Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
File: szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft (raw, json)
Hash identifier: 46rJ3MzXcVr/cqO+Atx2gbtoo6iRurKjcr1N3if2MAg=
Subject key identifier: 2A:22:4A:40:CA:CB:1E:84:64:6D:D3:98:CD:99:8D:E0:77:16:2A:FB
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial: 0198D4A7BF09C76F52E95D0E1D3CC1C47573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 02:00:19 +0000
Manifest this update: Sat 23 Aug 2025 02:00:19 +0000
Manifest next update: Sun 24 Aug 2025 02:00:19 +0000
Files and hashes: 1: LYWNFEM4isLrMZkcPOtofB7wrtQ.roa (hash: 3L7ng+8G15KKO1VpRMLBS9WLq4qDKG/BjuMPbzD+J28=)
2: gPGcyQrRSC47MoDcNvHUCHgMy9I.roa (hash: MmytL0w6XbyXL7UhT0pH40kUdOSvBJ5woyxf0GcUHwU=)
3: szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl (hash: zQ8sMI7BVS08Wn3udvILqr0hxLlnVrmsdT5n+X4Of/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:bf:09:c7:6f:52:e9:5d:0e:1d:3c:c1:c4:75:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Validity
Not Before: Aug 23 02:00:19 2025 GMT
Not After : Aug 24 02:00:19 2025 GMT
Subject: CN=2a224a40cacb1e84646dd398cd998de077162afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ef:31:1a:e9:e2:61:c3:d6:70:ba:f3:ef:e4:
ab:1c:12:eb:0a:cc:41:02:a5:c4:d7:a8:ef:86:b4:
4b:67:22:f5:b7:94:8a:ef:58:8c:50:8d:28:c1:3a:
e7:a8:a4:a5:d7:5a:df:54:9c:b4:35:b0:2f:4b:79:
a2:d4:fa:0b:12:6d:70:29:9f:85:cd:35:c5:e5:88:
26:fc:da:62:20:67:74:36:f9:fc:d5:ec:ef:f5:a6:
06:37:2b:e9:e0:17:ce:2c:48:c4:2d:1d:8b:54:32:
48:f1:cf:93:25:02:80:e6:55:56:d1:fa:ef:2f:ba:
96:db:b8:04:3a:66:46:06:68:cf:41:00:83:8c:e7:
ce:41:1a:06:04:eb:cb:fe:28:38:d6:16:c5:27:0c:
fe:07:cc:fe:95:ad:a9:53:1e:be:b8:ac:9a:2f:c2:
a8:03:7f:3e:2a:3d:54:fc:df:b2:d9:72:fb:cb:47:
cc:f6:af:3e:8f:13:6b:ce:9e:61:83:8b:a4:63:fb:
be:b0:82:53:50:ce:4b:1a:b5:31:01:50:74:f1:82:
c0:1f:17:28:f9:45:3b:21:88:4c:e9:94:eb:a3:24:
80:83:f0:03:45:4b:cb:57:51:1f:f0:cf:6e:0d:c4:
bb:f8:9c:b5:0d:8b:eb:f1:51:0c:c6:8d:7f:2d:56:
76:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:22:4A:40:CA:CB:1E:84:64:6D:D3:98:CD:99:8D:E0:77:16:2A:FB
X509v3 Authority Key Identifier:
keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:86:f3:2e:b4:b2:1c:10:d2:48:29:7f:1b:51:b1:41:ee:b1:
83:21:8b:30:20:de:07:c9:96:0d:45:0c:36:15:8e:0c:94:0d:
f4:81:d1:ee:a5:4b:88:ec:a7:cf:54:d4:ac:17:20:0e:f2:29:
20:97:2a:21:77:48:70:89:30:15:e7:f5:44:4b:25:26:b1:98:
5f:68:2e:eb:52:a1:2d:37:b7:12:1f:09:af:21:ac:a6:cc:ba:
50:9e:50:ae:06:1a:bf:9f:84:50:ac:ed:95:23:2d:58:8b:ad:
f1:0d:c8:24:4d:ad:ea:ac:27:ce:68:02:2b:af:23:34:2b:14:
97:dc:39:a9:b8:d5:92:c0:48:a1:ce:04:56:c0:21:de:80:7b:
cf:92:9c:a1:96:9b:54:6f:af:bf:cc:08:c9:f9:af:66:e9:91:
b5:64:bb:a0:c1:86:5a:b8:3e:73:23:be:4c:26:37:73:78:ec:
f7:2d:fe:e1:1b:4d:a4:5a:37:5f:0c:a6:42:8f:de:ad:bf:91:
38:a5:63:1b:dd:95:89:1c:4b:e5:f8:ef:c8:ac:49:ca:2d:ab:
3a:93:ec:73:1f:e2:4f:5f:56:24:03:27:2b:b5:6d:9d:34:c9:
bc:ac:0e:49:2b:23:c5:0f:6c:f2:32:42:f1:77:d7:a5:78:27:
88:6d:0b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:48 2025 by rpki-client