Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
File: sIWATbFT63JMWFV8eTWcRAggVVA.mft (raw, json)
Hash identifier: LL3w+b1V2/+mvJAfYpiU8JyWcM2teSO/+krVLKmQdEE=
Subject key identifier: 7A:AC:23:58:FD:3A:59:5C:7D:6B:34:7E:81:11:F1:73:C0:5C:05:7A
Authority key identifier: B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
Certificate issuer: /CN=b085804db153eb724c58557c79359c4408205550
Certificate serial: 019922C307D06519770323540D24073DDCED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
Manifest number: 054D
Signing time: Sun 07 Sep 2025 06:00:30 +0000
Manifest this update: Sun 07 Sep 2025 06:00:30 +0000
Manifest next update: Mon 08 Sep 2025 06:00:30 +0000
Files and hashes: 1: 18TNS4gBaAj1nBKZLGQyvBGXDAA.roa (hash: yG6kNp39rMwW08RfUJ3Cw47Eb4R/ZRHq/FbYcN4tnj0=)
2: sIWATbFT63JMWFV8eTWcRAggVVA.crl (hash: NTF1zGImOIX324k2kjgAlBkr/IBPvM27koKZbnWA+f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:07:d0:65:19:77:03:23:54:0d:24:07:3d:dc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b085804db153eb724c58557c79359c4408205550
Validity
Not Before: Sep 7 06:00:30 2025 GMT
Not After : Sep 8 06:00:30 2025 GMT
Subject: CN=7aac2358fd3a595c7d6b347e8111f173c05c057a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:c1:3d:ee:82:3f:35:ff:15:9e:c5:b6:14:
9e:65:44:86:11:53:c6:f4:b4:23:e0:da:1f:36:bc:
39:31:e3:cd:79:28:0f:1d:9b:a8:02:49:4e:d4:5b:
45:7e:d0:b5:6c:08:b9:72:93:86:eb:a9:b4:5f:f2:
7f:a8:c6:ac:83:37:e4:8c:f3:4a:70:12:bf:06:87:
95:91:70:39:f8:4e:af:c1:b4:77:39:c0:11:70:51:
3b:5d:7f:a1:9d:6b:cf:c6:72:42:cf:67:6f:2e:c9:
da:40:a2:b6:fc:68:f5:f1:60:93:9b:19:a9:de:65:
ea:27:3b:54:b5:79:db:85:25:84:33:c1:38:8b:52:
21:04:6f:76:44:26:0f:f7:f8:10:fb:a9:87:d5:d9:
0d:3c:6f:55:b9:42:34:16:51:f3:f8:37:c7:66:79:
b3:e5:17:ab:55:85:33:8c:e5:cb:ed:e9:20:7b:08:
bb:83:da:f5:7d:b4:a6:32:75:1e:5c:e5:89:58:14:
de:d8:f8:6b:40:ee:b1:10:49:7f:5b:08:e5:8b:70:
30:9b:21:98:82:07:f7:b2:e5:ba:25:c3:29:03:3e:
f1:c0:9c:4d:10:5d:f2:33:f1:d5:2c:d3:56:3e:de:
41:43:ae:3d:3d:dd:91:06:51:a6:1b:b6:49:29:1e:
7e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AC:23:58:FD:3A:59:5C:7D:6B:34:7E:81:11:F1:73:C0:5C:05:7A
X509v3 Authority Key Identifier:
keyid:B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5d:fa:26:22:05:fb:fc:5b:31:df:1f:a2:d4:d7:b0:8b:1c:
1b:a6:78:87:bc:88:fe:7e:aa:6c:23:84:02:c8:da:d4:64:6d:
85:10:86:ac:c5:f3:af:cf:50:61:6e:ad:65:5c:98:21:97:26:
8e:1a:8c:be:78:8e:b0:4e:01:e3:f5:12:0b:ea:8b:00:b5:06:
82:cc:8c:cd:95:b5:f6:b1:2e:f3:6a:c6:55:4f:de:5f:63:0e:
3f:73:4e:5d:18:c5:ff:47:a2:a2:c8:53:bd:29:7d:a3:49:64:
42:a7:10:31:c0:b6:45:a1:ca:18:ab:6b:aa:d8:eb:8c:ae:f4:
2c:cf:74:c9:d9:2e:0b:cd:c7:2e:a1:50:b6:db:58:7a:2a:6f:
3d:41:84:a3:6a:a9:40:4a:3b:e6:e6:63:96:35:75:84:04:f6:
c6:ef:10:e3:35:14:61:ab:14:81:8f:30:ee:f1:b5:3d:fe:34:
02:30:3e:39:ca:cc:1a:7e:c1:dc:5f:14:80:f7:6f:db:50:e5:
5e:82:ca:20:a4:f0:65:05:a2:ac:25:6d:d1:57:cd:bd:38:e7:
dc:2f:d8:ee:a4:59:8e:40:73:c2:a2:f3:ed:d6:21:6d:f0:89:
72:c4:70:88:20:44:20:3d:9e:f8:1d:1f:f0:72:54:65:ea:5d:
0c:f4:d4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:55:48 2025 by rpki-client