Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
File: roP3h5wsdKEWUrXgivZKrJCACwQ.mft (raw, json)
Hash identifier: dNH9+RRZtxXaBlUTgSvmfOXGpFvTmhnh3I/udDs1q+I=
Subject key identifier: 3E:AE:22:AF:7C:5E:74:E1:9C:D1:3E:A9:0F:42:41:8D:A7:67:37:56
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Certificate issuer: /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial: 01984BC15A23711D234EB9D22E1CDE42A343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 12:00:19 +0000
Manifest this update: Sun 27 Jul 2025 12:00:19 +0000
Manifest next update: Mon 28 Jul 2025 12:00:19 +0000
Files and hashes: 1: MybCmB4b1BFDPTACJ5YE-7C3a3E.roa (hash: wDv5owiZFkNYSTe+2a532nAjJGNE7mvoA0ctW2ktRc0=)
2: roP3h5wsdKEWUrXgivZKrJCACwQ.crl (hash: 7bJMY5TDPYm7QDjgW6eSmgKeEojZegV8gSFnqTZGMUo=)
3: s4BqNapwmXilT71OYAf_1FRui4w.roa (hash: kbEYYaNpnssAu6Bf0kAHSemqVpHFQtEnzKXJ44cMHxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:5a:23:71:1d:23:4e:b9:d2:2e:1c:de:42:a3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Validity
Not Before: Jul 27 12:00:19 2025 GMT
Not After : Jul 28 12:00:19 2025 GMT
Subject: CN=3eae22af7c5e74e19cd13ea90f42418da7673756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:90:a1:81:18:6f:b4:fd:1e:90:27:b8:ac:9a:
78:9f:26:74:b3:1d:6f:21:a9:de:34:3d:8e:18:ea:
94:0d:74:71:e1:48:bc:e8:5f:b3:d6:cf:19:4d:b9:
ef:90:9a:7e:e4:5a:88:b2:8b:42:f9:4e:f4:61:b4:
a3:4f:1d:e2:1a:51:15:c0:9b:70:33:f6:c0:5d:08:
4a:86:ad:a5:cf:7d:da:5f:26:d5:12:75:a2:59:7c:
90:8e:03:5a:08:3a:1f:cf:da:7a:49:80:77:e8:7c:
a9:be:1a:a2:d2:67:de:7c:4c:fb:36:93:11:a7:3f:
7b:8b:ad:9a:68:57:ed:86:83:16:bd:fe:29:8c:e9:
91:fe:f6:be:24:b5:e2:ff:ad:03:20:72:b5:b3:29:
e8:75:2f:1e:c1:d0:45:7c:b8:e2:8f:0d:0d:54:5f:
93:97:9a:d0:47:66:8d:68:36:08:80:6c:e7:d8:cd:
aa:57:c8:9f:68:d4:74:a2:bb:ca:ec:04:37:22:fa:
e7:dd:d0:a3:6e:b9:bb:b7:e6:03:dc:83:3a:f8:fe:
66:98:c5:4c:89:21:7d:df:3c:14:48:d1:6f:60:4f:
f2:a7:71:b5:29:77:65:0c:ad:98:0c:ba:48:50:1f:
b4:a7:c0:15:c8:a3:af:b4:38:54:51:2d:3f:3a:57:
8d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AE:22:AF:7C:5E:74:E1:9C:D1:3E:A9:0F:42:41:8D:A7:67:37:56
X509v3 Authority Key Identifier:
keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:88:c4:af:47:ab:cb:c6:a1:99:24:c0:ea:5d:a1:63:f2:4f:
7e:ed:8c:c0:91:33:45:91:93:4b:a6:0a:52:da:3a:ab:0a:ff:
96:00:7f:0c:83:66:56:1a:bf:ea:86:c2:ed:2b:77:9d:0e:cd:
cc:a2:31:26:8f:b1:de:0f:66:69:d3:83:df:cf:0d:65:71:16:
7e:49:74:c0:38:5d:15:c5:ca:8b:7f:df:3c:b9:45:1c:08:1f:
ef:e1:95:90:fd:95:bb:cf:58:3c:ae:be:91:67:c0:86:da:b8:
5a:cd:f3:75:4d:ef:34:c6:3e:a4:8c:8d:5b:a8:10:e0:a3:12:
a1:2e:e0:5b:c2:b6:6a:5e:d7:9c:1d:45:43:79:8f:05:07:8c:
91:4b:fe:7e:d0:fd:52:f4:bb:b6:81:78:09:bc:64:bb:ef:d8:
b4:98:cf:f4:a0:b2:4b:f4:74:61:6e:1c:7b:f6:b3:92:bb:f7:
1a:42:5b:32:4a:da:f4:d4:8e:9c:8f:4b:7f:b2:20:c7:ce:15:
6d:3e:61:43:05:d3:de:37:a1:22:af:66:fd:1f:e0:58:a5:87:
bc:76:e4:1d:92:7d:41:f2:2c:18:07:96:64:19:c2:68:e2:6d:
bf:2b:82:46:1d:1d:f6:51:9a:bf:15:ad:6d:61:32:f9:f7:2b:
0b:12:f4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:23:32 2025 by rpki-client