Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
File: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft (raw, json)
Hash identifier: L9m9AgSFJADxo2itTHmUgdyGpVENA/7SNdOFYeEaI2E=
Subject key identifier: 8C:DB:57:B0:B3:81:77:C0:AB:35:0A:7F:2A:C7:F4:5A:C0:AB:BB:83
Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
Certificate issuer: /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Certificate serial: 019937CA8AF38CD5AE2BB6B0B5C24070E2F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
Manifest number: 0AB9
Signing time: Thu 11 Sep 2025 08:00:44 +0000
Manifest this update: Thu 11 Sep 2025 08:00:44 +0000
Manifest next update: Fri 12 Sep 2025 08:00:44 +0000
Files and hashes: 1: IDl9kroYhzoJI3fNYZt14M849Mw.roa (hash: QNB7O1WZxj1n2YGUs6WaUGgoWKZNY20yWJ5q+ijsbDA=)
2: ba5LTz6E_24Z-FWHvFExip3Bfu8.roa (hash: 78/BEK6gt2JG+WEEQwBhHL/YE4AHR9z4L0gDnYa5BSM=)
3: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl (hash: VkMRtXTFQpJ+MhgFl+wLNI2kSYkWf9kh///sVdR+QZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:ca:8a:f3:8c:d5:ae:2b:b6:b0:b5:c2:40:70:e2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Validity
Not Before: Sep 11 08:00:44 2025 GMT
Not After : Sep 12 08:00:44 2025 GMT
Subject: CN=8cdb57b0b38177c0ab350a7f2ac7f45ac0abbb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dd:5b:84:d3:7b:17:38:32:45:5d:ac:7c:0b:
4e:68:42:b4:1f:f2:e4:7e:b6:3c:8b:2a:5d:98:5e:
47:c6:5b:2b:49:0b:7d:17:fa:df:18:f2:1a:e6:88:
89:43:94:01:7a:22:c6:fa:6d:9d:96:e6:83:89:14:
33:8d:c9:84:ff:ee:75:f2:27:b3:bf:78:8f:66:f6:
87:5a:1d:f9:a6:9b:7a:a5:73:e6:e8:49:c2:e9:99:
99:d4:3c:ed:65:c2:e7:da:89:d9:08:5c:15:ac:ad:
c5:65:1e:87:c9:83:4d:d4:15:bb:0a:b8:76:32:40:
92:2f:86:59:b6:1f:f7:94:82:6e:cd:74:2d:1f:91:
82:93:0f:17:d5:49:8d:58:a0:31:a6:57:ce:d9:ef:
40:97:34:0b:f0:db:75:26:84:c6:9c:ff:00:a8:0a:
67:17:1a:86:c7:90:a3:10:d5:6d:2a:5e:85:06:10:
8e:a5:87:61:b4:4d:35:f0:00:d0:38:fe:b2:de:d1:
ad:aa:20:1b:40:f6:ab:19:6c:02:0b:30:cc:78:5c:
66:da:fa:1f:17:00:d9:ac:1d:12:08:cd:cd:b7:ec:
97:fd:2e:9c:86:57:8d:6f:fa:f1:33:7c:0a:c0:aa:
49:29:39:99:ba:4f:a7:b3:5c:af:82:5b:21:f3:07:
a4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DB:57:B0:B3:81:77:C0:AB:35:0A:7F:2A:C7:F4:5A:C0:AB:BB:83
X509v3 Authority Key Identifier:
keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:df:f3:14:31:d6:43:62:39:39:4f:a1:49:84:f9:7f:78:f8:
13:ef:a8:3c:4b:58:ae:9d:61:49:95:62:41:2e:0b:ed:e9:45:
47:c1:fe:f0:7b:e0:38:c1:d8:7d:26:33:db:02:fa:b8:34:dd:
c6:7f:cf:9d:5a:9b:56:e9:45:2d:fc:c9:d3:32:ee:66:57:54:
f8:c4:8b:d6:da:4b:55:b5:5a:d6:03:d5:75:5e:2b:75:e6:27:
39:64:3b:a3:d9:00:5b:19:03:f1:3a:92:04:01:3a:43:ee:d8:
6e:6c:d0:da:3f:65:79:9d:df:00:ea:6b:03:c9:5c:15:99:b5:
39:0b:25:0f:01:f0:e5:bc:8f:c2:fd:80:cc:9c:f1:ff:87:53:
6f:40:c7:57:a3:4b:16:23:ae:cb:5a:27:c9:fe:de:27:03:19:
ad:fb:3c:b6:cf:ff:62:72:de:81:cc:d8:62:62:16:3b:11:04:
4f:9a:66:95:88:f5:f1:f5:2b:a8:17:e3:e0:4b:71:d2:43:15:
6f:24:2e:26:11:d2:58:0d:95:d1:af:51:6d:8c:42:d2:8a:84:
c2:ce:f0:17:d0:dd:ef:0c:b8:91:91:26:85:58:88:c8:2c:7e:
5f:dd:45:ee:3f:ec:f5:8e:77:77:92:02:5d:b0:0c:d9:5b:b7:
f1:bb:26:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:43:08 2025 by rpki-client