Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
File: s2dOgi84dtJ96u1fZtvpwaQi6xY.mft (raw, json)
Hash identifier: UY2yzmy4Wof9wrJeUaVKbqsTqRUGW8BvVAgMYypKIXg=
Subject key identifier: 18:88:A3:DA:F7:FD:59:4C:84:D7:56:93:53:58:6F:64:C4:10:15:DF
Authority key identifier: B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
Certificate issuer: /CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Certificate serial: 019922C3666B81245FD742D1A99682E3D5DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
Manifest number: 0648
Signing time: Sun 07 Sep 2025 06:00:55 +0000
Manifest this update: Sun 07 Sep 2025 06:00:55 +0000
Manifest next update: Mon 08 Sep 2025 06:00:55 +0000
Files and hashes: 1: 9pPz27JGQLU2k4Cv19ksHTIF6XA.roa (hash: UiF2JHV9wR4fk8UlKATn/RRbasL4AJJse9aZNGFTtIM=)
2: PHlmZzsVHNdtkbgZZGVIzuxsSOI.roa (hash: nURq80w5QR4Tg4i37nqE1f7UXJnobOs0QVmX70MkIAU=)
3: s2dOgi84dtJ96u1fZtvpwaQi6xY.crl (hash: XHd39quKN4UkOIlZ16h/hjSmYlNGXeBZonnEh/SycEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:66:6b:81:24:5f:d7:42:d1:a9:96:82:e3:d5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Validity
Not Before: Sep 7 06:00:55 2025 GMT
Not After : Sep 8 06:00:55 2025 GMT
Subject: CN=1888a3daf7fd594c84d7569353586f64c41015df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:12:a6:e2:55:00:ab:0a:f2:cc:57:7a:ec:84:
8c:dd:27:a1:1b:44:57:37:a0:be:47:f5:0f:fc:de:
61:66:9e:80:22:77:61:b4:ef:7c:ed:ef:4a:4c:fd:
6c:ae:86:8a:e5:6d:ef:37:2c:98:ba:b3:71:00:2b:
fb:a2:4c:1a:18:a7:1e:de:cc:73:a4:4f:d8:cd:c4:
be:46:49:d5:ae:ba:bc:59:cb:d0:e5:94:a4:95:d1:
4c:86:55:3f:ab:24:ee:28:7f:4c:f2:59:e5:ac:ff:
5e:8b:13:f8:8e:eb:c8:ab:d3:1b:96:f3:31:f3:62:
6b:c8:6b:af:25:f9:98:8d:78:6b:c4:c8:6c:a8:af:
75:52:d3:32:4c:7d:b4:91:73:65:c8:15:45:40:1a:
43:84:02:c5:9d:de:41:3e:a1:cc:72:2c:24:f1:7b:
00:35:e2:e4:48:ed:9c:c7:40:17:5b:8f:b0:49:b6:
c7:b7:4f:c3:5c:7b:6f:c3:b5:19:05:f3:f6:10:66:
6f:ed:67:35:9e:1e:98:5e:85:53:48:05:e8:2b:d5:
94:7b:21:d2:fc:9b:10:c0:b2:91:f6:00:b5:52:29:
86:dc:d7:5b:78:7f:a3:f5:80:fc:74:91:8a:f0:38:
8b:32:e8:06:10:e1:50:66:5d:1f:94:e5:20:4d:bd:
a5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:88:A3:DA:F7:FD:59:4C:84:D7:56:93:53:58:6F:64:C4:10:15:DF
X509v3 Authority Key Identifier:
keyid:B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:66:9c:85:99:6e:9e:53:d7:7f:ed:0f:ba:86:60:52:ca:f5:
14:d4:ce:be:6d:cc:08:c8:f9:ee:74:da:8d:8f:34:dc:3d:b2:
0d:b2:35:97:db:9d:18:74:a4:14:0c:13:0f:14:f3:39:78:6f:
7f:29:f4:75:c2:62:d5:92:74:e8:25:56:a0:a1:aa:de:5a:1c:
3f:10:be:21:93:5f:ee:3f:ec:78:44:ea:7d:0f:66:71:f0:24:
86:7c:33:dc:b0:e9:86:b1:9d:6e:d3:19:18:64:1d:c3:4f:04:
f0:d0:d2:20:70:66:71:22:11:64:12:3d:93:29:f1:68:6b:84:
d4:84:fb:5e:e4:79:a8:b8:10:6d:98:df:16:4f:e1:a1:8e:42:
de:18:02:f6:0c:fa:42:03:e4:91:21:9b:08:19:0a:7e:51:09:
d5:31:c1:4d:67:ab:e8:df:68:ec:f4:dd:16:eb:4e:f9:95:0a:
1c:31:4d:3c:b9:b3:3a:88:74:7e:2e:02:cc:ed:bc:0b:63:69:
de:1a:a6:b5:1d:a4:37:d1:0f:87:42:4f:9b:b7:67:67:6e:d3:
c9:06:e4:82:a2:73:59:ad:16:16:b0:18:66:29:42:6a:58:b0:
a2:ca:c2:e6:28:c8:b9:6c:d1:48:42:7d:5b:69:53:5e:95:ad:
2a:11:5b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:11:04 2025 by rpki-client