Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
File: cJ626qpJ3WtIPgSxQ05NrHntnTE.mft (raw, json)
Hash identifier: 62ChnSoY91buiAvurdFMf5SqQD0iCp6Q9HXbghSUr2g=
Subject key identifier: C1:01:A9:47:18:D9:2F:FA:8D:49:ED:14:F1:47:FF:81:C5:0C:8C:D9
Authority key identifier: 70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
Certificate issuer: /CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Certificate serial: 0198D54E6D6CB5975B04592A151A0955C686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
Manifest number: 11D0
Signing time: Sat 23 Aug 2025 05:02:23 +0000
Manifest this update: Sat 23 Aug 2025 05:02:23 +0000
Manifest next update: Sun 24 Aug 2025 05:02:23 +0000
Files and hashes: 1: cJ626qpJ3WtIPgSxQ05NrHntnTE.crl (hash: b8SWknqRBsJoesn2DJ8dcQZlgliBKCCtQ3bttYMEjqM=)
2: pszj2ow_8e4yhWJ4p_2OlR6lAZA.roa (hash: Bkleu+zwlUm+Ij3pdF+L2pghaKZyEcPMCuJgamcNwU0=)
3: x05s8cxNFz3Ea01ENwVR0hPrDdY.roa (hash: 7Z21y2oOiXJmBN38XDJhWItGwbzVeLKb+Gde/eJFRgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:6d:6c:b5:97:5b:04:59:2a:15:1a:09:55:c6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Validity
Not Before: Aug 23 05:02:23 2025 GMT
Not After : Aug 24 05:02:23 2025 GMT
Subject: CN=c101a94718d92ffa8d49ed14f147ff81c50c8cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ce:b0:a9:d0:ac:a9:2a:30:af:8d:8e:a3:24:
80:85:0b:f7:81:40:4c:50:59:68:7b:16:23:d1:19:
da:06:90:66:c7:8f:c6:fb:cf:da:72:5d:12:3b:d1:
eb:30:ca:bf:66:de:47:82:97:6c:2a:e4:07:2e:c7:
20:a6:fc:e2:fb:56:9a:a3:58:87:c3:3c:50:bc:a7:
28:81:ce:0d:bd:77:a1:9e:89:48:4b:6d:a4:a6:92:
61:ba:16:26:0e:34:7a:44:06:e7:a4:01:ff:0e:20:
49:be:96:31:62:c4:d0:b6:12:c3:41:98:c6:16:dc:
42:39:0a:16:16:93:b5:b4:0e:82:5d:d5:72:a6:ec:
a7:01:02:ee:cd:9f:88:f0:f4:c1:84:b2:37:b0:d3:
77:40:2c:1c:6e:56:e4:3f:1f:2d:52:eb:8e:11:be:
70:bf:91:df:10:97:bd:be:a6:d8:59:0b:45:e0:e4:
2e:91:d9:26:ea:03:a8:9d:27:ad:5f:10:98:84:b9:
08:1a:f7:39:e9:e2:b1:76:ef:29:5a:b4:d8:05:4d:
89:fb:6f:a7:78:96:29:58:bf:e4:bd:fd:a0:2f:ae:
54:68:a7:d9:ed:aa:02:ca:e9:d1:ca:bd:c9:77:7f:
45:21:0b:37:55:9d:f2:6e:c5:2b:9c:42:5a:ac:2d:
d1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:01:A9:47:18:D9:2F:FA:8D:49:ED:14:F1:47:FF:81:C5:0C:8C:D9
X509v3 Authority Key Identifier:
keyid:70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:26:ff:42:76:48:fb:11:2c:69:72:54:b6:2b:4b:9d:c8:aa:
b9:3e:d9:f4:4f:f3:bd:b6:3e:ed:99:2b:27:7d:59:02:67:97:
ad:e2:f1:29:42:d8:2e:2f:af:36:bf:21:a6:f9:d5:d9:b7:27:
80:85:17:f1:94:80:ff:5b:c5:49:10:53:51:25:d0:96:8f:ca:
9c:44:55:f4:05:56:0a:da:5d:24:6c:58:b5:b0:4e:42:53:0b:
67:52:d2:8b:88:12:fb:17:48:16:39:ef:1e:f3:3e:2f:1b:e1:
3f:19:1c:aa:bd:a4:95:ea:3e:8b:fd:05:82:d0:67:b7:6a:3f:
84:59:4c:c7:82:64:fd:f2:60:fe:10:e4:c9:22:9a:dc:e0:9e:
93:43:f2:e2:17:a7:68:b3:99:c1:e1:8d:b7:31:12:bc:07:26:
1b:3a:fb:c0:11:e7:cf:bd:dc:b1:5a:57:6a:fc:9e:fd:b0:9d:
e2:48:fd:48:a4:8a:f0:d8:36:b0:16:84:80:c9:ac:17:17:60:
b3:ee:89:93:07:01:4c:fe:d7:1d:c2:87:38:ea:48:76:88:59:
57:40:b7:e3:13:a2:fd:c4:c8:ab:54:03:6f:83:fc:d0:ab:36:
6d:08:ed:76:82:46:fb:2a:a8:f8:e8:21:18:2f:fd:1d:c5:fe:
7b:06:69:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:23 2025 by rpki-client