Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
File: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft (raw, json)
Hash identifier: wfV2blyuPF+C9fQcXZIjvw9d3xi4B5Vtip9oj5hKWY4=
Subject key identifier: 24:A7:06:38:C8:96:19:F6:74:D5:A6:05:4A:03:BE:0E:E5:F1:ED:4D
Authority key identifier: B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17
Certificate issuer: /CN=b004f5869f5675f65f9b10cff4b65f74f76bed17
Certificate serial: 0198D5F18438E844CDF0A74CDD8B45CFDFF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
Manifest number: 0560
Signing time: Sat 23 Aug 2025 08:00:31 +0000
Manifest this update: Sat 23 Aug 2025 08:00:31 +0000
Manifest next update: Sun 24 Aug 2025 08:00:31 +0000
Files and hashes: 1: BxWtid_-E8rZCQpiPweDOTdOKeU.roa (hash: eIpy/irnZIzZ2iTcdnKoq7vKHPC2KdLXiq5W/929yzo=)
2: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl (hash: la32mY3xf8TjNQwM5hbRc81g85mLe+4x0azixZKO5F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:84:38:e8:44:cd:f0:a7:4c:dd:8b:45:cf:df:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b004f5869f5675f65f9b10cff4b65f74f76bed17
Validity
Not Before: Aug 23 08:00:31 2025 GMT
Not After : Aug 24 08:00:31 2025 GMT
Subject: CN=24a70638c89619f674d5a6054a03be0ee5f1ed4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:ea:a6:ac:c2:71:56:c1:07:e9:b9:aa:39:
81:b9:67:ce:d6:c3:36:63:75:58:ff:80:06:44:62:
80:6c:02:a2:6f:43:a0:b9:2c:73:28:6a:f6:f9:54:
a1:bc:cc:0a:20:98:82:8f:da:97:4d:23:31:4b:bd:
06:41:c2:b9:63:4e:c4:dd:3b:cf:ad:58:1d:03:7d:
df:91:b4:cb:23:3f:11:a7:d8:c2:b2:3f:e7:95:2b:
ee:60:7d:ab:eb:dd:bd:50:9d:ad:78:e2:84:3a:74:
07:40:42:ae:ee:e0:75:95:2a:e0:23:f6:ba:3e:07:
82:2b:4a:03:aa:19:64:89:aa:39:75:dd:ad:f8:ff:
4b:38:6d:d2:91:1a:c6:8a:99:c4:2b:ee:07:68:c0:
c0:6f:e2:fa:6e:fb:ae:9c:3c:bb:da:e2:9c:0b:15:
02:d4:ae:79:d2:a3:88:38:a7:7b:87:36:ba:f8:1b:
bc:90:7f:bb:dd:18:6e:44:93:e1:3d:e0:6e:ac:12:
b7:25:b2:5b:96:cb:82:e8:7f:08:74:d7:cc:a8:c6:
47:d7:80:49:c2:11:a9:dd:61:d1:21:93:7a:14:35:
20:7b:25:3c:36:2a:64:73:1c:33:1b:10:a0:94:7d:
b4:b6:7c:33:32:c3:10:a2:e5:79:dc:52:65:b8:3c:
4c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A7:06:38:C8:96:19:F6:74:D5:A6:05:4A:03:BE:0E:E5:F1:ED:4D
X509v3 Authority Key Identifier:
keyid:B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:3b:d6:ef:15:4b:5b:86:71:8c:8e:60:f8:07:8e:a8:77:7c:
96:76:85:d1:2d:bb:e8:b2:72:8e:7f:90:34:0c:b1:4b:89:23:
9a:94:e3:e6:6d:f4:b6:6b:06:8f:2c:2b:6a:0d:c1:49:d4:be:
fa:91:ed:bf:b2:15:21:d2:87:2f:1a:b9:0a:a3:99:74:0e:88:
08:0c:f0:4e:03:32:fe:09:6f:d8:84:62:b0:f9:8c:02:26:4a:
87:35:7c:79:ac:e9:69:42:43:1c:8b:4c:af:dc:bb:08:7c:05:
64:72:ec:90:fd:7e:73:8a:06:63:ef:aa:a1:ea:ea:fd:5d:2c:
76:1d:80:02:fe:aa:f3:fe:0e:f7:95:04:d6:6e:34:6d:a5:ac:
9f:60:81:66:2e:fe:3b:70:aa:f6:16:06:38:ec:19:e9:8b:4a:
89:08:b8:10:00:68:14:67:8f:84:e2:cd:0d:48:81:6b:eb:4b:
36:d5:52:13:88:a9:eb:71:14:a9:8c:c0:63:94:17:33:d4:8e:
2f:e6:6d:59:5a:4a:92:9d:07:1c:9a:81:b9:f1:ff:24:77:f7:
91:1a:26:63:45:75:80:6c:7c:f2:30:29:b5:4a:81:b6:d1:7c:
81:a8:bd:ee:79:ae:95:3e:84:ba:db:f7:79:00:69:e6:e1:46:
bc:74:3f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:52:16 2025 by rpki-client