Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
File: r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json)
Hash identifier: dzLgXBcqgeLiT/3N1ypH0P4eiitXxx7YkoDEOAj5kT0=
Subject key identifier: 57:B2:66:8F:78:BA:9F:9C:96:60:83:40:91:03:14:7C:E2:03:DC:C7
Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
Certificate issuer: /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Certificate serial: 0198D4749704D06837BAE14FE2DF391CEB11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
Manifest number: 08CA
Signing time: Sat 23 Aug 2025 01:04:27 +0000
Manifest this update: Sat 23 Aug 2025 01:04:27 +0000
Manifest next update: Sun 24 Aug 2025 01:04:27 +0000
Files and hashes: 1: DTxczwIBr_nfZRTIPgBtQYWGTi8.roa (hash: +VMycRtyrx3wbrRNOQ5x4frKIMykN9VHtpPYdKmVF5w=)
2: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: uLMwVV3Gpql2qKJaiFHXd5yS+eTJj0XUMsB3dTs1GbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:97:04:d0:68:37:ba:e1:4f:e2:df:39:1c:eb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Validity
Not Before: Aug 23 01:04:27 2025 GMT
Not After : Aug 24 01:04:27 2025 GMT
Subject: CN=57b2668f78ba9f9c966083409103147ce203dcc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9a:d8:b1:8c:55:bd:82:08:ad:b4:64:ad:db:
81:c8:e2:bf:d4:6c:53:c5:01:12:23:10:65:7b:9e:
2b:2a:a0:36:79:71:d9:da:fe:03:f6:4a:53:ab:cb:
ea:85:be:7d:f1:eb:79:cc:af:d3:d8:20:ec:e9:73:
e5:3b:c9:22:0f:ae:34:4a:2c:e4:68:ac:26:09:7d:
fa:59:01:c2:25:59:b8:87:8c:ec:63:e0:d1:ad:90:
d8:0e:12:a7:07:07:78:25:1f:96:32:a7:1a:c4:cc:
62:85:98:b6:04:17:e6:33:83:e3:f5:c0:fe:fa:1e:
8b:f0:34:93:57:29:ee:b5:61:33:08:22:09:16:9d:
c4:0f:54:c4:97:4b:13:fe:e5:20:fe:6f:49:6d:77:
d9:cc:c2:9d:a9:9f:6a:6f:59:33:ab:a7:d7:b9:c7:
48:b8:87:ff:65:a0:4b:25:53:28:a3:2c:1e:f5:2e:
a2:57:78:69:15:68:89:33:d3:66:93:5b:8b:57:c3:
87:22:49:85:bf:d6:2e:03:86:32:ef:15:6f:99:bd:
af:ce:4c:fd:7b:e5:53:05:bf:7d:21:97:cf:96:f3:
a2:d2:3f:10:be:52:b5:e9:f4:f3:1a:b7:e9:27:9b:
c1:0c:c8:3d:11:7e:67:8e:23:81:b6:b3:10:78:a2:
d6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B2:66:8F:78:BA:9F:9C:96:60:83:40:91:03:14:7C:E2:03:DC:C7
X509v3 Authority Key Identifier:
keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:79:f3:39:c5:f8:b8:5d:88:44:e0:a7:b8:64:95:f9:84:d0:
b0:bc:88:bc:c6:61:c8:5e:0e:3a:ff:3d:ac:60:00:98:98:e4:
d5:34:5f:b8:64:de:b6:5f:d0:b2:d0:f2:b7:f6:21:b6:05:77:
37:10:e6:01:51:3f:81:d5:2d:a8:44:27:25:b3:24:78:66:ad:
5b:32:a8:54:b8:c7:e5:6b:42:ac:78:20:2e:75:a1:8b:b2:88:
4c:4b:8f:f4:81:24:f4:cb:05:34:32:60:3e:2d:e3:28:a3:d8:
44:4e:f1:3a:4f:75:3f:22:96:37:b3:a4:e0:2e:c3:d1:77:6d:
92:48:d5:b5:dc:37:cb:1b:2e:db:7b:e7:5a:80:50:e5:8d:0d:
91:cb:18:56:36:bc:c6:48:de:bb:5b:8c:9a:e5:c1:b1:b0:9a:
10:14:47:2d:be:18:13:6d:27:98:c8:55:a3:71:4b:5d:35:a1:
96:a6:a0:83:46:fd:06:f4:a1:dc:a1:a0:e3:57:60:f3:41:51:
d2:ba:9e:14:75:28:ff:2f:ac:5f:7b:9b:db:df:d6:f8:02:24:
95:c1:75:dd:84:88:0b:d1:bc:31:cd:4d:9b:f2:18:43:4b:da:
62:b3:8e:b5:ea:48:10:65:38:6d:c7:27:77:d3:5f:f2:4f:e6:
e8:dc:09:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:51 2025 by rpki-client