Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
File: rd0qgVBgqn5iGiCUNJdYsgNolvA.mft (raw, json)
Hash identifier: etHuwvQWaQiLgu1wY1HmDOnonNp8e5Ez6ZHFfKykd5c=
Subject key identifier: 89:E9:B8:D4:30:75:15:22:7F:02:A0:CF:2D:FF:EF:E1:89:1E:71:13
Authority key identifier: AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
Certificate issuer: /CN=addd2a815060aa7e621a2094349758b2036896f0
Certificate serial: 0198492E21CECC2EF9554D29C1FB1FF4A80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
Manifest number: 025C
Signing time: Sun 27 Jul 2025 00:00:16 +0000
Manifest this update: Sun 27 Jul 2025 00:00:16 +0000
Manifest next update: Mon 28 Jul 2025 00:00:16 +0000
Files and hashes: 1: 1-B4mnYUsJDtWU5_HUQ7FJC6tCSw.roa (hash: sHcyd6IuGZiLkLEHDVFO8zkeKGMSe2epXGrDt7jtZiY=)
2: kIgDZb1mJNxoy-31G2UkNHRwWx0.roa (hash: zPGGaXstMh703tXkFi/JyzFhGqACNCTHmmN1tjIc6M0=)
3: rd0qgVBgqn5iGiCUNJdYsgNolvA.crl (hash: qmPBSyaSBVIwI7Utm2Tn6+PaoqP5UWTdD2qlGloB8bM=)
4: yDLDs_9-xCJNS7Lq59X6rTIHpaM.roa (hash: mZAephRDHWr1NJfSrOQS8hE88/V7vwaKpzI1ny1rx80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:2e:21:ce:cc:2e:f9:55:4d:29:c1:fb:1f:f4:a8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=addd2a815060aa7e621a2094349758b2036896f0
Validity
Not Before: Jul 27 00:00:16 2025 GMT
Not After : Jul 28 00:00:16 2025 GMT
Subject: CN=89e9b8d4307515227f02a0cf2dffefe1891e7113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:95:7a:28:1a:fd:39:c9:3b:3e:a9:73:da:
62:43:91:45:1e:1f:d5:6e:3c:c7:40:44:48:8c:c5:
36:5c:04:b9:d5:65:aa:ba:92:b0:27:19:3c:58:06:
5e:b6:ea:2d:e8:42:09:33:e6:fc:d6:e8:cc:2a:50:
9e:b8:1a:e8:77:41:c1:2a:c1:bf:df:8d:e5:80:29:
24:39:72:79:b2:33:01:b7:57:d7:e5:82:5b:a9:9f:
14:bd:21:05:0a:bd:9e:68:0a:17:ac:f3:8e:8c:d0:
35:25:18:d5:3b:fb:59:f6:52:ae:ee:b8:01:cd:fb:
03:24:66:1b:3a:66:a5:49:20:c2:b5:c7:4b:9e:32:
bb:b5:73:12:9b:44:a3:bf:67:7a:c2:fb:dc:ce:ea:
77:10:ce:b5:fe:8e:b4:03:2b:f8:94:13:75:ac:0e:
93:4f:ca:1f:c7:61:61:98:49:09:17:fa:89:3a:cd:
7a:cf:71:d1:1f:29:4f:50:f3:cf:af:a6:91:97:12:
72:d4:35:ae:d8:54:0c:cb:dc:66:40:43:08:f0:63:
dc:f6:b0:ec:9e:5c:c0:77:d3:33:65:51:77:ee:2b:
d2:35:aa:63:a2:e4:b5:1f:d3:0f:4e:a4:b8:d2:b8:
75:6c:4f:80:22:be:f0:51:b5:46:cb:d5:a5:a0:65:
4c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E9:B8:D4:30:75:15:22:7F:02:A0:CF:2D:FF:EF:E1:89:1E:71:13
X509v3 Authority Key Identifier:
keyid:AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:01:13:ba:c8:c4:e7:0d:98:07:ec:02:80:20:9c:f1:28:7e:
13:21:cb:f3:f3:c1:c8:cd:62:e5:5f:99:8d:7f:e1:df:b0:b2:
b9:cb:ce:25:ef:0a:48:96:a0:53:2e:e6:90:fd:40:4e:a6:b4:
0f:3b:eb:08:d1:2b:95:e5:ca:bd:1d:a9:e6:dd:ac:21:b3:20:
fa:34:18:1d:4e:68:23:2d:0d:c7:26:9c:a7:5b:8f:e9:9e:c2:
bc:9d:e1:92:d5:bc:ac:54:42:44:b6:62:c7:d8:af:db:18:15:
05:72:37:77:99:0e:c2:c9:ce:ef:48:05:6d:c2:6d:de:8d:54:
eb:f3:6d:f8:c8:48:b6:5f:9f:f6:32:db:6f:23:83:5d:7c:1f:
66:95:0c:00:fc:cb:26:9e:7c:4c:9c:81:86:7d:5b:5f:ff:48:
a7:72:71:fb:4f:fa:52:28:14:74:94:db:78:28:04:3a:53:93:
eb:1a:08:c4:bd:79:92:37:11:de:0e:ba:0a:5c:04:da:c0:b6:
67:e5:19:cc:39:ce:a5:2c:37:00:ad:0f:b1:a5:4d:df:35:f3:
29:b1:16:9d:68:30:53:60:35:15:a7:ed:7e:46:e6:57:d7:7d:
bd:c2:e6:0d:b1:76:b1:53:3d:d4:24:65:34:95:51:8b:00:c1:
3d:64:29:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:24:32 2025 by rpki-client