Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
File: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft (raw, json)
Hash identifier: Sudpcqt2ohUO3EjBVLuYQKpYmKdQrNGAQHM4U/456Iw=
Subject key identifier: F7:2C:55:B6:93:71:4F:F4:4E:04:EC:A3:26:BE:9B:0D:BC:D0:AB:32
Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
Certificate issuer: /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Certificate serial: 0198D65F13DBA3850FAA5CC355CAAF939A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
Manifest number: 0EE3
Signing time: Sat 23 Aug 2025 10:00:11 +0000
Manifest this update: Sat 23 Aug 2025 10:00:11 +0000
Manifest next update: Sun 24 Aug 2025 10:00:11 +0000
Files and hashes: 1: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl (hash: GGlCEjQe3+wwVddN6FdFivBts5ySByeHKhnX9lhR3D0=)
2: fIHxOTR4AusDjkUMl4F2Dw2GHL4.roa (hash: Sb4ZUnFbCp/emt+K6hXULcd6ikLK+m62aHUuIK4higk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:13:db:a3:85:0f:aa:5c:c3:55:ca:af:93:9a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Validity
Not Before: Aug 23 10:00:11 2025 GMT
Not After : Aug 24 10:00:11 2025 GMT
Subject: CN=f72c55b693714ff44e04eca326be9b0dbcd0ab32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:21:e7:fc:f2:3b:58:9c:5e:62:9f:ca:44:e8:
10:44:fb:c6:a4:c2:d4:e6:c6:ff:bc:2d:a7:bd:33:
a5:f7:4d:fe:46:b0:27:3b:c8:19:97:98:43:ff:a0:
0f:ee:67:90:b4:6a:9b:13:e0:68:30:f3:c4:e3:fe:
fd:e7:c9:d9:d5:b7:eb:73:56:61:a8:1c:85:3e:4e:
dc:9c:f5:50:cd:2f:92:b7:f0:a2:75:33:4b:31:3a:
fc:97:48:28:53:0e:e2:ff:4e:a6:f4:d3:19:00:88:
e2:7d:8d:9a:d3:b6:4e:11:4d:32:59:78:85:04:9c:
09:cd:bf:51:c5:01:21:5c:c8:c1:57:ed:ab:d0:a4:
32:57:1c:fc:39:1b:8c:17:24:d0:05:7f:09:d5:8c:
b3:58:58:e0:9c:f4:59:12:50:ad:88:7c:8e:3f:00:
bd:4c:e1:60:92:37:3f:db:de:f6:5e:72:5d:84:a4:
f2:5c:60:30:88:15:b0:a6:5b:77:92:69:a5:45:d3:
c6:74:57:bb:91:16:8c:e6:01:7a:8b:3a:cd:ff:e9:
39:fe:fa:b3:87:84:1a:e2:d0:48:56:b8:4b:ca:b8:
b2:b0:05:bd:6e:38:59:72:de:e6:54:e9:5c:1a:75:
b6:69:ad:a9:3d:09:44:73:af:a2:3e:ed:75:f1:3c:
dd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2C:55:B6:93:71:4F:F4:4E:04:EC:A3:26:BE:9B:0D:BC:D0:AB:32
X509v3 Authority Key Identifier:
keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:65:17:31:0a:17:bb:8c:a0:33:89:a4:71:d1:8a:49:80:f0:
e6:ce:88:4f:25:dd:b8:c7:c8:ce:5b:50:37:01:73:7c:fd:60:
01:84:c4:ac:46:94:09:18:27:8a:0c:da:52:27:aa:f0:be:96:
9d:d4:18:fa:83:a6:d6:4e:7f:94:6c:fd:59:68:4c:a6:4a:56:
2a:76:cb:4e:f6:46:3d:b2:7c:78:40:da:65:c2:27:2e:49:eb:
7f:b0:d8:66:c9:e3:41:a0:8c:b4:65:e8:5f:9d:a3:dd:b6:92:
06:b0:5b:f3:d7:ca:b2:80:da:0f:ab:66:e1:d5:69:95:63:26:
aa:d6:0a:c8:0f:3b:8a:ef:f1:ce:db:3a:1b:b1:9d:f7:37:d0:
87:ed:fd:29:79:07:b2:e0:b1:db:10:18:22:03:64:bd:0f:3d:
a0:0d:ff:95:76:66:e7:06:d7:0f:09:55:e7:ff:10:c4:7a:30:
74:e1:cf:5e:80:63:60:b9:a7:0c:8b:6e:cb:55:12:c4:72:f9:
19:2d:0a:05:46:8b:b7:94:60:d7:87:14:af:6c:1e:e2:be:51:
cd:f3:f3:a0:13:3f:c8:48:04:6c:9e:29:7a:de:c4:19:a3:4d:
f7:39:1d:08:58:df:6b:8c:48:70:cb:ad:07:d8:63:0e:9d:9a:
e8:60:fc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:20 2025 by rpki-client