Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier: VVsx2h4v7MdOK8wPYQzv9cHs269tQGrLufeYSGVQICM=
Subject key identifier: DD:4B:B4:0C:34:87:A6:81:7F:89:BC:96:92:29:77:F6:50:71:44:BC
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial: 0198D4E059ACAFD13B3ACBDB46C94F214095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number: 0EDE
Signing time: Sat 23 Aug 2025 03:02:09 +0000
Manifest this update: Sat 23 Aug 2025 03:02:09 +0000
Manifest next update: Sun 24 Aug 2025 03:02:09 +0000
Files and hashes: 1: RGqdJBDPEJ4NHCF91EROwq2LZhE.roa (hash: Hlulf3Fm39IzIDGq4R3bEURkvT1bInO2vsqwAXSwJiE=)
2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: a5DcGbYJ0a8WOUuer8YZJiWippvwOEbUZ/2QmM9S3SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:59:ac:af:d1:3b:3a:cb:db:46:c9:4f:21:40:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Validity
Not Before: Aug 23 03:02:09 2025 GMT
Not After : Aug 24 03:02:09 2025 GMT
Subject: CN=dd4bb40c3487a6817f89bc96922977f6507144bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:d0:3f:de:89:1f:c2:fd:f3:f9:cb:65:78:
9d:e0:e2:b8:e0:92:39:cd:86:bc:8a:b9:56:fa:84:
60:ac:65:fe:d8:04:a1:47:4e:db:d4:77:c2:c3:3a:
71:ec:5f:a3:22:e0:f6:ba:0d:ae:84:0a:f1:28:4c:
c0:3f:4a:04:69:0a:53:3e:89:b0:a4:dd:ae:cb:61:
ba:9a:3e:59:a9:d5:16:3c:61:19:3d:16:31:7d:bf:
68:c5:4a:7e:97:bf:4a:b6:d0:89:a6:cb:79:21:83:
6e:8c:05:f9:73:5b:f9:4d:85:94:fc:0d:5e:4b:85:
a3:ac:e5:29:5f:ef:da:17:2e:b0:09:4c:91:f1:3a:
b5:e1:e4:85:12:92:c2:3d:e7:ea:6a:66:56:8b:b5:
56:21:66:e1:62:c9:f3:2d:ef:2d:57:1e:90:b2:52:
2d:31:8a:2f:07:cc:59:48:fc:8d:46:a3:96:65:49:
50:18:1a:47:95:e2:2f:47:9c:ac:5b:8e:04:3c:94:
92:5e:8f:74:7b:2b:9e:c4:aa:ff:a1:ad:13:f7:d6:
66:4b:12:ac:e4:c2:76:81:7f:6c:61:48:62:ce:b4:
36:bc:fc:cb:d7:1f:dd:29:2a:7b:49:85:58:ea:3d:
a7:53:4a:eb:20:c2:29:3b:2e:5f:a4:dd:97:1f:18:
72:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4B:B4:0C:34:87:A6:81:7F:89:BC:96:92:29:77:F6:50:71:44:BC
X509v3 Authority Key Identifier:
keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:8a:aa:a4:1b:a4:08:06:b9:cc:fd:61:3d:a1:9c:1c:33:e3:
96:da:bd:f3:9d:59:e2:b8:bc:a2:f8:7f:9e:54:19:9f:ab:4a:
b0:e7:2c:61:6b:d5:4e:7f:fc:d7:5f:4d:6c:09:a4:72:57:3e:
fe:9f:30:5c:55:21:94:a5:f9:99:20:e6:99:82:2a:64:68:a8:
62:47:cf:5c:b3:e9:95:57:39:d2:bc:41:b9:28:f9:d4:b3:76:
5b:cc:c6:16:ab:3b:2a:ab:56:82:28:53:90:46:19:22:f5:46:
66:88:86:76:27:e7:eb:d1:00:9a:46:4f:32:79:2d:c0:f4:d9:
2a:ba:bf:a4:a0:3a:3e:49:5c:87:64:bc:a0:b5:3c:e4:2f:f1:
e5:e8:5d:d5:c2:66:2e:0c:be:83:43:9b:9f:85:95:0e:bd:7b:
e8:43:ab:35:04:f9:1b:96:de:01:49:8e:7e:49:a6:d8:78:2d:
a2:ea:84:39:4b:62:fd:31:b1:e4:7a:f0:88:0b:7c:e0:3b:a3:
b9:db:44:6d:15:53:2e:cb:80:9b:ee:ba:35:01:f1:cd:17:9a:
b3:c6:39:cd:0f:24:53:72:47:a6:6b:05:63:c0:c9:ef:d1:1b:
1b:03:a3:24:b0:4d:8d:89:dd:21:3d:7c:28:fb:c0:44:a8:b9:
b4:78:90:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:43 2025 by rpki-client