Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
File: riCckmRq40LKpdRtwdNzWg0uexQ.mft (raw, json)
Hash identifier: uIs5HLZGwvLEv3uRHthfyEv3nbYxKEWVksaVvI5VKtU=
Subject key identifier: F9:04:0D:BD:61:02:DF:99:11:C2:F0:BE:84:34:12:0D:1C:04:8B:95
Authority key identifier: AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
Certificate issuer: /CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Certificate serial: 0198D5F145E1C5D5CD4A3447C9EEF469D80D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
Manifest number: 0E4D
Signing time: Sat 23 Aug 2025 08:00:15 +0000
Manifest this update: Sat 23 Aug 2025 08:00:15 +0000
Manifest next update: Sun 24 Aug 2025 08:00:15 +0000
Files and hashes: 1: WE4vStdUw7e2RexA2uVQrcHSC4Y.roa (hash: UJ9it5wcaDKphifUsLvzyU+8UhqAc1r+2HZRVAecKf8=)
2: riCckmRq40LKpdRtwdNzWg0uexQ.crl (hash: fsMJvmUJMtHc77NIwn24O4P410JB0owOvX2lE4jI8iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:45:e1:c5:d5:cd:4a:34:47:c9:ee:f4:69:d8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Validity
Not Before: Aug 23 08:00:15 2025 GMT
Not After : Aug 24 08:00:15 2025 GMT
Subject: CN=f9040dbd6102df9911c2f0be8434120d1c048b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:a8:94:99:4c:f6:9d:8d:9c:fa:ea:78:57:
fa:ce:db:b7:be:4c:a0:ae:d0:b5:5c:59:57:c5:85:
79:86:1c:de:0f:a9:29:14:17:4d:79:0c:c5:93:f2:
06:48:07:cd:5d:54:82:33:6e:8f:8e:1e:8e:ca:12:
b0:37:6c:79:ca:e7:74:43:d2:5a:28:8e:25:1e:e4:
af:db:81:ad:89:af:66:19:a4:6d:15:27:e4:2d:3c:
7f:4d:1e:8f:e3:73:72:10:db:99:51:06:0f:8d:b7:
e3:e9:f8:f8:1c:42:ca:ac:3a:47:b6:46:ff:d9:72:
8c:fe:08:51:b0:33:7e:2f:1c:f7:c2:22:d4:7d:f1:
5f:3e:47:a8:54:ec:4e:6f:70:79:19:d6:ad:37:9d:
9c:19:04:83:f9:b1:e0:f1:84:62:06:61:f5:6b:4e:
c3:f1:71:a0:24:19:84:4a:d8:cb:28:4f:ea:69:49:
be:10:68:6f:49:a3:38:bb:cd:d0:e6:c6:21:3e:14:
cf:8d:5e:1e:05:7a:a4:ed:de:3f:f2:8e:77:6a:67:
49:30:6e:9d:10:7c:93:4d:5e:59:8f:7b:88:58:1a:
a2:34:d5:33:11:c6:51:b9:58:37:2e:bc:51:61:d5:
81:e4:fb:94:4b:fc:b4:82:99:f7:7a:90:2d:c3:4d:
54:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:04:0D:BD:61:02:DF:99:11:C2:F0:BE:84:34:12:0D:1C:04:8B:95
X509v3 Authority Key Identifier:
keyid:AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e7:8b:e9:27:a9:5b:5f:64:26:a8:f6:f3:30:e7:66:23:49:
bb:ae:7e:26:48:02:15:29:b7:97:e1:e2:e1:3f:b5:b8:7b:df:
1e:b8:11:08:f9:27:03:ca:1c:cb:5a:da:f0:ac:e1:28:ee:ae:
b9:4d:43:b3:55:7b:4c:d9:98:bc:45:f1:a4:99:bf:dc:86:45:
82:21:2d:9d:c0:7f:9a:0c:a3:9c:a6:d8:0b:69:81:03:ab:5e:
3c:f2:0e:25:6c:f0:80:1d:31:fd:76:49:68:34:43:ba:15:e1:
13:41:41:d6:63:e3:0e:f4:b2:92:17:c2:59:4c:d5:04:0e:f0:
17:f6:97:0d:15:49:d0:b9:a3:28:d1:4f:8a:89:84:12:03:c9:
5e:96:a5:31:2d:2a:ed:32:f0:26:eb:70:35:51:59:e1:fa:24:
d7:fe:51:4b:3a:43:c9:ce:2d:93:e1:b6:ea:4d:62:22:db:ca:
f5:85:91:68:45:a9:71:e5:0d:a9:9d:a6:63:ba:94:1d:46:95:
85:f4:ff:90:2b:d7:c2:34:bf:e8:d6:31:ff:83:74:3a:2c:98:
b5:75:04:46:a4:f8:4c:64:ef:59:87:ae:c9:a2:9b:cf:8e:db:
52:39:a2:e6:c9:b7:6c:5c:a3:42:54:bb:26:0b:6f:b2:9b:43:
4e:18:c7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:54 2025 by rpki-client