Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
File: adSSvj_PjMWoWckEjFD9QL_bd4c.mft (raw, json)
Hash identifier: /zVbxrcQoZgE8c+Fno6DXLj88wUfHovKLNffAvEofqo=
Subject key identifier: 14:4D:3E:52:D0:92:8E:E6:CD:D4:58:A9:E2:D1:90:0B:8D:F5:68:6E
Authority key identifier: 69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87
Certificate issuer: /CN=69d492be3fcf8cc5a859c9048c50fd40bfdb7787
Certificate serial: 0198D660A27CAE473072664DA6B55A4FF4B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
Manifest number: 033B
Signing time: Sat 23 Aug 2025 10:01:53 +0000
Manifest this update: Sat 23 Aug 2025 10:01:53 +0000
Manifest next update: Sun 24 Aug 2025 10:01:53 +0000
Files and hashes: 1: adSSvj_PjMWoWckEjFD9QL_bd4c.crl (hash: LrkDlSTKg1GbgaeG5Om/zFckh9ldbnINkyGlGnT1s6E=)
2: rvjv-klu4UPy3RgCuDK0uwY_4pQ.roa (hash: VpYiP9YZqNvc2RLGse05pZkEy6ixiDuEG/Kk/ZGHkkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:a2:7c:ae:47:30:72:66:4d:a6:b5:5a:4f:f4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d492be3fcf8cc5a859c9048c50fd40bfdb7787
Validity
Not Before: Aug 23 10:01:53 2025 GMT
Not After : Aug 24 10:01:53 2025 GMT
Subject: CN=144d3e52d0928ee6cdd458a9e2d1900b8df5686e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:bb:0c:ad:d0:12:bf:15:a7:ff:68:45:af:
d9:f1:52:9e:0e:45:9b:26:38:92:cd:a1:a1:82:6f:
4f:7a:6b:e0:c1:f0:a1:c6:ec:a7:af:60:f8:ee:3b:
53:1f:3c:9f:9d:bc:3e:33:74:0b:be:5a:3a:c6:26:
cf:c8:1d:d2:dd:38:f1:92:7a:23:1e:8d:54:18:1c:
6a:a1:b2:fa:90:95:b3:c4:ee:56:28:ef:2d:cb:b2:
ab:34:aa:07:86:91:8e:6e:21:bd:92:2c:a5:c2:03:
2f:68:25:34:46:66:83:94:af:20:24:52:e7:94:ab:
7c:53:40:b2:b5:bd:92:3e:01:0c:e5:f5:05:8b:3f:
8b:11:be:21:06:32:8a:29:84:bb:5e:69:4e:e7:c9:
e7:9a:e5:62:e9:d7:c3:b7:1b:af:72:ce:21:69:ae:
99:a3:dd:eb:cd:e2:e0:1d:73:93:6f:8b:33:53:fe:
7a:bc:52:9d:8d:18:95:d7:5b:50:fd:22:0b:3b:4f:
68:f4:68:98:76:b5:5b:66:be:0e:bb:a8:ff:db:2b:
25:0b:96:69:d4:ba:15:1d:82:44:91:90:e9:41:cf:
4c:a0:7c:d0:1b:8d:06:cb:5f:50:e5:28:9b:70:fc:
95:62:bb:d3:c1:9e:da:c2:54:8e:9a:c5:27:a8:66:
a2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4D:3E:52:D0:92:8E:E6:CD:D4:58:A9:E2:D1:90:0B:8D:F5:68:6E
X509v3 Authority Key Identifier:
keyid:69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ec:6d:2e:d3:21:85:10:48:77:3b:e7:e8:33:c7:2d:ec:61:
79:fc:ee:c8:2a:6e:f8:82:7d:cb:22:38:e4:68:bb:fe:49:fa:
4e:bc:fd:ad:8f:43:03:2a:a4:85:2f:ed:94:5c:21:e3:da:c6:
c1:ce:24:14:58:09:72:b1:cb:99:48:18:0c:b7:42:35:5f:b9:
e6:45:13:32:73:f4:19:53:fb:6c:3e:05:29:9a:7d:98:95:e4:
ae:0a:53:61:31:89:24:30:35:b2:69:27:39:fd:2a:be:1a:ab:
53:27:44:c5:35:b9:40:cf:b5:b7:9f:a4:b1:a5:d2:52:a5:d5:
9a:6d:fc:e6:8d:2f:fa:30:b6:16:a2:67:bb:c7:83:1b:2c:0d:
76:93:f8:74:04:88:a3:6a:c5:33:eb:cf:d1:e2:fc:7e:04:b9:
8c:88:a4:9b:bc:4a:02:14:d3:02:fb:99:28:f0:25:5c:66:79:
eb:a2:7e:45:56:25:1e:a0:cd:d7:d6:4a:77:fc:69:25:e9:fb:
48:c0:aa:02:5b:c8:9d:e7:f2:08:2d:e0:c0:d5:6b:54:30:25:
de:b4:95:17:81:ef:d0:b0:44:aa:48:dd:2f:7f:be:16:b8:94:
e1:2f:6b:4f:f2:44:55:fc:ed:d0:4e:56:fc:cf:2e:fb:3e:af:
7d:a7:4e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:44:31 2025 by rpki-client