Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
File: roNVKZN0KXkz0oH1HrdLpcLJHME.mft (raw, json)
Hash identifier: 49zPNwc91ADhbVmjxGPffO4IJNwxHJerwEdW0MV5daM=
Subject key identifier: 46:1C:07:74:74:03:28:C9:59:90:98:32:E0:24:F5:8D:AC:D5:BB:73
Authority key identifier: AE:83:55:29:93:74:29:79:33:D2:81:F5:1E:B7:4B:A5:C2:C9:1C:C1
Certificate issuer: /CN=ae8355299374297933d281f51eb74ba5c2c91cc1
Certificate serial: 01984776833E6A1A4BFEC74DF7630198B157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
Manifest number: 1153
Signing time: Sat 26 Jul 2025 16:00:05 +0000
Manifest this update: Sat 26 Jul 2025 16:00:05 +0000
Manifest next update: Sun 27 Jul 2025 16:00:05 +0000
Files and hashes: 1: RaM_OWQwVXsafD9lAhumGxuaVJ0.roa (hash: 9wqEU77JRh8FONfv1sMAYtuNvig1s1ZaVt3dre8RnDg=)
2: roNVKZN0KXkz0oH1HrdLpcLJHME.crl (hash: 763EQU+pot5kjgKYxt4b0CLIlr3VvoGn+Lue/Pn//+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:83:3e:6a:1a:4b:fe:c7:4d:f7:63:01:98:b1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae8355299374297933d281f51eb74ba5c2c91cc1
Validity
Not Before: Jul 26 16:00:05 2025 GMT
Not After : Jul 27 16:00:05 2025 GMT
Subject: CN=461c0774740328c959909832e024f58dacd5bb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:44:5c:fb:35:ae:78:3a:ff:e6:af:d5:3d:af:
d8:46:76:03:c7:a7:98:b0:b4:fa:38:61:29:b5:8a:
e5:5a:1a:ae:eb:5c:9c:23:61:62:c5:d4:57:5b:a1:
4c:ab:40:a9:81:7b:fc:34:7a:2a:d2:05:11:ec:bb:
0f:dc:72:6b:c0:fc:a2:8b:89:63:ac:f1:ee:3d:1d:
64:65:bd:c4:08:db:65:89:44:96:5d:e5:f0:eb:44:
ce:38:8f:7d:b0:32:67:d0:fe:14:2e:ae:84:f8:5e:
dd:4b:f8:46:a6:bb:fa:0e:2e:be:9a:c5:8b:3f:ed:
34:96:00:26:c0:ff:16:b3:e5:24:a1:1a:22:dc:78:
31:b6:ce:af:e4:75:c3:ec:e4:7b:96:95:32:8e:5e:
60:8e:66:5a:a9:f5:a4:b7:7a:e2:63:9e:58:88:e5:
71:53:bb:7c:86:d3:2b:a1:d1:40:5a:eb:0a:c7:29:
20:18:4e:1b:90:44:6a:a7:43:de:25:ed:bb:b2:40:
7e:fb:62:09:35:4e:11:4d:90:38:33:b5:c9:88:82:
5b:f7:de:cd:c4:11:2e:4c:4d:e8:7a:ae:55:09:28:
62:78:df:65:7b:da:1a:b9:3d:72:af:7a:cc:60:7d:
2a:8a:e0:76:3d:68:ae:3c:9b:11:0d:9d:c6:90:d3:
44:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1C:07:74:74:03:28:C9:59:90:98:32:E0:24:F5:8D:AC:D5:BB:73
X509v3 Authority Key Identifier:
keyid:AE:83:55:29:93:74:29:79:33:D2:81:F5:1E:B7:4B:A5:C2:C9:1C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:72:bc:67:cf:1c:e2:9e:39:ca:e8:e3:77:62:47:ba:b4:b4:
f7:25:c7:78:d1:8f:4f:76:5e:e6:b7:ca:85:1b:0b:dd:5b:3a:
05:d6:1f:36:d3:a2:1e:54:b3:94:54:81:98:be:27:8f:ca:19:
ba:37:be:29:b5:5b:a8:16:25:cb:22:af:4a:7f:68:39:5f:44:
3f:a5:63:b7:5d:94:53:16:87:5e:81:35:bf:ac:5e:33:53:46:
63:ca:db:83:d3:b9:1f:43:d6:45:2c:0b:79:41:72:6a:ff:da:
88:7d:11:22:11:ef:20:8a:e6:c5:80:dc:79:17:9a:f0:4e:4b:
d1:6e:8b:14:8e:c1:6b:c8:e7:c4:7f:2b:7c:6b:a2:e2:5d:2e:
ee:80:b5:90:d5:50:20:df:8e:29:a2:6a:f7:9e:99:ca:50:14:
c1:b6:d4:3f:ac:fd:cc:88:ee:a7:ae:05:27:6b:e8:c2:bc:17:
47:07:9c:30:e3:90:1d:8c:ac:cf:15:36:f7:5d:89:5f:7f:b9:
94:72:26:fa:f3:ad:b9:c8:1a:69:ff:c1:c3:49:87:1f:55:d8:
bb:a4:33:02:1a:c5:c7:0f:48:0a:92:59:f4:f9:a6:26:6e:57:
64:b2:37:5b:50:39:3c:7c:c5:bb:ca:81:07:e3:59:ec:e6:89:
4a:13:16:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:06:58 2025 by rpki-client