Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
File: E9g7Il3TOGDFHcRKqI218D3BWnQ.mft (raw, json)
Hash identifier: JR3z3GcKYFR8Ho6ebs/XANCmSnJqyuCqLXVLxU4l084=
Subject key identifier: 1A:4B:5C:15:08:B5:4A:BC:79:F5:87:00:82:1A:A1:29:41:17:38:A5
Authority key identifier: 13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
Certificate issuer: /CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Certificate serial: 0198D4A81D4E5AB0A6BBB04B7E70F89AE74F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
Manifest number: 15DA
Signing time: Sat 23 Aug 2025 02:00:43 +0000
Manifest this update: Sat 23 Aug 2025 02:00:43 +0000
Manifest next update: Sun 24 Aug 2025 02:00:43 +0000
Files and hashes: 1: 9htWy01pg2D2zYDPH366mUte-18.roa (hash: EzJGaZ3hn2rEMiPwCBKqVw/ZKa/ezLWPSIlGniopSlk=)
2: E9g7Il3TOGDFHcRKqI218D3BWnQ.crl (hash: 6RByFWEEaCdP3HH2H4vIQLuIpkN+C1kMBJQEh2bSIPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:1d:4e:5a:b0:a6:bb:b0:4b:7e:70:f8:9a:e7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Validity
Not Before: Aug 23 02:00:43 2025 GMT
Not After : Aug 24 02:00:43 2025 GMT
Subject: CN=1a4b5c1508b54abc79f58700821aa129411738a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:63:75:f2:c2:be:2f:52:c4:1d:85:02:60:60:
b9:66:01:ec:cf:ac:d2:c7:3b:72:6a:14:44:46:60:
6f:7a:9a:45:89:74:0d:9b:59:1e:d5:a6:71:81:b1:
d5:6d:4e:27:db:97:c6:9f:f3:5a:83:a7:55:c1:a7:
30:e7:01:77:0c:a3:c9:6d:01:de:8e:24:bc:29:17:
c0:f9:a6:91:63:ee:2c:06:97:0f:c2:83:7c:54:5f:
96:bf:9b:81:d9:53:98:e5:0a:f2:4e:a4:34:9e:ec:
ef:4a:47:01:0a:bf:65:92:d2:97:84:08:b2:05:49:
a0:5e:d8:b5:70:4b:b5:8f:56:d7:3e:b4:a1:84:2b:
d9:15:da:74:c9:ce:b4:c3:8a:11:44:7c:89:b9:df:
93:4d:a7:15:cd:21:61:65:58:f3:71:90:53:64:6c:
ff:ff:79:e4:c0:ef:8a:b3:24:f2:39:44:57:df:d8:
b6:6d:47:be:7b:0b:24:23:79:88:76:a2:83:2f:46:
a1:3b:18:51:41:9a:bc:72:83:dd:6d:34:fb:05:95:
15:08:cc:39:b6:f8:11:9b:79:75:04:da:c8:f4:17:
de:e0:36:67:72:0a:1c:95:c6:64:d0:1f:d6:1d:b6:
dd:07:c9:01:e8:6b:6a:bb:86:90:de:71:6d:88:7e:
26:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4B:5C:15:08:B5:4A:BC:79:F5:87:00:82:1A:A1:29:41:17:38:A5
X509v3 Authority Key Identifier:
keyid:13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d9:f3:ba:29:5a:17:80:6e:99:84:4b:f9:67:45:bb:cd:69:
2a:8b:af:b0:5d:79:0f:c2:a2:ad:38:02:d8:4a:d8:29:9e:04:
cd:ad:b9:a3:b4:3a:ec:cb:76:24:b2:5a:36:4d:83:24:a2:13:
a2:5b:c2:d6:0e:8f:df:05:0e:0d:22:60:0e:c4:c8:20:de:22:
64:8c:60:40:26:03:6b:64:7c:5e:92:62:e8:4f:79:e9:74:ce:
7d:de:58:31:15:7a:30:61:d2:fb:87:2a:5b:2a:87:fb:c8:a4:
ef:e8:c6:c4:d6:b6:d6:b6:d8:b7:8a:18:ab:28:0b:9c:b4:48:
98:a4:de:4b:fb:bb:b2:6f:37:af:c9:21:b7:43:61:b0:a3:4a:
4b:a6:3c:30:6e:b2:69:82:5a:a3:f7:ed:78:12:42:57:46:ca:
03:79:23:9a:c3:c2:f8:08:33:b8:62:41:49:51:2f:78:ce:fd:
29:91:6c:91:02:57:dd:5b:f7:5a:7a:a4:23:92:12:05:18:63:
b2:2b:af:ad:83:f2:f3:12:20:64:bc:c4:a0:36:f0:f9:1f:85:
62:97:41:3b:f6:63:7d:af:83:d1:f6:b9:54:0f:c8:02:d2:ce:
b2:9d:8a:8a:df:11:c5:10:d0:0a:8e:79:4b:23:19:f7:5b:9e:
eb:ca:93:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:35 2025 by rpki-client