Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
File: 9VW6bis9tVIdvHBipYwW3aG58i0.mft (raw, json)
Hash identifier: 4ee0bUoHrHGbQVMNIKgwBXy6hIUH6b1PXM8W3Dz4TjI=
Subject key identifier: FF:A2:AF:40:34:46:E0:17:2D:23:20:1C:61:33:45:41:75:1C:50:6E
Authority key identifier: F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
Certificate issuer: /CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Certificate serial: 0198D5158C00A836B2C04226075431643F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
Manifest number: 040A
Signing time: Sat 23 Aug 2025 04:00:15 +0000
Manifest this update: Sat 23 Aug 2025 04:00:15 +0000
Manifest next update: Sun 24 Aug 2025 04:00:15 +0000
Files and hashes: 1: 2n7OMl3jQfBIql5u4fGHwPSLtNw.roa (hash: 1rKFkHzCGzWhEvrCyPc6hzfuk0GlXlkcWKE6261l+UI=)
2: 9VW6bis9tVIdvHBipYwW3aG58i0.crl (hash: B+QH8Bae8hVSTA9JAr1KJNmBphpDKhQbo+a3SWMVJto=)
3: R9C9RHOYfHsQX3_4qdQpXgxkEVg.roa (hash: TG8phgVc45ubyKw+a5c8BVXvVbA9fhRO3sFvs8XmDD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:8c:00:a8:36:b2:c0:42:26:07:54:31:64:3f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Validity
Not Before: Aug 23 04:00:15 2025 GMT
Not After : Aug 24 04:00:15 2025 GMT
Subject: CN=ffa2af403446e0172d23201c61334541751c506e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9b:b0:32:ba:b0:d9:be:33:36:6a:ed:88:35:
e0:ed:79:df:52:42:2f:e7:44:d1:f1:fc:e4:ec:6b:
4f:2b:87:00:09:3c:74:c2:8b:88:f6:de:54:3f:73:
14:98:40:21:4c:cb:ab:8e:0a:b7:a8:56:23:75:ed:
14:da:55:93:b2:69:0d:bf:eb:b7:a3:a8:65:35:bb:
a8:7e:96:fc:27:46:24:38:f5:ee:5c:53:13:d5:b9:
70:69:61:5d:4f:75:5e:72:15:71:eb:11:0b:d9:61:
dd:e3:ad:9f:02:50:18:27:4d:4a:b9:5b:e1:4f:dc:
49:51:88:2c:ae:93:72:dc:fc:cb:66:49:d9:d2:87:
ed:1d:9b:11:63:5c:67:af:04:ad:27:e0:24:dc:c7:
7d:c0:3a:bc:88:ff:bd:eb:33:2a:e6:90:e1:4e:eb:
cd:ef:66:91:23:a7:cd:11:b8:dd:c6:d0:f2:a8:0e:
0f:e4:41:b4:ef:31:a6:20:71:de:0f:71:c6:4c:22:
bb:bd:61:13:b8:5f:cd:58:21:b1:8c:63:ef:1f:b7:
f7:c0:1a:24:19:16:e0:c1:10:b8:b9:f8:45:28:d5:
cd:09:32:83:ff:fc:c5:53:34:a6:1c:79:00:ab:82:
b3:b2:b0:86:8a:f8:9c:3b:b6:03:ea:8b:5b:9e:a0:
e1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A2:AF:40:34:46:E0:17:2D:23:20:1C:61:33:45:41:75:1C:50:6E
X509v3 Authority Key Identifier:
keyid:F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6b:f6:c2:30:0e:fa:a6:e7:37:a5:6f:c0:34:1e:9e:e0:1a:
d2:2a:55:31:08:78:dd:e1:f9:77:9a:cb:8e:1d:b7:2f:24:10:
8e:7e:48:b5:7b:e3:96:43:f7:55:ef:55:0e:39:70:74:94:88:
2a:14:b3:03:2e:0b:ec:d9:83:95:46:5c:ee:0c:cd:d1:f9:ef:
1d:da:05:58:ca:98:d1:c1:5f:91:e2:21:0f:af:2d:53:4b:71:
93:2b:c5:d9:a5:f2:1a:13:7f:d0:4a:7e:f5:ad:c7:ac:14:1d:
e8:b4:52:42:e3:b3:39:e8:75:ab:f7:c5:cc:ce:94:1f:c5:05:
df:43:ac:b0:3a:92:a9:9f:be:03:a4:40:dc:92:bb:77:57:2f:
86:47:02:12:12:40:87:76:63:ce:c2:6c:17:ee:8d:48:5d:ab:
b2:14:43:96:dc:f4:c9:5d:96:6e:cc:cc:71:d0:a0:b8:0f:4c:
70:a9:53:3d:df:c6:62:3e:6a:b7:7e:e1:d0:8d:6f:ef:31:a0:
96:63:c7:0d:e6:e0:52:32:3f:d2:62:7d:e6:7b:17:d3:69:86:
60:c7:45:d4:a9:75:d5:54:10:58:88:a1:4f:ab:ec:0b:9e:f8:
2a:b5:ec:df:1f:57:f9:49:00:ce:50:1d:cd:21:b7:fb:10:2b:
27:68:f1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:11:07 2025 by rpki-client