Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
File: rN3HO1mh_N7iLiWCTUCswnKGqlI.mft (raw, json)
Hash identifier: r6Ruu30abxa5SpfC8W+Y5priWV3xO+QBbI+0dut9c10=
Subject key identifier: AA:A8:64:11:E0:77:C1:70:BC:AB:37:36:02:CB:8A:CE:CF:6F:2A:18
Authority key identifier: AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
Certificate issuer: /CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Certificate serial: 01984965131C791952911875BB611C218CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
Manifest number: 0255
Signing time: Sun 27 Jul 2025 01:00:17 +0000
Manifest this update: Sun 27 Jul 2025 01:00:17 +0000
Manifest next update: Mon 28 Jul 2025 01:00:17 +0000
Files and hashes: 1: oo8iJLtCvQj5tOxPs0jWtfp64Qc.roa (hash: XKlJdTZMxFrgX9Jc6CyAN7uX/wDP3zOgo6gX8cl2wYU=)
2: rN3HO1mh_N7iLiWCTUCswnKGqlI.crl (hash: 3x+qboSte3XkI74aWFAQzqWAW2zPGheeKGK8kBGAfuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:13:1c:79:19:52:91:18:75:bb:61:1c:21:8c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Validity
Not Before: Jul 27 01:00:17 2025 GMT
Not After : Jul 28 01:00:17 2025 GMT
Subject: CN=aaa86411e077c170bcab373602cb8acecf6f2a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:2c:04:16:39:27:1d:30:07:df:65:ca:33:
9e:ad:86:ee:f0:95:c8:64:25:e4:8b:50:c9:ef:8f:
35:56:28:eb:6e:b2:bb:b1:56:9b:18:68:ef:08:7c:
6b:ef:bc:9a:63:2e:59:83:64:8f:b8:30:44:a6:fc:
3f:d9:b1:bb:f1:41:2c:0f:fd:ef:97:7e:db:7e:05:
0b:1b:7c:0a:a6:ae:20:e5:64:ae:eb:33:3e:e0:f8:
de:f9:2f:92:7e:28:de:1e:88:35:f4:62:9d:83:b6:
46:07:86:8b:2e:fa:95:35:0a:d7:25:e1:10:4e:3c:
68:bf:9b:98:c0:90:91:35:b6:f6:c0:4e:b4:75:d8:
55:bb:e1:b2:1e:f6:2c:6b:68:fb:89:c0:26:3d:d1:
0b:65:eb:26:b4:93:eb:d8:6b:7b:db:8a:c3:92:1b:
58:99:1f:30:3c:8d:7f:44:8c:f0:c3:a0:b6:ae:df:
22:57:ff:6e:57:03:1c:8a:70:a7:bc:5b:89:01:65:
bd:47:76:1e:c6:0d:7c:8e:96:91:d0:e0:a1:69:a2:
64:f7:02:8d:25:87:ff:49:db:5a:44:46:f4:0b:db:
45:aa:f8:b2:4f:6f:03:16:cd:93:87:87:a0:cb:bd:
06:51:4c:e6:95:4f:69:eb:3d:35:c7:71:7d:c4:ef:
3c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A8:64:11:E0:77:C1:70:BC:AB:37:36:02:CB:8A:CE:CF:6F:2A:18
X509v3 Authority Key Identifier:
keyid:AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:cb:c6:bd:44:42:6a:0a:b7:7d:91:9c:67:09:f3:1e:35:b1:
03:83:9b:d0:6d:f7:09:25:c8:7d:7c:2f:8b:81:a3:2e:1c:03:
28:69:63:7b:4a:f5:0d:62:7c:eb:a2:8a:82:89:eb:14:7f:3b:
dc:ad:1c:d1:3f:00:f7:24:d5:07:37:69:13:c1:2a:f2:42:1b:
f6:99:3c:eb:9b:f5:38:3a:21:d0:85:43:dd:e2:51:e2:60:35:
72:88:58:71:1b:6e:c4:8b:87:3c:a3:34:7c:ec:88:a4:95:69:
37:67:a3:25:92:c2:82:a7:19:1c:9d:f2:f4:d8:72:c7:47:14:
f9:0e:49:1c:85:c4:6a:16:eb:36:e4:54:f0:9b:4a:1b:32:62:
fd:74:9e:7e:2a:7b:77:69:c5:4b:8a:0e:b6:ce:27:c9:eb:73:
b3:51:db:35:93:03:80:83:6d:60:cf:88:f9:6c:a5:be:3a:06:
62:2e:97:7f:7c:c4:e9:58:5d:ef:f7:0f:06:d7:e5:dc:bc:ff:
e7:39:42:a7:89:1d:2b:37:a6:43:bd:70:0f:9a:af:ea:5d:cf:
2f:9f:ed:c4:52:2a:7e:f6:78:64:b2:b6:73:99:e9:6a:8f:4c:
9d:86:28:81:ff:b8:98:5b:c3:74:fe:fb:92:7a:38:76:7d:97:
b1:60:9a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:57:48 2025 by rpki-client