Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
File: 9rrOePyQJ42C8ehmiooZ7pmCzcM.mft (raw, json)
Hash identifier: W14k5lfjSx4uxytq6whS+OyT+FTc9TD/KP7RDb42LL8=
Subject key identifier: 2E:AB:E9:16:6E:47:C3:9C:B5:55:B7:EE:A7:29:79:02:97:90:62:53
Authority key identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
Certificate issuer: /CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Certificate serial: 0198D5833CD3508A8FFBB0A41C64FD5C1605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
Manifest number: 086D
Signing time: Sat 23 Aug 2025 06:00:04 +0000
Manifest this update: Sat 23 Aug 2025 06:00:04 +0000
Manifest next update: Sun 24 Aug 2025 06:00:04 +0000
Files and hashes: 1: 9rrOePyQJ42C8ehmiooZ7pmCzcM.crl (hash: HDaFOThk/AEfT7f4lPRypLfEuue+fI21BlwRaXtRR9k=)
2: Re-MnmstUpcAurL3wCFgIhLu13s.roa (hash: vb/Pgmd/HetEo03wgkmW9gqUHrd1AuiVR8CC1XhD05w=)
3: Sev5X02oiIv7Gv_3mq5yAVy5Txs.roa (hash: 0c/Q4ud2dbzbznUS25t1/df9lnnZpZNmLVMc8gJSoDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:3c:d3:50:8a:8f:fb:b0:a4:1c:64:fd:5c:16:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Validity
Not Before: Aug 23 06:00:04 2025 GMT
Not After : Aug 24 06:00:04 2025 GMT
Subject: CN=2eabe9166e47c39cb555b7eea729790297906253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:76:58:47:2c:b7:03:d3:4b:8c:63:28:0b:
29:8a:cf:e1:46:60:06:b9:15:4d:30:f0:81:a4:0f:
f9:b0:39:7d:8c:ea:38:40:65:ab:17:c1:2b:a1:a9:
5b:df:21:f1:96:91:71:30:bb:45:82:8e:1b:00:4b:
cc:4f:22:e1:a5:a0:d3:6e:f9:61:c4:2d:d1:72:cf:
d0:83:2e:81:35:a5:0a:e3:77:42:d5:86:8e:e3:f9:
27:ee:97:36:00:01:78:f0:eb:3c:5c:de:59:07:b6:
71:c0:34:11:b0:03:35:52:d7:a7:40:82:ea:26:0b:
c2:6a:13:3b:10:46:7c:40:a6:99:a1:9c:0d:69:68:
07:2f:39:c5:3e:b4:76:fc:9c:e8:b4:ac:43:b9:ba:
ae:62:41:85:d1:30:58:c9:b8:82:92:09:c4:05:6c:
ab:72:eb:e9:e2:80:92:2b:b9:84:e5:82:cc:73:22:
cc:cc:dd:a5:1b:97:91:b7:75:fa:aa:17:d8:b1:3b:
8f:4c:63:f2:97:86:0f:ec:c8:5c:f2:23:8b:af:c4:
7d:47:8b:1b:b9:7b:53:ce:6e:1a:6c:ae:59:08:2c:
43:1b:79:db:9c:d4:5e:81:8d:7f:df:c2:a0:07:61:
b8:46:26:43:9c:98:f9:db:52:11:4f:6d:d7:b8:84:
cc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AB:E9:16:6E:47:C3:9C:B5:55:B7:EE:A7:29:79:02:97:90:62:53
X509v3 Authority Key Identifier:
keyid:F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:47:47:4f:10:09:f9:49:c5:6c:49:ea:15:08:5a:a9:87:44:
29:94:f6:2d:71:d3:76:f4:3c:4f:3c:52:4d:d1:6e:32:e0:c8:
0e:56:d4:5d:cb:d7:e3:2b:01:d3:bf:7e:38:ea:df:5f:56:c9:
30:2a:0e:87:b2:b0:be:06:06:4a:75:7e:fe:76:16:ab:41:af:
0f:88:f8:6c:a8:91:e5:f0:f8:c9:74:18:71:3b:d8:9d:4e:fb:
0d:43:f1:53:6d:61:4f:32:90:b4:8c:8b:3b:21:78:dc:83:66:
c5:08:64:61:aa:db:5a:85:e5:8b:32:09:5b:6f:86:18:80:e7:
50:fb:22:e8:eb:3b:9c:3e:7a:19:25:de:31:e1:a0:2c:c0:45:
1c:74:2b:19:f5:67:f1:84:fb:92:9b:29:47:f8:06:59:1b:e9:
4c:67:95:bd:93:99:17:12:f7:9a:f4:17:3b:e3:df:fd:9c:14:
62:65:64:7c:9a:20:16:6c:11:45:98:7d:ee:ae:a6:6d:f7:9f:
78:6a:0a:bb:79:34:ad:d4:be:2c:e3:90:03:72:85:c8:9b:5b:
22:24:61:45:e1:37:f0:bf:9d:b8:4a:13:a4:11:c0:e8:24:82:
c2:86:1f:a0:2b:ac:f3:41:40:14:fd:56:76:9c:e0:67:21:da:
36:d7:fc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:19 2025 by rpki-client