Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
File: cRJRMUT46vqDbEzc9PdY0cy2cgo.mft (raw, json)
Hash identifier: YBS+LLoFcEDs9LfCGvlim6mvrENz1wvNBwLXHjgHs+8=
Subject key identifier: 09:5D:A9:27:71:88:56:B4:78:89:C6:5F:18:4F:65:F8:6E:24:87:EF
Authority key identifier: 71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
Certificate issuer: /CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Certificate serial: 0198D6987564FCACD14E144F781436BC4BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
Manifest number: 0F10
Signing time: Sat 23 Aug 2025 11:02:52 +0000
Manifest this update: Sat 23 Aug 2025 11:02:52 +0000
Manifest next update: Sun 24 Aug 2025 11:02:52 +0000
Files and hashes: 1: BxEUAThM-kvROTVKplPSESs7hAg.roa (hash: 0mkufGxGJMEMwQK9DTn258kOier8V3h24PYvgtJUzDM=)
2: cRJRMUT46vqDbEzc9PdY0cy2cgo.crl (hash: ICiCDbQyjpJCe6WxB9668Ge8Nrk/HnAPydbhzQ8fPoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:75:64:fc:ac:d1:4e:14:4f:78:14:36:bc:4b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Validity
Not Before: Aug 23 11:02:52 2025 GMT
Not After : Aug 24 11:02:52 2025 GMT
Subject: CN=095da927718856b47889c65f184f65f86e2487ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:b5:55:cd:e9:41:af:61:60:55:c5:97:af:
29:54:5b:7c:62:cf:b7:6f:11:3b:50:ab:e6:82:76:
c5:d3:2e:fb:5e:f9:68:3a:73:da:aa:48:f1:1f:15:
6b:ae:58:bb:17:67:1a:ec:91:3b:52:25:cb:2b:cb:
e1:a6:d3:57:93:3d:ea:60:cf:a7:5a:3e:2c:b1:e7:
91:52:6b:8c:15:87:ed:48:cb:e9:6a:63:1c:eb:6a:
a8:e0:45:95:82:f3:eb:4b:7f:e2:cd:bf:ca:1e:f5:
ef:81:da:39:d6:54:ef:c9:d5:4c:1d:0e:2e:34:0b:
0f:57:06:4e:02:37:5c:25:91:9c:7a:f0:7f:83:e5:
b8:72:e1:05:17:f9:61:06:47:a5:aa:92:82:35:2c:
46:4d:57:33:0e:0a:31:77:03:85:21:99:ed:4a:78:
1a:10:90:3a:30:54:ee:e8:14:71:30:11:17:6a:90:
30:97:c7:92:8f:09:fe:14:b6:76:15:1f:bf:48:55:
07:b2:97:fa:de:7a:73:d4:c2:c2:09:a2:39:f1:17:
a1:3b:ad:70:c3:ed:06:cb:81:57:19:cb:4e:9f:01:
2e:8e:70:d5:d6:ed:3d:38:8c:79:d5:05:e7:30:9f:
96:c7:cf:2c:6e:92:b1:f9:76:cc:fb:a1:22:c2:91:
71:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5D:A9:27:71:88:56:B4:78:89:C6:5F:18:4F:65:F8:6E:24:87:EF
X509v3 Authority Key Identifier:
keyid:71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:20:f9:52:e5:28:bb:e0:8a:c3:99:f1:53:52:49:9b:2b:e2:
1d:9b:dd:84:39:b3:48:5d:4c:12:cd:25:92:aa:54:fb:30:92:
36:2c:95:cf:0b:85:c6:60:d8:b5:fe:38:80:a5:6a:ef:ce:5a:
6c:2f:62:e0:ff:da:df:8e:2d:92:c3:e6:b9:bd:14:2f:bd:ff:
d2:94:70:8f:1f:e0:99:20:d9:cc:30:0a:60:f3:5c:92:4d:dc:
11:8e:d5:cc:5d:36:6b:d4:dd:3a:bf:df:e8:c2:4b:50:d5:13:
60:07:df:da:db:aa:51:c3:36:c7:e5:02:6e:b2:8a:d1:19:b3:
a3:37:ce:d3:24:0d:1a:47:83:53:b4:6e:06:89:71:98:d2:55:
81:98:70:18:48:0d:23:06:a2:6e:5e:9e:2a:67:8d:5b:57:17:
e7:71:be:5c:c7:04:79:17:c3:9f:f0:20:c3:ce:24:e0:c7:cb:
f4:92:2a:91:fa:58:bb:56:0c:79:5c:3d:fe:33:f6:10:bb:1a:
72:aa:db:ce:ee:8b:a9:90:48:75:61:7f:31:95:de:43:bb:26:
e7:46:9a:3b:19:ec:62:3a:99:15:fe:30:1d:aa:fc:7b:4c:4c:
ce:7c:e4:21:0d:5c:d5:79:16:24:b4:f6:ea:0e:db:da:36:aa:
b6:28:ad:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:58:19 2025 by rpki-client