Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
File: cX9V88YAexy91-ggiQVpAGdXs2Y.mft (raw, json)
Hash identifier: iY+/APqPCtMaz7v1xVtBbIOKIILUdt9PmSbsKzjr/2Y=
Subject key identifier: 5C:2E:E8:A0:14:87:F5:36:18:AA:96:C0:79:8B:37:76:F8:39:B8:A4
Authority key identifier: 71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
Certificate issuer: /CN=717f55f3c6007b1cbdd7e820890569006757b366
Certificate serial: 0198D472AAD1E9490F96579FB7F449E8B3B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
Manifest number: 0DD8
Signing time: Sat 23 Aug 2025 01:02:21 +0000
Manifest this update: Sat 23 Aug 2025 01:02:21 +0000
Manifest next update: Sun 24 Aug 2025 01:02:21 +0000
Files and hashes: 1: BNamB5vKS8VYoQEENNZLcbAD0yY.roa (hash: AZc2M6A0pF1sMbjRSCCXbLIDgidX2dUycGenbS2p6qA=)
2: cX9V88YAexy91-ggiQVpAGdXs2Y.crl (hash: XdGBOCQVgSExL5ADyiP5/xQOo2yLYg/P8q4hyRtVajc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:aa:d1:e9:49:0f:96:57:9f:b7:f4:49:e8:b3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=717f55f3c6007b1cbdd7e820890569006757b366
Validity
Not Before: Aug 23 01:02:21 2025 GMT
Not After : Aug 24 01:02:21 2025 GMT
Subject: CN=5c2ee8a01487f53618aa96c0798b3776f839b8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:3e:ca:9c:2a:97:b5:c8:e1:0f:a5:54:34:
b0:91:cd:2f:21:7d:24:6a:ad:50:c0:0a:3e:3d:11:
3b:c5:87:51:ca:57:24:af:44:6d:48:1d:ed:cf:9c:
c6:46:58:9a:8c:72:eb:37:ff:25:25:ea:82:f8:ae:
c8:65:a2:4a:f2:83:1c:3d:ab:dd:d2:26:e8:51:ab:
ff:82:5d:41:99:d9:9e:0b:20:26:e1:43:24:65:a7:
1b:34:5e:f7:37:70:38:6f:ab:a3:6f:e6:c8:a8:ac:
9e:18:82:28:95:1f:1d:2f:7e:d6:04:63:15:53:ca:
14:c7:9b:2c:fc:71:42:67:33:13:b7:f1:97:f2:e1:
ba:05:a3:d8:e6:3f:b3:6f:2b:8c:fb:25:e6:33:13:
5a:89:f0:23:f4:f8:4a:be:2c:12:bf:8e:a9:d5:7e:
82:0b:1e:aa:db:be:59:94:9b:4e:b5:cf:9d:14:ea:
b9:97:c3:8e:25:0f:55:f3:19:93:7e:db:24:0d:14:
15:af:b1:f3:6a:2d:3d:54:96:47:fc:09:dd:cc:6d:
99:09:7c:c2:b5:f1:7f:a4:64:15:8e:4a:2e:c5:80:
9d:e4:37:a2:b6:bc:5d:67:c7:10:90:64:3e:b3:d5:
7e:34:3e:da:af:be:5b:2f:df:1e:15:5e:13:fd:17:
1e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2E:E8:A0:14:87:F5:36:18:AA:96:C0:79:8B:37:76:F8:39:B8:A4
X509v3 Authority Key Identifier:
keyid:71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e1:c0:7e:75:ee:1d:c7:dd:85:dc:b0:95:8c:7d:1a:cc:4c:
df:8b:6b:20:4c:4c:2e:aa:87:c3:d3:8c:5c:6d:c9:c6:c1:36:
bb:7f:d9:5a:6c:f0:8f:40:2f:10:00:10:be:eb:5a:d6:56:ea:
8a:72:a1:26:9a:ce:83:3b:28:f6:82:1d:76:b5:04:3d:b5:13:
ef:00:3f:48:b3:63:d6:f6:85:be:36:3d:a9:2c:fc:32:14:e1:
a4:a5:ac:0f:a8:19:1c:90:0d:0d:95:14:6b:7d:81:e2:e9:22:
74:d5:af:84:67:c1:e0:66:d5:3c:96:d9:a9:c6:5f:90:e5:9a:
e7:40:26:85:a2:c5:99:c8:b0:bb:ee:6a:1f:c7:ba:2e:c9:1f:
1d:c7:56:dc:07:de:2d:b0:42:73:c5:b2:ca:f3:b1:0f:41:6e:
82:57:29:d0:6c:9b:78:4c:4d:ea:35:bf:f8:51:fa:03:88:8f:
9c:08:26:22:53:4e:21:bd:ea:a6:2f:45:1d:18:56:2b:87:e0:
f3:09:a1:52:f8:1d:14:34:a8:6c:62:94:3a:ed:4c:5e:ef:e5:
b9:a9:88:28:e9:66:70:f2:3c:1b:89:a4:88:de:08:01:a0:56:
a6:23:34:87:21:53:00:7b:26:ff:11:16:3f:f1:33:3d:64:12:
27:66:63:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:07 2025 by rpki-client