Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
File: s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft (raw, json)
Hash identifier: P+B2dFzsLSt/FwPIxaK/HhiOcW+CVx73yK/MsQTXZBk=
Subject key identifier: F4:D8:4C:DE:75:12:B8:CC:02:AD:A2:4C:F9:3C:9F:AC:08:BF:35:86
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial: 01992BC66B9B0E2F47B5A2E561F347CFD96D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
Manifest number: 0DE9
Signing time: Tue 09 Sep 2025 00:00:47 +0000
Manifest this update: Tue 09 Sep 2025 00:00:47 +0000
Manifest next update: Wed 10 Sep 2025 00:00:47 +0000
Files and hashes: 1: 4EkSsDmoQioZqy5Nx3ZgwgNVKek.roa (hash: VGhbj0GwVploD/uygEp/n7MuApEtZ3hQmaUGbybY4XI=)
2: LXrqqPRInqT0YQQrkSiScVOv68s.roa (hash: RhWWbbeT6YQP2eTW6sSumZ2mUd9atkadmzcbsktp9d0=)
3: s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl (hash: unmdl+3AiGDNeaVLUxmJ1ZydCPJ4RmK/WNZbnsriL6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:c6:6b:9b:0e:2f:47:b5:a2:e5:61:f3:47:cf:d9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Validity
Not Before: Sep 9 00:00:47 2025 GMT
Not After : Sep 10 00:00:47 2025 GMT
Subject: CN=f4d84cde7512b8cc02ada24cf93c9fac08bf3586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:14:f8:db:16:32:ae:d5:82:70:18:96:18:
75:d8:f5:38:e8:69:45:16:64:bf:e5:94:57:7b:48:
fd:21:27:31:87:59:6d:ef:6f:bf:6b:7f:26:4f:b1:
fe:79:da:6e:15:26:29:ad:75:3b:ab:a0:3d:05:67:
4e:6f:de:36:81:a0:e0:be:4c:c1:4a:cb:f1:35:95:
34:d8:dd:cb:04:47:a5:9d:62:3c:28:b9:16:1a:76:
f1:45:a4:b3:42:15:0c:fb:d5:7c:6a:44:ad:94:4f:
e5:89:ad:91:3d:e0:48:33:63:9c:bf:89:c8:40:24:
42:b4:1d:64:18:e1:5e:da:5f:5a:96:7f:51:43:5b:
5b:83:b3:c9:9b:a8:1d:b1:13:15:da:e5:d8:80:ad:
8a:a6:d1:42:14:ec:e0:86:c0:b6:88:9b:aa:97:8a:
fe:4d:e0:d6:e4:a6:1c:14:6a:90:58:f0:a5:94:7a:
a9:dd:ff:27:58:af:8e:79:f7:0f:21:04:84:ef:80:
f8:46:50:49:67:5e:c0:24:0a:a7:53:b1:36:95:d1:
1c:6a:3b:09:80:f1:5e:45:93:77:5a:1a:b1:a8:81:
75:46:17:6a:69:2d:c3:43:a9:37:a2:03:3b:85:a2:
dc:18:b0:44:53:48:60:db:45:e9:bf:bf:ec:25:9d:
7d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D8:4C:DE:75:12:B8:CC:02:AD:A2:4C:F9:3C:9F:AC:08:BF:35:86
X509v3 Authority Key Identifier:
keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8b:e7:53:6c:fb:57:48:62:d3:27:06:42:ff:e7:6d:8f:32:
e5:7d:32:a3:1b:13:55:07:2b:ce:02:f9:a8:cd:2d:f2:00:e0:
e3:9d:45:e1:ad:db:a2:34:a4:1f:da:14:fd:bf:0a:23:f0:3c:
a2:77:8e:c5:31:02:c2:3a:81:5e:fa:64:43:4c:3a:bc:8a:d9:
40:a4:40:33:62:e4:91:03:d7:ac:b3:31:a1:62:77:ca:19:54:
e1:97:8b:11:50:4d:34:5a:74:69:fb:3b:01:04:73:5d:c6:94:
0d:d2:f3:7c:a3:ff:3f:3d:f7:4a:e6:66:ab:63:4d:7e:b0:76:
de:32:c5:19:27:8f:b0:72:87:56:29:93:c0:24:a8:d4:4a:32:
00:ee:6d:d5:90:b1:42:90:a4:d0:07:61:92:0b:24:7f:d5:0b:
39:1c:78:21:c9:17:f7:9b:32:0a:d4:5d:fd:86:a7:82:bb:4d:
f8:02:9b:38:1c:41:5b:de:88:4c:ee:82:cc:b3:c2:e3:1c:be:
e5:ae:ad:33:69:0e:b6:32:89:f2:2b:23:3f:18:ae:e0:e6:6d:
a1:3c:ed:45:1c:45:7e:c6:31:c3:f8:d6:51:f2:af:09:af:4a:
9f:02:5f:5b:c1:f4:a8:06:d3:cf:93:ef:6a:fd:22:17:d3:0c:
5f:cf:bc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 03:08:39 2025 by rpki-client