Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
File: 40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json)
Hash identifier: B+GrHsaLrQJm/Y3oN21l0jf4k7yZOhV81BT3i2h4Dd4=
Subject key identifier: C6:9E:82:ED:87:B9:4F:70:36:75:37:12:2B:DB:ED:09:C4:6F:B3:62
Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
Certificate issuer: /CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Certificate serial: 0198D705768FAE70AE6E3C31C9DDD362AD64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
Manifest number: 0ED5
Signing time: Sat 23 Aug 2025 13:01:56 +0000
Manifest this update: Sat 23 Aug 2025 13:01:56 +0000
Manifest next update: Sun 24 Aug 2025 13:01:56 +0000
Files and hashes: 1: 13zsYUD0hA67z1BODvjquGKoT_E.roa (hash: MKw8FhdsNVau1tjrdAX7ReUxGObo82luQsljT5owYXc=)
2: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: SAnem6JWAY2j63gsp2Lxu6CETQGt3Dz+rgV/TLLlkgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:76:8f:ae:70:ae:6e:3c:31:c9:dd:d3:62:ad:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Validity
Not Before: Aug 23 13:01:56 2025 GMT
Not After : Aug 24 13:01:56 2025 GMT
Subject: CN=c69e82ed87b94f70367537122bdbed09c46fb362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dd:1e:df:2a:7e:8d:cf:fb:7a:37:d2:d3:70:
3c:41:db:75:cc:46:02:05:10:55:6a:52:6e:db:0b:
1a:62:51:25:c4:fa:8d:f0:ef:7c:b5:5f:df:93:8f:
8e:66:e4:3a:96:5e:04:2e:1c:94:af:f6:bd:7e:bb:
e1:7c:69:3b:4c:32:bb:20:5e:39:8b:52:04:63:64:
3f:04:26:b2:5f:78:97:10:87:eb:96:26:35:d2:c7:
a8:4d:cb:6c:c7:5d:5b:cf:96:a4:24:37:24:dd:2f:
b6:f7:13:3b:a8:0c:70:04:a8:6e:0e:a1:c8:08:b6:
f4:a4:28:7c:0a:bf:c2:36:58:de:f5:80:5d:32:8b:
6b:aa:6d:f2:93:3a:27:b7:41:13:ba:14:51:b8:0a:
b8:d5:43:a5:9b:fd:b8:8d:f5:9b:d5:06:f8:8b:85:
ae:65:c1:9f:c4:19:2d:02:ab:3f:93:c9:8d:f1:92:
74:3f:56:f0:93:51:23:64:19:ed:c7:0f:ca:b5:99:
df:77:d0:3b:94:2a:d0:66:ce:d3:bf:53:88:67:bf:
2f:19:6e:2c:71:87:15:cf:92:bb:ef:12:c3:00:49:
f7:80:27:f3:24:93:ec:4c:af:29:82:96:76:16:d2:
5d:8b:2f:d4:6b:d3:bd:f0:3c:42:d9:4e:cc:25:e7:
92:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9E:82:ED:87:B9:4F:70:36:75:37:12:2B:DB:ED:09:C4:6F:B3:62
X509v3 Authority Key Identifier:
keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e9:11:3c:df:f4:59:20:14:31:c4:81:93:60:e6:34:fe:e3:
d4:35:39:0a:20:be:74:fc:a5:df:ef:0b:eb:86:77:92:6b:08:
28:8c:80:60:ff:02:8b:a2:6f:7d:9c:14:ed:b5:9f:99:c3:96:
86:f7:5f:51:ed:27:c4:ee:1e:1c:bd:cb:f6:16:bb:11:fa:88:
39:77:5e:53:5b:d7:a6:ae:7f:87:27:1c:2f:42:c5:40:bc:c1:
7f:f1:ac:b8:46:00:01:ef:3e:eb:e5:bb:c1:e4:a4:eb:8f:b2:
eb:70:c5:5c:a1:73:3f:7f:94:b4:d1:cc:f2:4a:43:76:13:7c:
01:9b:a6:82:64:c7:40:00:31:78:84:31:2c:8b:f5:38:79:e4:
1c:89:57:26:ab:65:e9:2e:14:0c:93:79:88:58:78:26:76:98:
8d:78:e8:7c:64:b8:f7:b2:3c:99:54:47:41:c5:d4:d0:84:f2:
a0:c4:a1:74:74:44:96:3f:51:41:bd:f8:a1:2c:57:5b:fb:ac:
a3:39:4f:b0:86:ce:5e:c3:cb:cb:cd:12:9e:76:2d:46:42:62:
b8:ca:a9:f1:9c:46:bd:20:78:1f:53:79:82:b0:1e:df:44:32:
01:25:5a:c4:80:25:df:86:37:df:ed:31:f6:24:8f:cd:49:e8:
51:f2:80:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:23:27 2025 by rpki-client