Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
File: _ASHoE9apEK-UZoXyyuyLXg98js.mft (raw, json)
Hash identifier: eIAVR7JOEZQ7ezlq4THeJuTaUCZPik6UCtli0+WGVhQ=
Subject key identifier: 53:2A:9F:A5:AD:6A:8D:DD:76:71:F3:21:B2:D8:F4:80:2D:11:C7:0D
Authority key identifier: FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
Certificate issuer: /CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Certificate serial: 0198D65FBAC8107C3AB2494B5FD48FEE0CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
Manifest number: 11CB
Signing time: Sat 23 Aug 2025 10:00:54 +0000
Manifest this update: Sat 23 Aug 2025 10:00:54 +0000
Manifest next update: Sun 24 Aug 2025 10:00:54 +0000
Files and hashes: 1: TWYnB52Oavk9789kFBH_TtsFA20.roa (hash: Lo6TIcgKkzIrKcc1K5udX1XvguvwpolYTItBn5Pxknw=)
2: _ASHoE9apEK-UZoXyyuyLXg98js.crl (hash: F503HTfIY99jSc5iSf35WY8NwqYigqmS9rs/t1QC3aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ba:c8:10:7c:3a:b2:49:4b:5f:d4:8f:ee:0c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Validity
Not Before: Aug 23 10:00:54 2025 GMT
Not After : Aug 24 10:00:54 2025 GMT
Subject: CN=532a9fa5ad6a8ddd7671f321b2d8f4802d11c70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7b:8e:02:af:10:64:d4:7c:c2:30:85:9e:66:
02:2e:f4:a8:cb:d5:5e:cb:d5:3f:22:f1:5c:c0:70:
9b:99:bb:c0:73:6c:7b:d2:61:fb:0d:3d:80:35:47:
03:11:b6:2b:fd:ed:f2:de:40:b7:a0:9c:8a:2a:f8:
09:41:66:5f:e5:ab:a3:a1:33:90:17:19:c3:18:84:
98:09:86:14:83:3c:c4:9c:00:4b:2a:fa:8a:27:98:
27:c2:a3:6b:87:ac:63:a0:39:81:e3:45:04:53:71:
88:85:60:eb:74:8f:d1:17:df:2e:ae:99:04:01:5a:
71:ed:ad:68:df:f2:8d:8b:b8:48:82:dc:9b:e6:84:
b9:f0:bb:8c:3c:5f:65:85:88:22:cb:3f:68:1f:67:
01:f7:cd:48:0e:43:4c:95:d3:b5:3d:d9:b8:71:6c:
74:10:42:aa:67:88:3d:10:84:3a:fc:37:e3:07:35:
8c:e2:d7:c7:c8:75:76:13:5c:24:31:97:f5:90:f5:
07:81:7d:7b:f7:34:6e:82:f1:54:72:b2:69:21:a9:
b4:32:ee:4f:62:97:b5:4c:24:4d:60:8c:5e:95:43:
88:78:11:25:32:51:f3:b7:8d:bb:27:a8:2b:e1:00:
d7:5b:fc:a4:70:a9:9a:fa:f7:32:4a:f2:e0:2b:ad:
0d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2A:9F:A5:AD:6A:8D:DD:76:71:F3:21:B2:D8:F4:80:2D:11:C7:0D
X509v3 Authority Key Identifier:
keyid:FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e3:8e:20:ab:88:38:27:04:c0:5d:bc:e6:4f:27:b2:1b:35:
ec:dc:c2:e9:a2:4e:a2:e8:36:18:0d:6c:a8:f3:ea:44:7a:c4:
21:8d:51:b3:29:5e:38:16:ff:2a:b4:7e:9b:a0:d9:97:1c:ee:
6f:9d:1d:09:d7:1f:92:c5:49:7e:d7:dc:27:85:a6:9d:90:6b:
0d:14:4c:e2:86:50:1c:94:3c:e7:ac:51:db:86:41:ad:9e:41:
68:f6:af:27:f1:f9:35:6b:99:61:c2:a0:94:f4:5f:f1:8d:c9:
78:c9:60:cc:03:61:40:18:8b:98:03:4d:b6:f5:94:b5:9c:a1:
de:89:b1:e1:eb:b4:5c:b4:fc:4c:bd:43:91:e2:08:18:b1:96:
e2:f8:71:96:f3:1c:89:09:86:41:37:43:59:93:46:e2:8d:09:
5b:3b:24:34:4c:23:c7:ea:1f:d9:a2:7a:3f:32:4c:30:96:88:
7a:da:1b:e4:67:7e:8b:71:19:21:38:24:47:74:0c:5e:63:68:
a1:26:9a:ef:ac:94:0a:8d:99:f4:ad:11:2e:36:17:64:2f:d0:
1b:96:96:2c:ac:f3:e1:10:ef:7f:90:2c:68:7b:55:33:8b:06:
b9:1c:2a:d2:25:33:ab:4d:d3:63:87:28:62:ba:b8:13:e8:16:
2a:a8:d8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:51:44 2025 by rpki-client