Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
File: 05EjiA9CdEbV_wfO-WM-htxJGY0.mft (raw, json)
Hash identifier: shJ6q1F6FL88FEZLmpzgpz13lp7sjh1j97KcaFAZ9wI=
Subject key identifier: B4:B8:65:E5:C2:75:8B:C0:0F:E9:FE:D2:0B:AF:26:BE:78:D0:C7:DC
Authority key identifier: D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
Certificate issuer: /CN=d39123880f427446d5ff07cef9633e86dc49198d
Certificate serial: 0198D4DFDC6E4E19CC8463B0281DD295E780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
Manifest number: 0732
Signing time: Sat 23 Aug 2025 03:01:37 +0000
Manifest this update: Sat 23 Aug 2025 03:01:37 +0000
Manifest next update: Sun 24 Aug 2025 03:01:37 +0000
Files and hashes: 1: 05EjiA9CdEbV_wfO-WM-htxJGY0.crl (hash: PDo5x0dbejJR+au5FhB+C6j6qcUEIMFR7QrMpANaQoQ=)
2: 1-HePaXJiClEhHOw237Wa73vaFTc.roa (hash: 4PUKfjaEAzPB9R2XBWxJhNfJbqqZiV/WF7YuGVgHgMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:dc:6e:4e:19:cc:84:63:b0:28:1d:d2:95:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39123880f427446d5ff07cef9633e86dc49198d
Validity
Not Before: Aug 23 03:01:37 2025 GMT
Not After : Aug 24 03:01:37 2025 GMT
Subject: CN=b4b865e5c2758bc00fe9fed20baf26be78d0c7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:be:65:b5:44:26:2d:b5:8b:43:e4:06:d4:
c3:22:16:d6:89:61:7f:93:c2:57:45:92:9a:d3:3e:
8e:83:ec:a3:b3:f4:60:d8:6b:3d:65:e8:a5:45:ab:
c6:1f:b1:d4:cd:f2:12:2b:be:8a:59:7b:f6:eb:76:
e3:90:35:92:af:8e:42:e3:aa:a4:1f:84:e4:22:04:
63:6f:65:15:f1:28:38:19:13:73:af:88:83:7f:50:
e8:d8:6d:de:38:29:5d:cf:57:f9:fd:24:0b:ff:f2:
35:d3:c8:1f:e3:df:0d:80:6a:94:5c:6d:21:f1:71:
6a:f8:fb:cb:97:40:87:de:15:b4:03:bf:e2:bc:94:
ba:ce:04:1f:08:b9:2d:03:e5:a6:96:ee:b3:47:48:
25:5e:d3:e5:ab:c0:0a:97:f6:38:7b:68:5b:68:b6:
6c:18:0d:c9:26:2a:bb:29:f6:85:63:d0:6a:cb:d9:
85:96:80:38:61:55:a7:46:6f:9c:2d:c8:be:5d:b6:
78:10:1e:ee:03:3c:e1:92:80:a6:a0:cf:f6:98:d8:
ff:88:cf:0a:0d:1e:30:f2:38:4b:7a:a7:f4:c8:a4:
df:20:43:80:e1:22:3b:2e:8f:69:ab:49:6c:93:0b:
b7:c9:37:5b:da:04:b6:33:65:2f:04:50:6c:99:d9:
df:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B8:65:E5:C2:75:8B:C0:0F:E9:FE:D2:0B:AF:26:BE:78:D0:C7:DC
X509v3 Authority Key Identifier:
keyid:D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:da:29:1f:06:5b:9b:ad:e1:2f:82:f6:7a:de:b0:bf:99:ce:
fd:fd:e5:09:04:af:83:66:1e:3a:a5:73:d7:dc:53:f1:f0:bc:
34:6d:1c:e3:98:b8:92:2f:a5:df:5f:8f:5f:4e:fd:07:aa:a3:
d4:67:66:da:cd:9e:af:72:9a:52:bd:dd:ad:17:e0:36:f9:0c:
f7:ab:bd:8e:2b:85:a4:ca:ea:ea:24:44:13:c2:b4:b5:4b:43:
e9:54:8f:41:88:57:eb:64:61:d8:17:02:b8:87:42:af:83:06:
4a:db:38:fb:1a:10:7a:2b:a1:b7:e7:6d:3c:af:48:4f:d8:01:
ca:18:de:22:43:b8:78:77:47:78:cc:ee:65:ac:37:74:f0:8f:
9f:f4:28:84:e0:67:f2:61:70:ee:ba:a1:fe:61:6f:45:0e:0f:
6c:e6:c1:35:67:72:b6:a9:c7:02:d7:ad:13:65:07:87:75:27:
1c:4a:d4:b2:f8:f0:b2:cd:b6:d6:9b:37:7a:79:af:05:47:0e:
32:40:f9:f5:3a:09:a0:6c:5f:72:87:98:b1:64:f1:a2:3e:76:
34:d0:06:f4:4d:49:f8:66:67:11:8e:59:31:84:7c:29:35:5d:
e2:e2:b8:4d:b4:b3:65:e6:d1:21:18:ae:91:c5:88:ba:8e:4b:
0e:ec:98:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:50:17 2025 by rpki-client