Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
File: r9v0VgEKm9FJQcoskcpTPn71F4o.mft (raw, json)
Hash identifier: +5YxI3sZ1JAF8yDLNtlkYgMmeDkpMivKW9g+scvLGZk=
Subject key identifier: 21:30:C0:8B:1E:55:CE:DC:4D:92:8B:CB:AA:4C:0C:7F:19:C5:55:BE
Authority key identifier: AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
Certificate issuer: /CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Certificate serial: 0198D65FA90987AE3C6349CDDADAE5E5218C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
Manifest number: 0F22
Signing time: Sat 23 Aug 2025 10:00:50 +0000
Manifest this update: Sat 23 Aug 2025 10:00:50 +0000
Manifest next update: Sun 24 Aug 2025 10:00:50 +0000
Files and hashes: 1: ajkzuEH8FnXzD6y9WqgTkvcAyWQ.roa (hash: ezeCzHTBFnMMCDhX8NkCA6ybD9xQfKuL+xUd+x4C3b4=)
2: r9v0VgEKm9FJQcoskcpTPn71F4o.crl (hash: YP5U3UKmHOHSUxPDf8oO4JBvgaVjj7mIBU1+soMyTvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:a9:09:87:ae:3c:63:49:cd:da:da:e5:e5:21:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Validity
Not Before: Aug 23 10:00:50 2025 GMT
Not After : Aug 24 10:00:50 2025 GMT
Subject: CN=2130c08b1e55cedc4d928bcbaa4c0c7f19c555be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:51:00:4c:ec:bd:2e:f0:f6:f0:41:0b:39:f6:
4e:6c:33:54:ac:a3:31:c2:fc:04:8d:0b:6b:89:88:
37:db:13:95:ea:92:c7:4e:65:6a:ca:2e:89:ef:60:
a5:89:71:ee:5e:3f:6c:e9:94:2f:02:22:5b:38:82:
47:00:0d:ac:62:dc:67:87:e7:0e:a5:53:29:1a:5b:
4e:86:9e:66:80:a7:60:71:4e:60:aa:10:ab:9e:9e:
0e:62:fd:f7:67:2c:a7:c4:88:14:5e:c2:6b:55:a5:
65:7a:2c:f0:2e:da:c8:7b:08:17:75:71:d1:54:37:
06:57:b5:4b:58:08:30:76:12:55:ab:b7:c0:06:6d:
62:fc:0e:ac:8b:9e:8a:c8:29:1b:53:c0:0e:dc:65:
1c:89:d6:05:f9:1d:a5:e8:30:41:e1:66:1f:d2:51:
5a:98:a3:c8:98:89:2d:64:df:e0:eb:91:9c:61:c4:
1a:dd:c5:72:cc:0a:65:58:5c:7d:8f:3b:63:a1:3d:
4c:b1:d5:a7:32:ac:91:5f:42:0b:3b:90:9f:22:98:
45:71:a6:6d:6c:ab:e5:39:fe:2e:a9:79:e9:5e:2a:
51:27:8a:d7:2d:af:59:46:b1:9d:68:95:3e:bb:dd:
be:e6:f4:aa:fa:d4:e3:e0:ec:8a:3f:88:94:ec:58:
2a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:30:C0:8B:1E:55:CE:DC:4D:92:8B:CB:AA:4C:0C:7F:19:C5:55:BE
X509v3 Authority Key Identifier:
keyid:AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0b:25:ab:a5:1a:b4:e8:ba:bb:98:ad:6e:0b:a2:6d:a3:f5:
72:48:8f:72:aa:33:e1:fb:8d:b7:48:ec:04:6f:b6:42:ea:c5:
aa:39:fb:ab:20:13:1d:87:9c:f1:2f:9c:57:c2:bd:c3:b4:e5:
69:e3:d2:52:59:54:58:d7:30:a7:00:c6:f1:fe:ce:44:99:3a:
a7:3a:0a:86:19:6a:d3:54:1a:2a:34:b5:27:43:f9:47:bf:60:
e0:d4:19:1a:4a:2a:d5:32:58:b3:4c:5d:c3:7a:78:5e:df:1e:
2d:5c:83:53:31:e3:f8:3a:95:86:e4:31:2c:52:e2:f3:f4:1e:
af:24:e3:a1:02:e5:34:b7:dd:a3:cc:16:10:32:6d:61:2b:96:
9b:2c:18:43:99:4b:f2:dc:a0:39:d8:db:f7:78:ee:78:dc:b2:
4c:5b:af:14:29:24:80:af:51:2c:d7:c2:e0:ad:ae:de:e1:09:
be:c6:12:b9:d0:16:de:5f:bc:9a:61:b8:bf:f2:04:29:37:53:
47:30:e7:81:bb:58:fa:3c:e9:9a:ef:78:bc:30:7d:fd:26:76:
86:17:8a:88:6a:50:58:0c:ee:65:04:87:e0:1b:dd:9c:32:f6:
29:0e:fa:60:5e:8f:37:57:4f:a4:f7:4f:a3:94:3b:96:4a:d7:
8b:c1:89:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:57 2025 by rpki-client