Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
File: rSzfJ9neZesk5c_J0xDkyKAwFGA.mft (raw, json)
Hash identifier: gbhOEHOirxR8+5sX+MIMM9Y38/kBXiRtpqtG71zOAbQ=
Subject key identifier: 0D:B3:AE:A0:81:B4:1B:01:2E:80:89:FB:7F:46:5F:1D:36:78:98:5E
Authority key identifier: AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
Certificate issuer: /CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Certificate serial: 019922C362D61C68091830E595AF45E203DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
Manifest number: 0C7A
Signing time: Sun 07 Sep 2025 06:00:54 +0000
Manifest this update: Sun 07 Sep 2025 06:00:54 +0000
Manifest next update: Mon 08 Sep 2025 06:00:54 +0000
Files and hashes: 1: Zp_o_Avy64dimsDN37AJZ_vsvNw.roa (hash: w725AD9grVqnjs1N3X5smX0OnVgWb9b37Wpm1j4UCoQ=)
2: rSzfJ9neZesk5c_J0xDkyKAwFGA.crl (hash: 4l5LHdc28fTePAszHcc3lU5H6WGdjlHe96XWeI+6NH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:62:d6:1c:68:09:18:30:e5:95:af:45:e2:03:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Validity
Not Before: Sep 7 06:00:54 2025 GMT
Not After : Sep 8 06:00:54 2025 GMT
Subject: CN=0db3aea081b41b012e8089fb7f465f1d3678985e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:99:dc:f7:b7:99:aa:67:00:fb:9c:23:03:40:
99:61:02:9c:b3:2d:66:a0:5e:8a:6a:59:88:31:8f:
6c:16:12:66:fb:5e:7f:1a:f1:96:1b:d5:c3:8f:97:
00:8a:a8:d9:00:a1:45:94:41:90:ac:b3:92:14:d1:
c6:94:31:a8:a6:42:02:bc:b4:5e:18:7a:24:38:da:
82:6a:ad:a4:3b:8f:ac:3e:d6:33:31:d7:23:d8:f9:
18:eb:d8:fe:fb:97:3e:70:86:05:c4:1b:3b:eb:c2:
f5:53:fb:e0:11:c4:a8:74:fa:4b:9b:75:fd:26:56:
fc:7d:91:fe:29:26:48:d0:62:14:e0:91:29:cf:25:
0d:5d:99:02:d7:ae:47:4e:66:f5:da:6c:92:c8:30:
25:1a:23:01:d6:ed:28:75:62:1c:91:a3:7a:9b:4f:
83:e7:9e:cb:24:45:97:3c:bc:52:a3:19:d9:ab:d5:
73:ab:88:c9:c1:fa:84:d9:ed:f4:f8:9d:d6:bb:d6:
a5:95:33:82:4c:d0:bf:e0:88:cb:05:74:5c:8f:a5:
1c:34:27:f2:cd:b8:2c:7a:6e:65:27:00:92:23:71:
ea:76:ac:34:3a:ac:99:39:d7:3b:45:5e:97:79:ed:
f8:80:1e:43:ad:0f:14:65:03:bd:9f:23:5b:44:9a:
ee:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B3:AE:A0:81:B4:1B:01:2E:80:89:FB:7F:46:5F:1D:36:78:98:5E
X509v3 Authority Key Identifier:
keyid:AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e8:4a:45:f0:38:60:2d:f1:30:f2:1c:b4:2c:b7:4e:2e:b9:
d0:d5:8c:56:fd:6b:6f:1a:8e:a7:1f:26:ce:2a:70:b4:89:ef:
bc:27:46:03:17:a6:31:25:b5:81:d6:40:41:45:dd:37:90:9c:
95:5d:d4:aa:18:ec:db:58:5d:83:ed:91:86:76:38:06:f9:85:
ad:19:0e:34:70:64:73:77:19:31:d1:6f:43:d2:c3:59:86:41:
be:78:e1:82:0e:62:af:46:45:74:dd:42:d6:3c:f9:e6:8b:36:
64:d6:81:7b:73:13:fa:29:43:65:5f:6c:db:66:2f:c7:03:ee:
64:7a:d0:1f:b4:9c:2f:33:cf:57:2d:db:03:ed:a5:49:03:9f:
e6:04:e6:07:2f:56:d6:87:46:68:d5:16:02:78:8b:e6:73:f4:
24:9a:92:21:f7:22:10:43:5b:05:46:6a:06:ad:46:3a:c8:89:
ab:21:e3:5a:38:c2:6c:4b:4c:36:1d:55:ab:ef:a7:d4:a3:4d:
e3:49:3c:8c:53:e5:0c:ec:50:87:66:c7:49:71:91:97:00:58:
7a:8e:95:f5:7d:7a:46:4d:1f:83:84:e0:04:08:82:82:81:d0:
d3:20:c8:19:68:8b:a8:63:32:13:2f:60:68:7f:15:17:2b:84:
b9:ba:2f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:32:19 2025 by rpki-client