Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
File: s2DwCXvkgcIbsdUchdRPZXQViqk.mft (raw, json)
Hash identifier: gq/9pay7Y+BTVeU5zeQx0+5pYh7qrfXgiQhS7Y1LAWY=
Subject key identifier: B3:0E:D0:19:D6:46:B3:CA:A1:3F:AF:CC:23:89:AB:E0:C0:3E:5E:8C
Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
Certificate issuer: /CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Certificate serial: 019922FAB97C2FEBE5B7FBD4FD89FEBFA267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
Manifest number: 06E3
Signing time: Sun 07 Sep 2025 07:01:20 +0000
Manifest this update: Sun 07 Sep 2025 07:01:20 +0000
Manifest next update: Mon 08 Sep 2025 07:01:20 +0000
Files and hashes: 1: 0FvyRdwuNrCgMP49Gm05_Jf24wo.roa (hash: VrNtxHJD5r4AAcIekiYzDFEjX0OLNvQVaPqP96ejauo=)
2: XJdcwddEgs-q78gmSagWMovn85I.roa (hash: Je76MM+YNyOi1CdfvkLH4QNZ11rGS/XGNeifQiQFCLA=)
3: eRE1hc1OAUXn9B2yIqa6q1KtEng.roa (hash: 2kkOJHVByX9Ad1TRTPwMrwhabgTLNmB9YR0YC04Cis4=)
4: s2DwCXvkgcIbsdUchdRPZXQViqk.crl (hash: 2tQuk2V2G8KEPvj/5trXSkQcT/glmYgkLy7TA8elh1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:b9:7c:2f:eb:e5:b7:fb:d4:fd:89:fe:bf:a2:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Validity
Not Before: Sep 7 07:01:20 2025 GMT
Not After : Sep 8 07:01:20 2025 GMT
Subject: CN=b30ed019d646b3caa13fafcc2389abe0c03e5e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fd:de:2e:90:30:f4:73:ff:d8:b5:98:9a:ab:
54:54:5d:b3:77:fd:b2:e5:21:5c:e1:48:d9:6e:1a:
44:ab:c6:18:3a:9a:f4:5b:fc:b9:f8:de:65:4b:1b:
8e:60:67:2a:16:85:de:a4:c5:98:60:8a:66:1b:b6:
bb:f2:af:28:84:ff:6c:41:f3:3d:61:34:5b:d6:eb:
b9:71:b2:83:d8:b4:83:e6:97:c8:e7:ba:e3:29:7e:
31:1c:3e:1b:2f:e1:a7:66:fd:b6:2d:d0:88:20:05:
0b:86:15:69:83:82:db:36:bd:f4:8b:06:25:82:6d:
ac:c6:fb:ea:34:41:ae:78:c1:b7:c5:23:d2:22:1d:
47:ae:3e:a1:0d:6c:1b:7c:5d:3b:ff:14:f8:f0:7b:
46:f0:bb:b9:b3:70:a3:83:a3:06:01:d5:0b:41:65:
89:ef:eb:b0:58:49:e5:b2:3d:ce:32:3c:cd:1e:3f:
ea:43:1f:71:1c:64:59:a3:ea:7f:51:11:b4:c9:c7:
b6:d8:bd:58:24:16:40:e1:bd:b5:e2:e6:b7:85:ff:
35:33:61:5f:5e:06:82:4d:09:c4:22:0e:6b:b2:fa:
36:d7:e3:71:41:b4:8d:6b:07:0f:0b:5c:94:61:fc:
d2:29:e6:a6:61:cd:ed:f2:fc:5b:e0:8d:27:e3:19:
f0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0E:D0:19:D6:46:B3:CA:A1:3F:AF:CC:23:89:AB:E0:C0:3E:5E:8C
X509v3 Authority Key Identifier:
keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:65:ec:5e:28:81:5f:b5:8b:f5:f4:25:4b:cf:78:5f:8c:ae:
81:e8:43:bb:cb:39:2a:a3:ef:4a:1d:e1:88:48:54:8a:70:35:
00:3c:68:c7:8d:f0:56:a6:c5:08:8a:c1:37:c2:53:9f:db:02:
06:20:10:50:86:83:41:37:b8:db:97:7e:21:27:11:95:8b:cf:
ce:49:e7:af:76:fb:19:3b:c0:c3:6c:cd:12:f0:74:a7:dd:b6:
f7:a9:c9:60:28:c8:9c:38:f3:8d:44:4a:4c:93:72:e7:3c:e5:
6f:15:6c:54:55:15:34:2e:6f:21:00:23:e3:2b:6c:7d:6e:6e:
5a:36:8e:7a:e8:64:8b:c4:e1:89:b6:67:9f:b4:c5:fd:34:ba:
58:ef:18:3f:99:d8:be:49:29:7e:ca:79:a6:db:75:ee:47:c0:
fa:a4:de:fe:75:96:37:bf:c0:78:29:9d:7d:bd:2c:5d:c3:66:
94:f1:d9:3c:90:39:5c:aa:53:5d:5b:63:83:5c:89:0d:f7:1c:
f5:1b:74:98:75:f7:77:2f:57:2a:d4:ee:39:6c:d4:e7:4b:a7:
1a:26:72:d0:24:14:96:6e:b7:18:41:6e:7d:bd:64:56:85:97:
fc:d2:8d:cb:c3:7d:34:72:c3:1d:7d:da:32:b7:b3:84:23:a7:
15:c2:56:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:37 2025 by rpki-client