Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
File: 234XcKOATHS58Sy5tvpwOW3pMp8.mft (raw, json)
Hash identifier: GZM2LL59sWW2e/QYBHLlExCctLNuiIVzXHQL1uduiWU=
Subject key identifier: 79:E4:27:70:55:42:29:1E:13:65:DF:FF:AC:DB:91:D0:D2:78:BF:63
Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
Certificate issuer: /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Certificate serial: 0198D47330515FE84C4923ECBEE804A99280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
Manifest number: 03AA
Signing time: Sat 23 Aug 2025 01:02:55 +0000
Manifest this update: Sat 23 Aug 2025 01:02:55 +0000
Manifest next update: Sun 24 Aug 2025 01:02:55 +0000
Files and hashes: 1: 234XcKOATHS58Sy5tvpwOW3pMp8.crl (hash: C2qEfaYXB/tAb0O5D3fzDPfESVTDlyt0KGdtO6hAh+E=)
2: TfZHjmYknRwU6ErUe_wYUlK2dPk.roa (hash: c7WP6wJfnnCXs2t+4y61hzS0o/WHpIcUL2rUoYBlMZ4=)
3: UQg1PMXj1_xA8cNWapDDicWf9QE.roa (hash: SNk8uKYXIWMnimS9vpTvdTlC1q8gr9Fg7CLCU0N94ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:30:51:5f:e8:4c:49:23:ec:be:e8:04:a9:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Validity
Not Before: Aug 23 01:02:55 2025 GMT
Not After : Aug 24 01:02:55 2025 GMT
Subject: CN=79e427705542291e1365dfffacdb91d0d278bf63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d3:56:6e:9c:00:6b:91:e9:6f:c9:21:b1:6e:
02:f6:75:c6:8d:7d:d6:b3:47:19:60:9f:9f:f5:f9:
24:7e:74:c9:be:ae:a3:05:cd:21:4b:68:f4:41:18:
c8:31:a7:33:f0:2e:af:60:d4:13:b2:72:2d:81:d4:
d4:40:60:e1:b6:33:a2:50:e8:42:8e:40:b9:79:b3:
c8:e0:60:03:1c:b5:a2:87:5a:5b:95:37:f8:12:2d:
78:fe:43:f8:49:78:35:de:7e:26:bd:b8:25:4c:3f:
06:68:f8:c4:58:4a:e0:41:ed:fb:9c:3d:7c:74:55:
b2:c0:4f:c2:e3:c9:bb:e4:05:77:b2:29:fb:8d:58:
95:a8:f0:25:aa:31:75:aa:50:12:c2:92:15:80:b4:
e6:aa:58:71:9d:95:35:60:66:6b:da:3c:8b:4b:d6:
2e:5a:6b:b8:ae:57:2c:42:e3:2e:18:1f:14:78:fd:
63:02:22:93:d6:00:d8:d2:92:c3:9b:d5:34:b3:89:
13:b7:59:fe:46:2b:14:2e:a9:10:fc:a0:0b:ef:80:
fd:86:c3:eb:63:64:b5:e1:c3:fb:68:b9:67:b3:ab:
53:3d:9d:3b:7b:d2:55:87:7f:1d:3f:ce:a7:32:e7:
d8:a8:37:2a:fb:eb:a4:b7:17:ef:26:ee:78:04:80:
54:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E4:27:70:55:42:29:1E:13:65:DF:FF:AC:DB:91:D0:D2:78:BF:63
X509v3 Authority Key Identifier:
keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a9:25:b2:7d:48:44:67:f2:51:3e:6a:c8:76:3e:a8:fa:fe:
3a:ea:9f:1a:90:72:b1:2d:49:bd:79:f7:15:7a:fe:b1:9d:f7:
c3:24:94:5d:c6:bb:e3:0e:36:9f:11:36:1f:2d:e0:73:03:d5:
9b:08:cf:69:70:87:5a:ad:90:b0:f1:58:46:54:5d:a3:9d:40:
7f:19:ab:99:53:8d:23:c0:5e:48:2d:da:77:92:ac:a5:de:b6:
c1:9a:3e:1c:e0:1a:58:09:b3:0d:c5:67:47:db:06:cb:3e:00:
b1:04:11:47:ba:39:c7:22:ef:72:36:62:7d:c2:3c:11:4e:54:
72:06:90:e9:91:dc:1d:8e:86:c9:be:ba:8e:90:ca:84:60:04:
2b:b5:f6:2c:7a:c1:47:76:ee:06:97:82:6b:4f:a3:ad:94:e5:
40:26:de:55:cc:f5:b0:cc:9b:b6:33:77:34:98:b4:74:b9:28:
50:f3:32:e6:a5:e1:4d:db:fb:59:7f:d1:df:9a:1f:77:f6:74:
c2:02:95:a4:46:8a:df:d0:7c:e4:9b:a1:dd:95:41:7c:60:3a:
db:b7:51:12:5b:a3:47:f8:f1:1a:07:0d:47:c6:4c:95:d9:0c:
da:ab:8a:e0:d8:f4:bb:39:c6:45:90:b4:16:24:ef:ce:eb:fa:
cb:c0:d5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:44 2025 by rpki-client