Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
File: sP8nOo_iEgkLoct4xjMfgOeMMCU.mft (raw, json)
Hash identifier: 3oHkiP3GH93PztfGQG/P2ktl5G4OwLpyQuOLNt+pHPQ=
Subject key identifier: BD:F6:6D:A1:E6:E5:F3:45:6D:AE:A7:29:46:57:D4:3F:13:76:03:2F
Authority key identifier: B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25
Certificate issuer: /CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
Certificate serial: 01992367C3F4E2D1B31C1F2CB37F91851D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
Manifest number: 43
Signing time: Sun 07 Sep 2025 09:00:26 +0000
Manifest this update: Sun 07 Sep 2025 09:00:26 +0000
Manifest next update: Mon 08 Sep 2025 09:00:26 +0000
Files and hashes: 1: p4n6DMVXRfxSNvujgZMUtP18wqQ.roa (hash: E3oRG9G+UtQqAk8G6rS3MWGj3sQbFqJ/BYIdf5UtbNU=)
2: sP8nOo_iEgkLoct4xjMfgOeMMCU.crl (hash: MNkkJFs6sZKzl2cOdkuHsw+BKCxHsXk0+2lNu8Kltmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:c3:f4:e2:d1:b3:1c:1f:2c:b3:7f:91:85:1d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
Validity
Not Before: Sep 7 09:00:26 2025 GMT
Not After : Sep 8 09:00:26 2025 GMT
Subject: CN=bdf66da1e6e5f3456daea7294657d43f1376032f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:1e:2d:25:06:fc:4a:29:84:b5:1e:fc:de:
49:3a:3a:6e:52:ad:e7:71:5a:44:28:6d:1a:89:08:
26:1a:40:e9:62:a7:9e:a6:55:95:a3:77:53:96:07:
b7:16:6c:73:4d:06:eb:2a:1f:4c:8e:b6:75:7f:fc:
ad:98:9b:6b:ae:a1:24:5d:74:f5:4e:66:c5:b5:b9:
79:59:62:94:c1:e0:49:cf:02:35:89:49:d5:2d:c2:
67:27:e4:fa:bb:a5:80:30:da:2b:2b:91:56:6c:e6:
5c:dc:96:63:92:c0:9f:a7:e2:3d:11:e8:80:29:e1:
65:f1:39:06:72:4b:c6:d6:c5:32:90:3a:ea:e5:45:
98:94:06:b7:eb:1c:f4:08:f1:95:1c:94:7d:82:7b:
2d:22:b8:e6:de:1d:ea:d6:cb:66:c4:ec:82:0c:3c:
e0:5c:ba:97:3d:21:45:7e:a2:36:b4:09:6b:aa:ba:
2f:55:f7:c2:04:b5:ae:9a:01:72:45:08:21:7c:9d:
d7:34:36:85:a5:3c:2b:ff:a4:dd:01:fe:8b:ee:29:
d4:ef:94:cf:02:52:ab:68:8b:e8:dd:bf:5d:51:ff:
b7:60:93:c5:6a:02:3c:a9:51:5c:d9:75:da:67:24:
60:38:60:ce:c2:91:9c:79:33:00:96:c3:8e:4d:8a:
4a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F6:6D:A1:E6:E5:F3:45:6D:AE:A7:29:46:57:D4:3F:13:76:03:2F
X509v3 Authority Key Identifier:
keyid:B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e3:a3:0c:72:fb:f2:f7:ec:e8:e7:21:a9:fc:9c:e3:f5:e1:
d8:ad:d5:eb:fb:a8:d0:4a:e2:70:1b:d7:03:84:56:6f:d5:ae:
bb:ab:57:18:a4:ab:82:7c:1d:41:a5:6c:8a:d3:fa:82:dd:3d:
96:b2:1c:1d:bd:f8:fb:3c:ac:2c:52:93:3c:2a:f2:b9:c0:c2:
40:b9:e6:2d:99:6a:c2:0e:82:21:61:2b:8e:ea:e1:ef:2b:36:
37:e4:79:a9:47:0a:89:3e:01:70:56:c4:e9:39:f5:6d:15:41:
3d:3b:a4:a9:88:9e:2c:b0:c4:4c:3c:90:64:2c:f8:bf:a0:4d:
b2:90:41:cf:de:d3:08:da:5e:45:f6:98:d1:f8:93:ad:32:85:
e5:19:21:3b:e7:1f:60:81:51:e0:bf:f0:01:4b:8b:f1:1e:9c:
43:12:23:8c:8e:25:67:56:5a:3a:d8:a2:b7:23:16:ad:a4:73:
02:4e:21:b5:51:7d:87:12:64:b5:4c:cc:ef:22:a7:02:70:5f:
d5:57:79:b9:a2:9f:5e:fe:10:06:a1:3b:80:c8:68:73:00:e1:
94:7a:8f:15:33:65:ca:c1:66:e6:88:c6:2a:bd:12:e3:a8:ff:
e8:b6:9f:93:08:07:6e:c0:9d:28:65:7c:26:b0:98:4e:85:d1:
21:3f:f9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:32 2025 by rpki-client