
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
File: sA09NPYeSEaIv_-cxwN1WCN3WZg.mft (raw, json)
Hash identifier: 1t4/K/So3JZ2Au6+xfHf8DMyD/tzMTbnWQxasXrvovA=
Subject key identifier: 33:F8:F6:DB:05:EF:1D:11:21:13:5B:3A:65:26:F1:7B:D2:56:AB:51
Authority key identifier: B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
Certificate issuer: /CN=b00d3d34f61e484688bfff9cc703755823775998
Certificate serial: 0198D6CCED9E6E124F6FCC9883618644E3CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
Manifest number: 12FE
Signing time: Sat 23 Aug 2025 12:00:11 +0000
Manifest this update: Sat 23 Aug 2025 12:00:11 +0000
Manifest next update: Sun 24 Aug 2025 12:00:11 +0000
Files and hashes: 1: LKbJBE8NWEbtvlmwjvUv8EH6lzg.roa (hash: OvzM1ONuWDYGL3UTKmOuYTSxh3U96Ifed1WChkSuccI=)
2: sA09NPYeSEaIv_-cxwN1WCN3WZg.crl (hash: bByQ3Na6oeQwIt9D4jvvzf0yF8tLbtdOwgk5RSB3JpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:ed:9e:6e:12:4f:6f:cc:98:83:61:86:44:e3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00d3d34f61e484688bfff9cc703755823775998
Validity
Not Before: Aug 23 12:00:11 2025 GMT
Not After : Aug 24 12:00:11 2025 GMT
Subject: CN=33f8f6db05ef1d1121135b3a6526f17bd256ab51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6a:fe:f3:89:43:4a:ef:c8:cb:d2:48:81:8a:
56:0a:c2:9d:52:e9:e2:32:3f:41:24:81:77:ff:7f:
c1:f1:af:a2:b7:18:3c:0c:3a:64:29:63:f2:4f:0a:
a3:c8:97:1a:18:e8:52:ed:a9:04:b7:c0:16:44:eb:
ee:3f:c3:da:de:6d:7a:ea:12:b0:6d:38:31:1c:b8:
fa:44:c1:4a:af:28:a6:2b:d3:8d:16:d0:1f:47:3b:
2b:63:0a:13:e5:31:dc:6d:0f:be:e1:ad:1e:c0:3d:
82:9d:f5:55:47:fe:a0:ba:eb:1f:87:b9:f0:73:2a:
dc:60:61:98:0c:38:0d:d8:65:20:49:9b:ca:ed:7f:
6b:64:de:e8:64:33:b8:2a:ad:f1:0b:4b:f7:96:0c:
d1:4c:2f:19:e5:56:50:16:8b:0c:f8:94:82:cc:f2:
27:46:e6:f8:d7:15:3a:a1:6d:02:17:3c:b1:e1:fa:
94:59:c4:12:87:ed:e1:07:7a:da:bd:d1:aa:75:e5:
a8:6c:0b:e5:f5:a6:e8:2d:d1:57:d2:55:93:c8:d9:
52:0f:e7:2f:33:35:32:1e:b8:6c:d3:63:7c:3b:64:
db:52:79:c8:55:23:17:c7:a9:b7:c7:ba:a4:5d:2e:
37:2f:84:5e:bc:61:7b:69:6a:d4:5b:00:f4:16:7f:
80:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F8:F6:DB:05:EF:1D:11:21:13:5B:3A:65:26:F1:7B:D2:56:AB:51
X509v3 Authority Key Identifier:
keyid:B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:82:eb:a5:f2:47:45:9a:c5:3c:4c:6f:c1:c5:4e:04:b1:c6:
bd:89:a6:c5:30:18:f9:dc:80:23:1e:e2:6d:49:50:a1:ba:35:
fd:87:79:e1:81:ba:5e:e8:81:37:8b:20:d2:ff:9f:27:7e:b6:
3b:1a:80:52:e4:c8:a3:7d:b3:dc:d2:d5:a1:91:39:5f:1e:de:
35:d3:20:2e:fc:26:f9:ac:b7:76:50:3f:28:cd:f3:51:33:9d:
92:64:44:ae:66:a7:d4:b3:9f:05:e0:81:46:b1:81:80:b3:20:
7c:25:8b:d4:c4:bf:e1:3f:09:52:46:04:88:08:1f:6d:81:dc:
ef:c1:e6:43:78:7e:18:d4:e0:87:58:44:f9:da:be:d0:aa:21:
00:bf:a8:57:f9:7d:4d:3f:c0:14:f0:f1:6d:c8:62:10:64:f6:
b6:b8:fd:7a:b3:1a:1b:9f:8e:1d:b8:a1:70:f2:22:98:f4:45:
81:16:10:d8:66:b0:cc:dd:67:82:de:f0:74:8a:a9:2f:17:ca:
a7:9a:ba:2a:77:65:6f:80:ce:39:ab:a9:04:60:8e:e0:08:41:
55:d6:f3:28:5e:6c:05:08:48:f9:5e:11:b9:6c:36:39:2b:6f:
92:18:07:5b:d3:7b:4e:f2:47:04:6c:eb:9b:fd:9c:74:62:e8:
89:fb:fe:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:49:00 2025 by rpki-client