Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
File: rrdjIcjUae47oCOSCzcszaXeng8.mft (raw, json)
Hash identifier: 3ziCKKos5xdZBEpvbHv+hA3kQnMpKn9Fh7u5ka29e6Y=
Subject key identifier: B9:B3:A0:96:FE:41:0F:68:5B:CB:91:92:D8:27:E8:E8:75:72:E6:73
Authority key identifier: AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
Certificate issuer: /CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Certificate serial: 01984A0A66B9E1EFA6D4695AE811F3EB9C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
Manifest number: 07A5
Signing time: Sun 27 Jul 2025 04:00:52 +0000
Manifest this update: Sun 27 Jul 2025 04:00:52 +0000
Manifest next update: Mon 28 Jul 2025 04:00:52 +0000
Files and hashes: 1: a9ofITqqYa60yp597jFNJiFfkDk.roa (hash: +VNpTQzKJJZj8EZ6senrGu1+xne4/xLouiN0wCmmxbU=)
2: rrdjIcjUae47oCOSCzcszaXeng8.crl (hash: LlcHmR4dIsSx7WT12tMQpY6N3ju+9QsySBz72EX2KyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:66:b9:e1:ef:a6:d4:69:5a:e8:11:f3:eb:9c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Validity
Not Before: Jul 27 04:00:52 2025 GMT
Not After : Jul 28 04:00:52 2025 GMT
Subject: CN=b9b3a096fe410f685bcb9192d827e8e87572e673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:56:19:f8:42:40:93:63:c9:e4:16:ba:92:16:
70:ce:68:f2:de:eb:a8:33:cd:db:96:75:ba:e4:a1:
f5:43:1e:f5:e3:ed:94:3d:de:2f:16:5c:62:22:de:
68:06:40:87:e1:a4:54:27:99:71:20:6a:a6:9d:b4:
1f:71:1f:75:9e:f5:65:2a:06:4c:e2:7c:43:57:d2:
59:4e:6c:dd:18:76:7f:e7:cd:78:ac:59:e1:01:84:
01:7b:54:ef:b9:98:26:c3:1b:a9:78:2d:2c:48:9d:
9f:0f:42:7b:54:52:91:23:5e:a9:08:64:56:b4:5a:
6a:bf:7f:15:e0:af:98:b4:9f:90:ba:59:cf:64:f4:
c8:22:8f:df:67:75:97:60:0d:4c:12:9d:36:8a:a9:
21:c9:00:1f:2e:4c:22:c6:f1:72:79:0e:97:d4:94:
44:52:65:02:0c:5c:57:37:d6:af:61:e3:38:2a:c4:
9f:3e:c3:94:f3:7c:9b:55:23:5e:41:57:75:ac:9f:
fa:26:04:6b:e5:f2:ee:57:f9:fe:78:14:f8:1e:0d:
9b:95:8b:5c:dd:ce:ab:9c:b8:71:59:5c:0c:7d:12:
fc:95:a1:d6:8e:a7:0c:5d:6b:de:50:36:d8:4c:36:
83:38:f2:5a:77:3b:7e:9c:cd:76:9d:5e:3b:be:93:
b1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B3:A0:96:FE:41:0F:68:5B:CB:91:92:D8:27:E8:E8:75:72:E6:73
X509v3 Authority Key Identifier:
keyid:AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8e:31:51:28:6c:59:fe:e7:f3:ff:e3:8f:f3:3f:fd:1c:0d:
c6:77:81:98:18:af:67:b0:e9:25:a6:70:48:4f:f7:48:0c:c8:
b6:ea:cf:46:b9:74:4d:75:09:92:b8:e2:db:7f:0a:a6:86:8b:
4f:40:be:3a:ed:3a:17:de:4e:ee:46:0f:11:96:3c:79:47:67:
bc:1b:69:33:64:9f:60:be:52:35:0e:98:2e:ff:06:7f:8e:37:
0d:73:00:65:d0:8b:68:c6:f2:7f:7f:82:11:d4:37:87:8c:a9:
e6:ae:84:b6:23:40:5c:88:ca:0b:58:e9:c1:3a:30:5f:76:68:
3f:cb:f7:38:0e:30:b3:8a:21:d2:4f:c0:b0:3b:8f:75:29:b4:
40:55:fd:8e:95:6c:7a:9c:ea:bb:9c:b6:2d:a5:e4:40:d8:16:
f6:4a:9e:e7:de:d6:88:da:a7:57:77:58:52:7a:f7:c8:ec:7d:
15:d6:cb:cd:51:93:e1:ea:b8:24:56:eb:b7:5f:b4:44:73:13:
21:a4:ac:df:65:9c:24:08:e6:c8:ca:8a:d7:18:36:46:db:ab:
7e:97:be:18:ae:2c:b8:ae:f8:aa:89:da:5a:dc:71:f3:a7:03:
f6:69:5e:9d:88:10:a7:f3:0f:e9:74:0c:fa:45:27:cb:71:4e:
de:c2:83:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:03:36 2025 by rpki-client