Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
File: ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft (raw, json)
Hash identifier: 58lBKAe4jeuOqLfNH7mfXe3aSABRVjajE+tRyX3a1zA=
Subject key identifier: 3F:D9:83:C0:E0:14:ED:08:37:A5:92:AD:FD:89:5B:43:9A:FF:BC:66
Authority key identifier: AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
Certificate issuer: /CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Certificate serial: 01984C2FE6C81B92DF64E4205AE382AA41FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
Manifest number: 0AFE
Signing time: Sun 27 Jul 2025 14:01:04 +0000
Manifest this update: Sun 27 Jul 2025 14:01:04 +0000
Manifest next update: Mon 28 Jul 2025 14:01:04 +0000
Files and hashes: 1: TK8oRVgmC_iGkqpkIUxL12Jskyo.roa (hash: WWQSgn1wOK2i+o7wtaeqJibMN9Pjr41qBXdRO7I04u0=)
2: Z6cP8UU8ou5UZa2tgmGF-TWXv7o.roa (hash: 4wKWfKiX6etE7Y85veoMkmwG3aEsU0NvUo1kjzyAViY=)
3: kcWTfdAykr4V6or-J5DNrcGjkPY.roa (hash: ogmpuXD/e22gpKD4xD0G9j8Nblm4BJXQE5obj3J5Qcg=)
4: ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl (hash: R9h3FmUaIeTmKlVcKP0Qii8dQE0tLvawCmeAqfbhh0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:e6:c8:1b:92:df:64:e4:20:5a:e3:82:aa:41:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Validity
Not Before: Jul 27 14:01:04 2025 GMT
Not After : Jul 28 14:01:04 2025 GMT
Subject: CN=3fd983c0e014ed0837a592adfd895b439affbc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4d:f1:44:94:80:98:0f:9f:f7:33:54:20:25:
fd:ec:32:6d:02:b0:11:08:13:56:49:d1:b7:21:0b:
dd:f9:2f:cc:d3:0d:8b:24:82:6a:ac:b9:3a:cc:74:
53:6c:1a:f5:16:bc:52:17:a2:3a:2b:ec:b7:ad:f5:
1b:4d:18:6e:b6:d0:ea:de:13:40:82:74:ec:7f:34:
b1:e8:e6:40:b8:c3:2f:fc:36:4b:9c:a6:53:43:79:
6e:86:1e:a1:aa:19:18:ae:71:51:fe:ec:8f:df:54:
ee:df:8f:16:e7:5f:c9:de:89:11:d1:73:7a:28:40:
1a:31:b0:3d:7d:08:9d:30:75:15:ce:71:8a:14:a1:
d6:67:06:e1:1c:ab:1b:93:06:2a:4d:b5:d4:18:29:
f2:c7:89:99:72:bc:e3:21:6d:62:43:06:02:d2:52:
8d:43:52:10:3e:ae:0c:9e:49:1a:16:0b:e1:72:75:
e5:57:15:c5:ba:a4:58:3a:2e:24:02:09:7f:d8:54:
e3:25:47:60:e7:87:6c:fc:23:b4:40:4e:73:73:e9:
de:d1:8f:a7:da:e9:e2:41:3d:d4:a4:b1:0c:d1:d2:
71:a0:9f:ec:97:1e:ab:14:9a:53:82:f1:cc:8e:cc:
6d:d5:e2:db:48:26:ac:bc:39:94:a9:3c:cc:d0:c4:
a8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D9:83:C0:E0:14:ED:08:37:A5:92:AD:FD:89:5B:43:9A:FF:BC:66
X509v3 Authority Key Identifier:
keyid:AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:70:24:99:c4:1e:2b:43:74:0d:3a:15:e7:36:3d:51:44:0c:
0f:1b:1a:cd:2d:69:c0:73:03:18:60:4b:84:b4:e7:67:21:6a:
9f:c4:86:82:9f:82:dc:15:0a:49:c3:86:9d:a7:72:f0:9c:30:
b4:79:60:31:7d:9f:cf:2a:e6:9b:89:62:8d:2f:79:00:d7:99:
67:01:17:de:67:41:13:0a:05:c0:1f:b0:d5:c4:97:ba:05:cc:
d2:00:87:08:b9:56:83:78:73:70:22:ad:30:16:56:dc:17:13:
95:2e:4e:9c:66:bb:96:b0:43:c7:b9:6f:2d:b8:4b:a9:fa:87:
d7:31:f2:42:0b:bd:da:36:b3:13:47:26:ce:63:0e:87:c6:1b:
37:29:20:a5:bb:18:e2:a1:81:0c:68:8d:47:f6:8b:17:90:96:
6c:e9:7c:b9:1c:ff:8f:f7:fe:75:2d:9f:da:ca:1e:50:eb:9e:
38:07:a9:10:60:05:aa:67:56:be:87:ab:d2:49:a3:26:c1:00:
81:2c:a3:16:0a:25:76:08:dd:0d:71:2f:b9:b0:47:2a:cd:57:
79:58:74:94:43:12:94:de:2f:ee:b6:78:19:2e:29:1c:10:25:
a4:d5:78:d6:74:70:76:11:64:9a:40:11:b7:01:5d:21:e7:3b:
5d:83:30:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:30:51 2025 by rpki-client