Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
File: adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft (raw, json)
Hash identifier: Nkc/5PHuQLMg4G9l47g/K8bEybvGEZnVH5+UDaYGJJE=
Subject key identifier: 73:8A:6C:82:A1:FB:95:3F:1C:C8:94:16:B3:F2:AF:B3:3B:43:23:6B
Authority key identifier: 69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
Certificate issuer: /CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Certificate serial: 0198D6988EF5A8BA9AB321AC1532C44B48E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
Manifest number: 0F89
Signing time: Sat 23 Aug 2025 11:02:58 +0000
Manifest this update: Sat 23 Aug 2025 11:02:58 +0000
Manifest next update: Sun 24 Aug 2025 11:02:58 +0000
Files and hashes: 1: OTybeQSqUNtNYhW7lIqMu8Xbs9U.roa (hash: qhQfPgHQL0RGn7gt2AnYjMV/XyhTZwosQOVt3JjZawg=)
2: adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl (hash: b2BQZJ+AdKjTk7vtEMay1u6iZbmtAEHoogVz6PzoBsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:8e:f5:a8:ba:9a:b3:21:ac:15:32:c4:4b:48:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Validity
Not Before: Aug 23 11:02:58 2025 GMT
Not After : Aug 24 11:02:58 2025 GMT
Subject: CN=738a6c82a1fb953f1cc89416b3f2afb33b43236b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:ae:30:18:3d:61:22:8f:1a:6f:6a:82:3d:
5d:e8:a3:c0:b4:68:1d:96:06:04:a9:b4:04:26:10:
0e:dc:fa:45:07:02:99:bd:fa:7a:b8:c2:82:ed:cb:
e6:73:30:87:21:bb:23:90:5d:ea:27:a8:2a:f3:ed:
61:e4:ef:ba:33:8e:ad:28:a5:55:b4:bb:4d:7c:30:
c7:82:73:a4:95:00:c2:c0:6a:7e:f3:ab:83:a3:ef:
69:bd:64:99:32:63:0a:9b:c4:8c:44:6c:11:1e:04:
ca:82:57:4f:bb:7f:e3:37:40:71:26:dd:1b:3d:63:
f8:ea:ef:79:39:93:a7:45:36:00:0b:01:97:2f:ab:
80:f9:85:fc:5e:c6:95:02:05:cf:fc:8c:4b:51:04:
71:da:68:39:dc:13:67:88:2e:45:ef:b9:88:08:62:
c7:08:a9:a8:95:68:aa:00:b6:ee:c3:08:fa:c0:ff:
bf:81:82:a8:41:7d:9a:04:52:e9:89:e4:d2:fd:e5:
75:72:ff:f3:8b:44:d0:04:bd:a9:b4:fc:08:63:46:
2c:1d:39:79:3c:d9:fd:3e:99:eb:41:81:7d:2b:bc:
10:59:f9:2d:d6:1c:4c:c1:7c:db:16:d4:65:49:4f:
c7:9c:1e:7d:7c:b8:7b:76:00:37:08:16:43:fe:3c:
3b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8A:6C:82:A1:FB:95:3F:1C:C8:94:16:B3:F2:AF:B3:3B:43:23:6B
X509v3 Authority Key Identifier:
keyid:69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:67:4b:69:55:42:31:02:f4:65:c0:79:8d:be:d8:48:ca:c0:
ae:ab:d9:4f:95:c6:02:98:86:c9:51:5b:05:a6:d4:aa:fc:12:
a2:b4:b2:eb:17:24:b5:e3:43:2f:20:8a:87:99:c1:e0:ce:8f:
e7:3c:8d:7e:ef:6d:3d:ef:83:59:e0:6c:80:5b:ca:2a:86:92:
ac:17:ef:89:03:38:72:e5:45:6b:c1:74:00:30:60:fa:f2:b2:
87:15:d2:0c:8a:12:51:ab:1c:31:16:11:b9:6c:1e:e8:6d:ab:
4c:35:90:1f:fa:a5:e3:1e:8f:be:c1:92:4a:fe:1a:54:1f:9d:
5a:86:be:2e:4d:6a:9f:e3:34:bb:28:f9:1a:66:8f:6e:fc:4c:
5d:a5:cb:b1:dd:1d:1f:63:f8:a8:a4:44:7b:dd:4a:29:1b:d9:
f4:fc:f1:e5:0c:b7:2a:3d:2d:02:e6:f0:69:7b:a8:46:18:0a:
a7:e8:8c:9d:2b:b4:75:c4:b5:6a:64:f8:a8:57:1e:5b:94:71:
61:d6:0f:23:cf:85:8b:c5:12:4e:9a:a4:a8:33:55:52:47:db:
e9:5a:69:f2:31:e7:d8:f7:a6:79:c1:1e:e2:f3:69:99:c7:2b:
c6:97:83:78:3b:bd:83:94:55:54:cd:36:3e:c6:6e:cc:a8:d5:
36:a0:81:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:05 2025 by rpki-client