Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
File: rSzfJ9neZesk5c_J0xDkyKAwFGA.mft (raw, json)
Hash identifier: N3YAgjAMRt8o2ohleY+Y7haCQphc/awI/DarPUTUJlg=
Subject key identifier: 17:0E:8F:EB:7C:74:B5:1F:7A:EC:6C:07:BC:CA:45:A3:9C:E8:7B:28
Authority key identifier: AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
Certificate issuer: /CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Certificate serial: 0198D773E2F0304A2E711DC93C03E5823ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
Manifest number: 0C53
Signing time: Sat 23 Aug 2025 15:02:32 +0000
Manifest this update: Sat 23 Aug 2025 15:02:32 +0000
Manifest next update: Sun 24 Aug 2025 15:02:32 +0000
Files and hashes: 1: Zp_o_Avy64dimsDN37AJZ_vsvNw.roa (hash: w725AD9grVqnjs1N3X5smX0OnVgWb9b37Wpm1j4UCoQ=)
2: rSzfJ9neZesk5c_J0xDkyKAwFGA.crl (hash: kib0zrtYEBPzp9uIYnaVA6bfWhL33+XK9pIWw+CbEvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:e2:f0:30:4a:2e:71:1d:c9:3c:03:e5:82:3e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Validity
Not Before: Aug 23 15:02:32 2025 GMT
Not After : Aug 24 15:02:32 2025 GMT
Subject: CN=170e8feb7c74b51f7aec6c07bcca45a39ce87b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:07:fd:4e:34:a2:ea:b9:5f:63:2e:d5:1a:c5:
81:aa:08:4c:78:5f:eb:5b:79:e6:c7:3f:e3:a3:af:
8b:9b:32:b2:2e:79:43:a6:89:90:07:fb:1d:59:5f:
e0:c0:ed:dd:94:ff:0f:21:d1:84:99:89:93:e2:17:
ca:68:44:49:dd:9c:e0:f4:3e:cc:11:7d:26:ad:41:
c1:46:be:0e:9d:90:68:9e:8c:71:04:15:0b:e0:ad:
1b:6d:19:01:c1:37:f7:ed:28:2a:9e:e1:c7:f4:e6:
8f:82:9d:b5:b4:3c:dc:11:a9:b1:b0:52:e2:2e:59:
69:50:72:dc:5c:71:5f:40:e1:d8:2a:10:45:26:cc:
76:48:05:0b:3e:2c:6c:75:df:4c:63:95:30:dd:f1:
d0:14:f6:3a:88:1e:21:97:f8:15:95:e1:6f:43:06:
a8:b6:a0:fd:e9:f9:c1:8f:05:7d:ad:86:e9:2c:2f:
99:19:8b:ea:a8:2a:82:94:7b:9c:33:bb:ed:0f:c6:
42:5a:75:e1:d1:9c:4a:a8:5e:27:05:02:e1:db:c4:
c5:a3:2e:3c:f8:fd:a4:5b:6d:5e:dc:05:2f:da:cd:
78:f2:88:aa:50:cd:7b:de:82:9f:45:0e:a3:de:25:
25:83:6a:10:31:e8:19:94:6a:d5:ec:84:a1:01:63:
81:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0E:8F:EB:7C:74:B5:1F:7A:EC:6C:07:BC:CA:45:A3:9C:E8:7B:28
X509v3 Authority Key Identifier:
keyid:AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:23:a0:2a:ae:5c:16:05:c6:24:ab:c8:46:36:b7:38:5b:27:
f0:8a:96:6c:05:df:b4:a1:eb:7c:70:fd:ec:b1:c3:2a:93:9f:
2c:7d:4d:cc:2a:09:9a:90:09:0b:41:6b:0c:ae:29:ea:e2:94:
55:07:65:0c:39:55:63:20:f7:d8:7d:00:08:43:4c:bf:8a:13:
d4:61:28:44:05:3f:4b:08:74:41:09:da:4a:58:c0:14:c4:3a:
60:a2:39:6f:3f:4e:d1:41:a9:a0:5c:08:f8:74:e5:cd:8b:1b:
7c:4a:b1:b0:2a:59:cf:c3:30:13:8f:1a:be:b7:8e:d2:fe:9f:
de:8d:11:3c:78:f8:e3:97:de:18:65:05:da:a2:0f:a7:b6:1d:
89:9b:0a:d4:9c:e1:f1:27:ef:93:3a:38:61:41:4c:7d:7d:57:
38:fa:86:24:c3:63:6a:9b:28:e0:46:bf:33:cf:20:bd:ee:2d:
52:bd:6c:22:f8:ce:4b:63:2c:92:3e:ba:8d:18:c9:8d:ff:a9:
91:9d:d9:bc:ca:ee:e5:fc:89:85:70:73:54:8b:c7:56:3c:f7:
22:3d:cb:df:a6:32:21:83:67:47:2c:8f:a2:91:3c:95:7e:46:
ab:75:51:79:e2:52:7b:8c:4d:fa:81:06:9e:56:7a:43:e3:4f:
64:42:d8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:29:22 2025 by rpki-client