hash identifier: Q1o2GOvDcxuUVOTzzcNtCFkTtI5qQOblDbz2pryMHdM=
Subject key identifier: E3:A7:75:3C:A7:57:25:8F:23:D9:B6:40:1D:1B:FD:DF:1D:FD:78:AB
Authority key identifier: AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
Certificate issuer: /CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Certificate serial: 0198D58373655EA9878C11F6D1DBC722DBB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
Manifest number: 1240
Signing time: Sat 23 Aug 2025 06:00:18 +0000
Manifest this update: Sat 23 Aug 2025 06:00:18 +0000
Manifest next update: Sun 24 Aug 2025 06:00:18 +0000
Files and hashes: 1: 0_n0dJGdGPC54n6Su3XhjRpEGaE.roa (hash: ecsdCD7tgZtKRsUvKu336lhnysfVM1v2m6QNHH0P3gg=)
2: rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl (hash: d86/fDVq2/7Z6qAt1D6pNKw50fVFjoa00Tjfa4rLuUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:73:65:5e:a9:87:8c:11:f6:d1:db:c7:22:db:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Validity
Not Before: Aug 23 06:00:18 2025 GMT
Not After : Aug 24 06:00:18 2025 GMT
Subject: CN=e3a7753ca757258f23d9b6401d1bfddf1dfd78ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:14:a2:ac:fd:64:77:bd:48:56:80:b0:d3:53:
8c:65:0f:37:ef:09:bf:af:5d:4e:09:58:ed:94:7e:
59:9e:62:93:97:a7:60:48:08:e9:2e:04:e0:23:e0:
ea:9d:dc:53:57:bf:84:d5:2f:d8:fd:8a:15:7a:22:
63:a3:98:a9:86:f6:6e:3a:03:b7:83:51:1b:46:ff:
07:dc:aa:5f:49:be:2f:92:2a:4a:da:76:4f:5b:37:
e0:5f:2e:2a:20:3d:87:ed:c0:fa:68:60:42:ab:91:
ef:d7:eb:92:49:0e:cc:09:ef:58:83:6f:23:2b:76:
9c:1e:01:9b:91:82:0b:3a:d5:70:87:f0:25:5a:e7:
21:81:3f:dd:70:38:2e:0b:3c:9d:c9:0f:a2:aa:68:
e5:c2:88:0b:f4:c8:f1:90:72:f6:28:2b:4c:03:46:
10:5b:7e:39:52:7d:c8:a6:9d:1c:95:4d:a9:79:a3:
eb:c0:f6:71:63:99:eb:c3:99:75:1b:41:aa:65:8d:
1b:da:74:3b:be:79:c7:71:7b:5f:2a:28:83:81:35:
ef:f5:25:6f:c0:52:f5:9b:41:ef:7e:f8:2c:89:97:
f3:9f:1f:9a:81:6e:ce:4e:2f:4c:a0:11:c9:ae:25:
b1:37:b4:04:37:f0:38:02:c7:41:b0:82:a1:0e:dd:
2a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A7:75:3C:A7:57:25:8F:23:D9:B6:40:1D:1B:FD:DF:1D:FD:78:AB
X509v3 Authority Key Identifier:
keyid:AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:29:6a:9b:25:e3:8c:66:49:d7:ea:a5:eb:89:d1:9b:5f:e3:
90:e8:92:8d:5c:87:b0:c0:7b:dc:0d:ec:33:7c:f4:23:2b:bf:
fa:e5:2c:98:d2:76:60:b0:11:4b:c6:64:98:7e:96:42:05:1b:
88:e4:f8:94:ad:d1:bc:20:c6:26:14:a6:3f:80:61:d4:14:43:
70:83:b5:94:5c:49:4b:2a:ec:77:c3:31:50:ff:ad:20:e8:17:
70:f1:9d:5e:01:2d:b2:8b:1b:47:e3:7d:94:73:21:11:f2:59:
47:46:a1:be:4b:df:0c:79:20:b4:70:82:9a:15:15:d7:2c:55:
2a:49:32:b0:a4:9e:17:f2:35:49:08:fd:e4:31:e6:56:d0:ad:
33:2e:24:1c:a7:1b:ed:ff:3f:ab:91:d7:a1:c1:21:27:55:42:
0a:36:4f:62:0e:83:f8:48:51:4e:40:c8:57:59:0d:06:89:d7:
c6:53:79:a3:84:88:b3:66:d8:92:38:8d:f8:a4:ac:53:82:cd:
b1:18:08:10:2a:51:23:ef:ad:2a:21:c6:f8:e7:a5:a0:96:1d:
6e:82:6b:ab:44:f0:2e:81:eb:cf:63:ab:90:3a:b3:6e:73:88:
1f:44:74:79:02:07:eb:34:25:70:92:30:7b:3e:de:9b:88:86:
36:8c:e4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:02 2025 by rpki-client