Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
File: rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft (raw, json)
Hash identifier: z8DVqC2Wmn9BCYwVNs5C+kqb5RTt4ew49wuSy6GsI/g=
Subject key identifier: 66:1B:D9:56:44:6B:6C:68:74:DE:11:4A:58:39:95:CB:8D:18:02:22
Authority key identifier: AD:39:3C:63:F1:78:65:78:21:A2:37:BA:02:6C:A5:27:92:33:33:3D
Certificate issuer: /CN=ad393c63f178657821a237ba026ca5279233333d
Certificate serial: 0198499C56D7B0664264D4B809CEF36A4BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
Manifest number: 0E75
Signing time: Sun 27 Jul 2025 02:00:39 +0000
Manifest this update: Sun 27 Jul 2025 02:00:39 +0000
Manifest next update: Mon 28 Jul 2025 02:00:39 +0000
Files and hashes: 1: NRGRL-46NCSPaGi9AZCwzE3w5nE.roa (hash: u0L8t2q2EBStWXwxFZXL40Y75wNx2nDlIz7mo+UHSk8=)
2: rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl (hash: zQpG1l09sLYxndEn3+vSmIHwqkMRii18FUSpxxrHMoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:56:d7:b0:66:42:64:d4:b8:09:ce:f3:6a:4b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad393c63f178657821a237ba026ca5279233333d
Validity
Not Before: Jul 27 02:00:39 2025 GMT
Not After : Jul 28 02:00:39 2025 GMT
Subject: CN=661bd956446b6c6874de114a583995cb8d180222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:32:93:14:03:1c:81:29:ba:fe:78:3e:6c:
31:f4:a4:6a:08:be:8e:08:1e:8d:7a:84:4d:52:8b:
2d:98:2f:1c:f0:b5:a4:d2:77:ef:3b:a3:bb:f1:80:
9e:9f:cd:19:f6:43:27:b6:17:51:17:de:99:e5:08:
96:05:bf:16:93:6b:04:42:fe:65:b6:bb:fa:48:54:
2d:17:fd:48:dc:cc:cb:33:d1:f0:b6:de:f3:2f:56:
ea:6c:f5:1d:4c:48:24:48:ce:41:cb:8a:18:6a:5b:
79:82:ba:10:3d:cf:1a:80:68:22:92:23:ac:76:55:
79:11:af:4f:40:dc:41:1b:ec:af:c9:54:3b:e3:f0:
63:b6:4e:7b:00:b4:b8:d8:03:b0:7e:66:26:1f:4e:
70:d6:02:a0:6a:7b:98:40:69:53:fc:6d:d0:93:96:
7d:98:9d:ed:04:ae:1d:52:1b:7b:00:e8:f0:8c:18:
20:cd:28:f3:0a:7d:b5:e6:9e:2d:bc:eb:a8:cb:19:
1e:29:7a:18:ed:33:8f:01:b0:81:70:9a:64:7a:85:
33:2b:51:43:24:f2:c7:ad:a1:71:fd:c1:f7:cf:20:
ce:48:3e:66:1b:a2:d3:73:83:27:aa:59:a3:eb:bc:
36:b7:26:0b:5b:af:51:22:e5:0e:5a:f4:71:24:53:
ba:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1B:D9:56:44:6B:6C:68:74:DE:11:4A:58:39:95:CB:8D:18:02:22
X509v3 Authority Key Identifier:
keyid:AD:39:3C:63:F1:78:65:78:21:A2:37:BA:02:6C:A5:27:92:33:33:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e5:f9:81:6e:25:9a:04:9f:57:ca:ca:2d:8c:89:ed:2e:34:
79:75:bc:73:d1:81:ca:4d:2a:4f:ed:10:f0:54:b8:25:8f:4f:
6e:d1:60:c1:a8:0f:af:ff:5a:b2:33:a9:de:a2:92:04:1a:80:
cb:7a:c3:f0:74:dc:80:2c:ad:72:0e:80:6c:cf:73:3f:c2:a3:
e2:fc:a0:db:fb:07:5d:bf:84:59:8f:f0:2a:f7:41:0d:02:a9:
c3:33:5e:e6:b4:14:7e:57:9a:12:0d:61:71:24:cd:1a:3c:31:
37:35:9a:81:61:ee:3d:e1:cd:61:50:93:d2:e4:7f:63:22:4f:
16:32:e4:f4:02:8a:8e:2e:7c:e9:ee:2e:5b:d9:60:33:53:74:
d7:d9:e7:bc:fd:21:af:2d:61:78:26:b4:f2:77:45:c1:88:f0:
70:07:38:bc:92:cd:0c:82:9b:11:c1:84:f3:10:82:d0:7f:f5:
23:1d:4b:79:5a:e7:c4:9d:4d:29:ee:2f:fe:66:a9:b2:4f:9e:
54:fd:f3:99:a1:2a:e0:44:54:77:ec:46:70:e3:28:01:fe:fc:
fe:d3:85:d8:64:d0:b1:87:40:a4:4b:c9:3a:2e:b4:ea:a2:d4:
30:31:47:45:51:2d:c6:43:cd:7a:75:f2:8e:0f:ab:06:88:29:
6e:fd:4e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:01:16 2025 by rpki-client