Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
File: r9rCQfMBCxrkhLwx9YStD50gZzQ.mft (raw, json)
Hash identifier: WAjo6DbSErLypoJPA/cmUtfaRTTEpu6P2+g4Nk1fx5Q=
Subject key identifier: DB:94:EE:2B:D5:81:F5:B6:2E:17:59:02:EE:C3:0E:1A:84:8C:AD:FF
Authority key identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
Certificate issuer: /CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Certificate serial: 0198D5F1A152681E47492B9AB1FF93A1AD51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
Manifest number: 0C10
Signing time: Sat 23 Aug 2025 08:00:39 +0000
Manifest this update: Sat 23 Aug 2025 08:00:39 +0000
Manifest next update: Sun 24 Aug 2025 08:00:39 +0000
Files and hashes: 1: Pyp3KZhgaPnGJ0klVfWstvZhAaA.roa (hash: 2zE2fETyOiknIdhnDsU5+xLMFz/vO5FngmYcWoMLhMg=)
2: r9rCQfMBCxrkhLwx9YStD50gZzQ.crl (hash: zmqXQ3kzkBAW8wqMGaH+RO+kG3zCBUdRLVrws+Se0vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:a1:52:68:1e:47:49:2b:9a:b1:ff:93:a1:ad:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Validity
Not Before: Aug 23 08:00:39 2025 GMT
Not After : Aug 24 08:00:39 2025 GMT
Subject: CN=db94ee2bd581f5b62e175902eec30e1a848cadff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:9f:81:94:bf:e8:68:70:bd:63:5f:63:22:
13:06:b4:45:17:6d:bd:f9:02:ef:38:3d:36:3e:d1:
60:bb:bc:19:dd:6c:c9:3c:68:b0:fb:af:e6:b8:b0:
97:8f:3f:98:17:24:48:45:2a:ba:fc:1b:44:8b:ea:
c9:65:93:c3:8d:d1:a8:4d:04:f5:6f:d3:83:ba:1c:
2a:87:e9:a7:09:67:c9:34:8f:13:34:f0:4e:68:9d:
f7:ac:fc:14:ac:78:99:3b:ae:bd:d4:38:44:87:25:
da:26:01:c6:60:a0:b5:ff:46:b7:10:af:49:99:43:
04:78:30:1d:7a:95:40:d7:d6:fc:80:1e:dc:2f:7d:
c6:75:e3:97:94:7c:40:64:a2:49:9f:ce:e4:44:8b:
31:bb:e9:0f:ea:48:c5:48:45:e7:7d:1b:b8:96:52:
f4:34:af:d4:de:80:cb:79:45:8a:b2:aa:6a:48:f1:
50:c6:96:36:26:17:04:df:83:d7:8c:5b:9a:3b:b2:
9b:d5:35:10:aa:57:3c:ae:e2:d2:e2:7b:14:5f:82:
2c:d9:b8:68:8b:f9:4c:87:63:e4:a8:fe:2e:e7:7c:
0c:d4:8a:cc:83:bd:ff:58:0b:31:3f:32:b5:c3:1e:
4b:b4:d8:3d:9c:d9:ec:27:5d:12:13:73:6b:c6:52:
69:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:94:EE:2B:D5:81:F5:B6:2E:17:59:02:EE:C3:0E:1A:84:8C:AD:FF
X509v3 Authority Key Identifier:
keyid:AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:be:c4:6e:d0:7d:f8:a1:01:e5:e3:96:be:31:7e:98:61:73:
76:1b:7a:63:a1:bf:b9:8c:4d:93:5d:d6:b7:9c:6b:77:20:d5:
07:70:fd:f7:82:6b:ea:e9:58:3b:9a:ea:f0:f5:0d:e7:fb:bf:
db:bb:99:20:de:b9:ca:56:cf:be:8e:9c:7c:53:2f:9a:c9:fb:
19:c8:16:73:e4:6b:19:48:cd:f1:23:2d:b1:34:05:cc:05:b4:
1a:83:7a:b5:0b:74:e2:84:32:07:e1:da:9d:02:81:aa:40:57:
8a:08:b9:bf:f0:e1:73:7f:5f:ca:2b:36:a7:83:7c:d4:db:06:
e6:63:fb:f5:7f:cc:27:d3:e6:0b:36:ba:6e:75:45:fe:14:07:
65:1d:d1:69:e9:35:18:d9:84:11:fa:d2:6c:9e:df:0e:6d:69:
34:93:7e:fe:0d:4d:6d:1c:be:0b:ec:28:d7:18:74:ff:9d:2e:
96:d2:f1:91:6a:2b:7e:c2:dd:51:37:c8:af:62:9d:6c:13:09:
06:3b:c2:2c:8c:98:ac:46:f4:eb:84:f4:14:3e:67:5b:ac:4c:
3d:29:1a:f5:a2:a0:76:68:5b:78:6f:04:07:e3:42:43:f0:eb:
80:90:03:e6:ac:91:f2:92:6a:f1:48:99:77:16:dc:3f:47:cf:
2d:67:d9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:04:55 2025 by rpki-client