Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
File: sDHiyoJMqNVWJAanAhrjwToUJdg.mft (raw, json)
Hash identifier: fENbwoJjMxJY7/p2HqRYNti7XCHjyYQw3ETGStv9KQI=
Subject key identifier: F1:BF:0D:57:BA:BE:B4:8E:95:E2:E7:2D:00:E6:7D:BF:51:AB:37:5C
Authority key identifier: B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
Certificate issuer: /CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Certificate serial: 01992C34EF06F6E3516C339523C19E9355D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
Manifest number: 1674
Signing time: Tue 09 Sep 2025 02:01:30 +0000
Manifest this update: Tue 09 Sep 2025 02:01:30 +0000
Manifest next update: Wed 10 Sep 2025 02:01:30 +0000
Files and hashes: 1: 81hKxEsM-ATIhZx0nVrrb8xV2ZM.roa (hash: WpRdHBqETycwQ96u5D62eZXgBmAeqYPLVw7BxsplSoc=)
2: YJ0hIC0g4jRwPT2ffsWDri3U1BY.roa (hash: aRSOvWay4BgtDjCfPmINM1fcXP7qlHTJkbgxSvqFhJc=)
3: sDHiyoJMqNVWJAanAhrjwToUJdg.crl (hash: vgz/2424323HcGs/rOYwV6fPVlJ2md0TjRI+UWQcgSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:34:ef:06:f6:e3:51:6c:33:95:23:c1:9e:93:55:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Validity
Not Before: Sep 9 02:01:30 2025 GMT
Not After : Sep 10 02:01:30 2025 GMT
Subject: CN=f1bf0d57babeb48e95e2e72d00e67dbf51ab375c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:a1:f0:f8:23:e5:ec:72:f7:6e:68:3b:69:
40:2c:a6:7d:2d:a9:1f:5a:ec:79:aa:bd:03:c9:62:
ec:ae:12:7d:2b:69:f1:97:f0:c5:ce:77:77:bb:17:
f3:ec:79:a5:8b:e1:99:44:96:bf:77:ae:cf:2d:eb:
1c:7e:fe:c7:19:24:b8:49:41:36:b7:9a:63:4e:b3:
04:72:9b:16:89:98:ca:6f:e6:1b:86:72:6f:5a:39:
de:2e:e9:79:cf:c8:df:81:9c:28:e8:0b:da:3a:6a:
db:12:f1:cf:79:72:6a:74:42:ea:58:f6:9e:35:86:
52:61:19:cb:f6:57:15:2f:5e:73:6d:6a:12:98:d6:
c6:ec:1c:e9:07:3f:ab:71:fc:51:c6:c7:9a:b4:80:
b8:e0:6b:c7:f3:09:44:dc:52:48:29:b4:f7:7c:13:
2e:99:12:24:1b:69:cb:7a:7f:2d:b6:04:31:44:02:
bf:e3:79:b2:60:50:88:c2:37:94:15:8c:19:10:6c:
ea:52:27:0e:5a:c8:1d:43:b4:da:90:c4:79:dc:df:
c5:6c:17:b5:65:31:0a:8d:4f:bb:c2:ac:b5:f1:51:
ad:94:bf:88:c2:e6:7f:3b:68:15:bf:1e:58:92:f9:
4d:5c:3b:e3:50:e4:d5:29:d7:cc:34:76:ff:f9:d4:
36:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BF:0D:57:BA:BE:B4:8E:95:E2:E7:2D:00:E6:7D:BF:51:AB:37:5C
X509v3 Authority Key Identifier:
keyid:B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:da:b7:2f:26:63:10:2d:ed:84:f3:3a:61:12:c4:f4:a1:9e:
01:fa:3a:79:77:65:7f:d5:69:2c:97:bb:b0:34:c7:ec:16:1d:
9c:21:8c:a9:ab:eb:52:2a:3d:d7:f8:0f:1d:d0:b6:6f:f6:91:
41:7c:df:de:e3:97:fa:e3:f5:fc:6d:6d:65:cc:fa:e5:c7:1a:
eb:9b:3a:61:8b:ac:04:82:e9:b3:29:a5:94:9f:82:65:fc:42:
08:7c:47:bc:45:ce:16:6d:79:a7:ee:e7:4c:93:6d:27:f5:3f:
41:6e:8c:61:70:86:8c:44:e8:70:6d:61:23:f9:60:78:d7:37:
19:67:41:e1:5c:a5:0b:25:94:02:2c:ea:55:9c:59:89:42:ad:
a1:e2:69:fe:27:a9:75:46:d7:fd:f6:9d:5d:bd:8e:5b:14:0b:
21:6f:62:e2:0c:59:f8:35:0d:af:31:58:0d:96:fc:07:48:09:
cb:d0:a2:66:9b:15:e0:2a:e9:eb:15:62:a6:8f:e5:91:50:87:
ad:cf:ec:2f:ec:51:de:ee:d5:bd:3d:96:e1:da:bd:a7:a3:8c:
65:21:cf:1f:3b:ff:58:77:d2:bb:8f:bb:64:28:11:d4:44:9f:
6b:6b:f7:f1:d7:88:43:18:0c:51:91:02:6c:61:b1:77:f1:13:
3f:65:60:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 04:09:12 2025 by rpki-client