Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
File: sIRyULOncSfffDx7je-MnZGdxLk.mft (raw, json)
Hash identifier: fAOdpxYONNiml/f3jkmy5nzNc8zA6zwgXbgEzAIpsBI=
Subject key identifier: 57:FC:D7:A6:3B:8A:02:40:6C:E8:EF:26:93:66:AB:98:C2:E3:A6:66
Authority key identifier: B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
Certificate issuer: /CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Certificate serial: 0198D583E36AC8DCC2743EA0407AC9408A54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
Manifest number: 08AD
Signing time: Sat 23 Aug 2025 06:00:46 +0000
Manifest this update: Sat 23 Aug 2025 06:00:46 +0000
Manifest next update: Sun 24 Aug 2025 06:00:46 +0000
Files and hashes: 1: BEVOt5Hu7SlSOUV5TBn_pg8-Bq4.roa (hash: nEzdIf15rxzhFQC8rcsKrtOrx8pALRaykpAEEi2uLpo=)
2: sIRyULOncSfffDx7je-MnZGdxLk.crl (hash: ZC9kjINXwOW3WS8czeAtNquYr1cPyxV94KodDmeah80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e3:6a:c8:dc:c2:74:3e:a0:40:7a:c9:40:8a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Validity
Not Before: Aug 23 06:00:46 2025 GMT
Not After : Aug 24 06:00:46 2025 GMT
Subject: CN=57fcd7a63b8a02406ce8ef269366ab98c2e3a666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:25:71:fd:db:3b:5f:e6:17:b2:37:e5:c5:
37:f7:b6:29:1e:66:24:a8:42:7b:7f:11:f6:0e:06:
99:9a:48:85:10:7b:5d:36:d6:05:e6:28:44:81:e0:
82:6e:cc:42:66:51:2e:48:a6:e4:cb:15:6e:c8:a3:
d6:bf:58:2f:bc:02:99:30:23:35:80:dc:02:93:7c:
85:ea:2b:fb:de:2b:ff:e3:16:2c:a5:cb:eb:56:bd:
ea:e2:a1:fd:af:a8:94:9a:0f:a3:11:4d:4f:04:40:
67:b2:7f:18:fc:76:aa:82:b4:8b:95:be:c0:b3:8e:
57:04:a5:ca:af:fe:c5:90:d3:42:73:dd:4b:0e:34:
1b:56:f3:0d:31:7f:8a:b0:2a:46:95:b6:af:07:a7:
28:89:35:e3:e2:47:a0:dc:de:92:3f:df:33:03:a1:
25:66:4b:80:bb:79:1c:9a:26:32:94:f1:a4:66:eb:
2c:95:c5:da:3c:c1:63:97:ee:c0:bd:8c:66:e2:df:
c3:73:31:26:0c:e9:be:9c:88:f3:2c:18:0b:9a:e6:
01:4b:e7:42:d1:8b:ab:a6:ad:a0:34:de:55:92:55:
1a:47:ac:e0:5d:99:0e:53:8c:27:19:99:40:f5:33:
6d:8b:81:27:bb:8d:36:02:43:9e:aa:ed:5a:71:e1:
d1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FC:D7:A6:3B:8A:02:40:6C:E8:EF:26:93:66:AB:98:C2:E3:A6:66
X509v3 Authority Key Identifier:
keyid:B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2c:81:19:40:7f:3a:c9:98:e4:96:bb:5c:28:67:5f:2c:ab:
b7:c6:dd:e4:13:a5:3c:fc:57:86:ce:d0:cd:db:c7:4c:9d:c6:
50:5b:b7:fc:6b:24:d6:05:23:29:09:e3:ea:30:18:17:29:43:
79:5b:27:b0:87:52:db:c6:26:f8:66:4b:c2:1c:c3:a3:3a:a4:
c9:69:d5:33:c4:2f:c9:4f:bb:85:7b:a7:14:39:9e:56:9b:e1:
52:20:90:10:c6:3d:dc:4c:81:e8:57:1e:59:68:ec:4a:7d:f6:
61:47:62:71:a1:c7:9b:f9:78:2d:5b:e2:aa:03:98:4b:9c:25:
07:93:61:c4:44:5b:9f:91:a1:bc:74:0e:05:60:a5:be:d3:cf:
08:3d:b7:30:ce:95:31:c8:67:5d:59:0a:2c:54:59:96:cb:00:
2c:22:1e:ad:68:24:33:56:6f:e7:39:93:00:03:31:10:20:4b:
4a:b5:59:1b:9f:99:4d:3b:d2:d6:2c:c2:f5:1c:72:14:c7:b3:
7f:24:cf:a9:8b:0f:95:52:3d:99:32:e6:27:74:51:48:59:16:
ad:e1:20:c6:54:d0:7f:95:0a:a6:e4:aa:f6:7c:1c:54:a0:43:
c2:fa:bd:20:78:79:fa:eb:8b:93:07:ce:81:67:1d:07:81:27:
65:41:cf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:16:50 2025 by rpki-client