Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
File: RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft (raw, json)
Hash identifier: LfOLOnPALE4T2U3+i0kbDbTz2TBsjAEPhncXkG6uI88=
Subject key identifier: 49:57:08:DD:24:4B:89:0B:24:62:63:07:2A:2E:F7:35:B4:75:9D:BB
Authority key identifier: 44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40
Certificate issuer: /CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
Certificate serial: 0198D773A7CAE578A1C0C3260B0BCD5954B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
Manifest number: 11B6
Signing time: Sat 23 Aug 2025 15:02:17 +0000
Manifest this update: Sat 23 Aug 2025 15:02:17 +0000
Manifest next update: Sun 24 Aug 2025 15:02:17 +0000
Files and hashes: 1: Gnl9wgih5bkZTu9f-EBtmWB57aI.roa (hash: zbDguLxZjG7MAjNEZMNb7jOZjg/zzl6iQmvjqk6cIOM=)
2: RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl (hash: Jh8yi5jqePl9CkDOiAfg+hijLzOvwJstxLDE6SlrvEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:a7:ca:e5:78:a1:c0:c3:26:0b:0b:cd:59:54:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
Validity
Not Before: Aug 23 15:02:17 2025 GMT
Not After : Aug 24 15:02:17 2025 GMT
Subject: CN=495708dd244b890b246263072a2ef735b4759dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9e:3d:10:b4:52:0f:b3:11:dd:3d:da:24:34:
1d:90:a7:24:53:77:fa:d5:3f:36:3a:51:db:b5:3f:
31:6b:4a:1f:4d:bf:4a:81:e4:9c:bf:1a:60:43:33:
88:59:79:a3:7f:c5:c1:f7:2b:f2:7d:ee:e0:77:89:
92:f5:b1:02:2e:15:77:61:32:bf:90:0e:06:a1:39:
39:ab:cb:be:e8:e7:7d:96:d2:2c:a0:66:a3:41:9e:
d7:72:17:5d:16:37:fe:4f:2c:07:b9:c8:3b:a4:8e:
1c:6b:2f:cc:48:b1:1c:1d:8c:b6:3c:63:55:0b:96:
a6:cd:7a:f9:2d:27:7d:66:d8:7b:69:97:ee:e7:9c:
a0:fe:8d:85:70:cf:1e:07:05:bc:ab:d9:5c:eb:03:
99:10:45:16:a8:90:b4:92:e0:3f:62:ed:39:08:4b:
e2:2d:de:d1:66:fe:e1:28:9f:fd:46:5a:30:69:27:
1e:50:71:9a:23:07:2e:5a:7c:3f:01:5d:6f:67:f3:
3e:d7:8b:f8:35:b8:17:85:5d:15:92:5f:29:77:7d:
09:b7:04:8d:c6:78:38:44:3c:dc:74:23:19:0a:97:
ed:ad:6d:a5:b6:02:79:95:ea:48:b1:a2:e7:b6:38:
4d:e9:54:be:f1:3b:de:15:8d:5f:91:bc:34:ea:89:
60:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:57:08:DD:24:4B:89:0B:24:62:63:07:2A:2E:F7:35:B4:75:9D:BB
X509v3 Authority Key Identifier:
keyid:44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:76:78:8b:00:b5:d3:54:e7:c5:e4:ce:d8:04:a1:14:8b:84:
f0:8f:be:73:e5:77:34:f7:e9:1a:12:65:ef:c3:1a:8b:7a:04:
6e:3c:4f:32:39:9a:6b:9d:70:03:8e:94:57:d8:c9:03:5c:29:
93:d7:0a:92:6e:db:30:32:93:0d:d4:6f:6e:89:c7:b7:b9:5a:
93:92:d5:31:c0:b1:36:f4:69:15:88:5b:62:bd:6e:fe:5b:9e:
24:ea:ae:6e:0a:06:a5:0b:e3:f8:0b:4b:4c:eb:dd:b9:a7:7d:
2c:90:b0:d3:5b:e7:ab:cf:65:8c:41:4c:19:8a:54:b2:47:98:
58:a2:0b:66:f2:9a:2e:fb:71:f0:b8:f4:c1:6b:d7:6c:a1:7a:
27:44:25:03:bf:90:0c:39:48:bf:b0:03:2b:4f:cb:f1:b4:c1:
c9:0f:07:5d:a1:2f:0d:32:0c:4f:84:b7:ac:41:3b:9a:28:d3:
79:25:27:c1:f2:f6:d5:f9:85:b0:95:83:ac:45:aa:07:59:26:
90:31:04:70:c7:37:30:39:7c:fd:75:af:db:ff:db:dd:0a:c5:
31:9a:89:f1:91:a4:70:08:25:56:10:27:4a:44:69:ee:e2:ed:
61:1a:39:df:27:87:d4:48:79:6b:72:7f:71:32:b3:f4:26:f2:
9c:08:1b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:29 2025 by rpki-client