Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
File: 9BGAp8UWZ-w4dedl8kX5CThhJXE.mft (raw, json)
Hash identifier: yAt1/gJW3FeyaurNowDjNJHtJ9gBqvbnfmqva453ATI=
Subject key identifier: EC:01:32:E9:0F:A4:D5:B5:27:83:A0:6C:73:6A:A5:34:A4:FF:C7:EB
Authority key identifier: F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
Certificate issuer: /CN=f41180a7c51667ec3875e765f245f90938612571
Certificate serial: 0198D850A6614C83E7C7B851EEE9A73CD234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
Manifest number: 071B
Signing time: Sat 23 Aug 2025 19:03:40 +0000
Manifest this update: Sat 23 Aug 2025 19:03:40 +0000
Manifest next update: Sun 24 Aug 2025 19:03:40 +0000
Files and hashes: 1: 9BGAp8UWZ-w4dedl8kX5CThhJXE.crl (hash: 1tf1njDIL6p7zpjEzLZ57j8jL824MDOaU5Lyom+1tHQ=)
2: Fu214pqREiMNysqnZ9A7Q5Jm5yE.roa (hash: 3AsnPktXMzidA1tsY7S+Rc/2XsSBvEXEVlda+G5oNPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:a6:61:4c:83:e7:c7:b8:51:ee:e9:a7:3c:d2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41180a7c51667ec3875e765f245f90938612571
Validity
Not Before: Aug 23 19:03:40 2025 GMT
Not After : Aug 24 19:03:40 2025 GMT
Subject: CN=ec0132e90fa4d5b52783a06c736aa534a4ffc7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e4:52:78:81:42:68:72:42:a1:8b:ab:31:6f:
8a:06:05:7e:31:98:3d:3a:3f:1a:6c:94:9f:09:3a:
85:bd:31:a6:1f:f1:fb:61:a3:29:dd:80:eb:81:5b:
d6:20:62:ce:94:dd:4f:c0:45:84:c1:2d:29:1a:f8:
05:48:af:8f:74:ae:16:a5:0c:29:74:37:ce:0b:db:
0a:d0:f5:2b:1b:3a:f3:a0:1d:21:1a:27:d4:7b:05:
77:38:c1:6a:21:6e:eb:3e:62:b7:4d:d8:e4:10:3d:
ba:c5:dc:a1:30:ba:e7:65:a8:2f:3c:b6:93:0c:e0:
e1:75:c8:10:48:de:55:12:a6:25:7f:7f:d6:ed:49:
2c:52:55:41:f3:6c:cf:e1:60:2e:2a:9b:45:6c:4a:
f6:34:f8:44:e8:7a:c5:a2:25:8f:b1:7d:39:2a:46:
9a:39:1e:29:69:a4:63:d1:63:d8:5e:d7:0b:ed:45:
8c:67:3c:2a:74:2c:0d:20:11:fc:35:92:6e:69:d2:
87:06:b3:97:bf:8d:f6:4b:b8:74:2d:22:94:c4:a0:
c3:8d:44:53:5e:90:73:60:fb:aa:a0:35:db:01:e3:
ae:15:1d:7a:04:4a:c5:b7:4c:12:b7:83:2a:e2:da:
86:4a:85:bd:e1:11:b4:5b:23:dd:3e:ce:00:a9:f5:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:01:32:E9:0F:A4:D5:B5:27:83:A0:6C:73:6A:A5:34:A4:FF:C7:EB
X509v3 Authority Key Identifier:
keyid:F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:4a:b2:01:05:f6:e8:7f:64:01:10:c1:9a:0a:8b:2f:39:91:
58:01:28:1e:b5:5a:64:bd:85:1e:c8:f9:83:a1:2a:1c:d7:51:
3b:4a:02:29:ff:18:b0:2e:04:60:8b:f0:4d:d0:c0:17:77:28:
00:16:37:f8:5a:94:6e:27:30:f9:8f:25:0e:b4:b2:35:b2:da:
3c:54:85:3d:34:6b:2f:f6:09:82:12:76:df:48:b1:ea:9a:e4:
24:a4:6d:32:92:5e:47:71:2b:94:c2:99:c3:96:3f:88:52:cf:
b9:96:52:10:af:d3:b4:77:cf:30:13:8e:c6:3b:dd:45:37:01:
75:be:5e:6a:f5:18:8b:04:6d:12:0c:d3:b2:c7:9f:ea:d8:84:
04:c2:66:69:eb:70:9f:8e:19:9d:b9:22:cf:16:56:e5:c4:34:
28:00:2f:d9:6b:dd:ac:c3:09:62:17:55:c9:23:4f:a8:0e:1e:
48:6f:d1:2a:1f:ef:4b:12:f8:72:04:99:c7:67:37:2d:b6:7a:
03:3c:79:31:cf:ac:4c:52:8b:c2:1f:65:da:60:25:1b:c6:1b:
61:ec:53:4b:2c:0c:60:4a:0d:6b:0c:3e:19:ad:47:c0:60:af:
73:4c:15:93:64:22:10:6f:0a:3f:c2:1f:2c:9b:77:b0:57:31:
87:c3:05:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:34:17 2025 by rpki-client