Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: aeIGDlHEb6jC5YxkyseAOrs+BQ7pFBdszWuKThE/qIg=
Subject key identifier: 84:FB:DD:4F:A4:5E:DB:63:B8:20:8E:25:96:53:1C:5E:0A:FF:7E:F8
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 0198C79273ECC6D60B6D78523E30CDBAAD85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 0E70
Signing time: Wed 20 Aug 2025 13:02:00 +0000
Manifest this update: Wed 20 Aug 2025 13:02:00 +0000
Manifest next update: Thu 21 Aug 2025 13:02:00 +0000
Files and hashes: 1: Fhu6eteSMh-I7iJVqiXmMyG026Q.roa (hash: F9PD+ubtwzitBN7aKci6vGXmXOFiGygMSM+2xXKhmeU=)
2: O79Bxg0BR0VFMQ_a0ZyezMPMz0M.roa (hash: wV2tjiSpv38ZVgcsHYOWBKswr9oGmugpMMubTRaOGF4=)
3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: JZvCpDaIbD6xW+X0CPOq5kjznh1ClbAB5ORCkJQjdm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:92:73:ec:c6:d6:0b:6d:78:52:3e:30:cd:ba:ad:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: Aug 20 13:02:00 2025 GMT
Not After : Aug 21 13:02:00 2025 GMT
Subject: CN=84fbdd4fa45edb63b8208e2596531c5e0aff7ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2b:8c:04:31:4f:29:aa:40:cb:c6:cf:f6:10:
10:4f:8a:89:cf:68:13:9e:b5:61:2b:50:6a:75:60:
6a:d9:20:85:d4:b6:68:0a:bf:9a:ab:82:1f:57:1a:
5b:79:ab:c3:ea:57:03:58:24:a7:49:f3:e3:c5:36:
1e:33:79:17:06:16:eb:75:38:a9:de:13:32:ed:7d:
01:16:07:fa:83:da:f4:f9:94:01:98:08:a9:22:be:
8d:3d:87:47:c7:2c:77:37:9d:49:e8:e6:13:2b:3b:
c7:7d:17:58:f2:ba:a3:7e:7c:5c:08:fe:3c:62:af:
4d:c8:37:33:c2:b7:f0:88:04:fc:21:a8:64:ec:29:
ed:b4:16:a0:5b:27:5a:a5:8e:e3:4d:e6:ba:80:fb:
c0:a0:39:72:3f:c2:be:a1:2b:cf:c2:d0:1b:56:ab:
f6:f2:86:e2:a6:33:34:8f:59:9b:f0:0d:28:9b:db:
1c:55:8c:02:5e:fe:30:d7:58:38:72:28:52:73:d5:
32:8f:72:b5:80:b4:73:ab:c3:78:3a:fa:e7:a7:38:
a5:9d:d6:dd:0c:29:16:20:9d:87:1f:ec:fc:d9:ec:
66:df:81:09:d2:ff:29:57:97:05:57:d0:29:04:8b:
3a:d0:6b:b6:1f:9e:62:7a:c9:e6:15:4d:e8:82:c6:
05:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FB:DD:4F:A4:5E:DB:63:B8:20:8E:25:96:53:1C:5E:0A:FF:7E:F8
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d9:de:f9:e5:93:5c:f4:45:16:6b:6d:f7:de:27:30:6d:ce:
ba:2e:ac:77:92:f5:20:31:33:20:09:b9:a8:4d:67:f6:09:49:
51:b8:ad:7e:f3:2f:59:54:91:32:5f:3d:0c:62:1a:1f:f6:80:
bc:4b:26:75:e7:3a:fe:55:ec:e6:4b:25:9f:8b:81:b3:3f:a6:
8a:bd:a1:79:de:9d:2a:9f:ef:7f:56:75:da:7b:8b:f0:90:d2:
dc:31:b4:56:eb:5c:fb:f9:13:65:aa:89:1a:d9:fe:c1:6a:28:
35:93:04:1a:de:e8:f2:2b:87:ea:ce:92:9b:d0:52:08:47:3e:
b2:2d:97:1a:b4:e3:74:74:74:12:bc:de:08:cb:eb:8a:76:44:
ad:1b:fd:11:22:14:a4:78:22:61:d9:e6:fa:cf:bf:dc:3c:63:
9c:e6:81:db:6a:a2:d8:60:40:32:45:b9:52:7b:6c:b0:e7:dc:
5f:8a:f4:04:e3:37:1f:34:d6:48:89:9c:f0:cf:16:03:0f:53:
50:36:e4:40:cf:8d:51:23:1c:dd:04:d7:a0:d7:8f:1c:ac:91:
52:60:12:c2:84:71:82:81:29:75:eb:15:b4:47:ec:18:7b:e2:
7c:d7:60:d8:a8:2f:a0:c5:7d:9b:57:e9:7c:a4:ec:fc:f7:98:
4b:0e:70:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 16:25:49 2025 by rpki-client