Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
File: CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json)
Hash identifier: KxB33B9iJiFgI6vfJGLZfI1k5L41nZsCkXsMz7YLxHc=
Subject key identifier: D2:36:FF:C0:BA:9C:C2:62:EC:22:50:7B:F9:E8:CD:83:97:BD:2E:3B
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial: 0198D47451C14E9A28BF02F499F18833118E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
Manifest number: 15E6
Signing time: Sat 23 Aug 2025 01:04:09 +0000
Manifest this update: Sat 23 Aug 2025 01:04:09 +0000
Manifest next update: Sun 24 Aug 2025 01:04:09 +0000
Files and hashes: 1: 7YGMzeES1KkLAsbbmtI6ZjvO9Q4.roa (hash: l1BU7g4Ila9ufWlHn68dydGGRXENxO9riUoJiMBfymw=)
2: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: iMeu6hBcPmKmXYea9CjfCu33MD6LJecd/VwYUfKCN2E=)
3: UJ4AA8lthTvUaOv8y96F5tCFgzY.roa (hash: tgN2dNaoq5w5rynmNpRaU4NnYl8mkFWnYFqCjapx3rI=)
4: nRz9AftCLig4OmS0E1eBTIrPa5M.roa (hash: ea2h97J02X030CkXXWTZE1BGZvnjhrqY95EK1+tYFdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:51:c1:4e:9a:28:bf:02:f4:99:f1:88:33:11:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
Validity
Not Before: Aug 23 01:04:09 2025 GMT
Not After : Aug 24 01:04:09 2025 GMT
Subject: CN=d236ffc0ba9cc262ec22507bf9e8cd8397bd2e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:7b:05:cf:a7:58:19:c8:12:ff:92:d2:21:
69:af:90:52:69:71:df:34:21:76:91:66:01:9a:2d:
fa:3f:e9:ca:7a:85:a5:73:dc:bc:2d:45:d5:22:8d:
91:78:ff:36:f1:39:d8:66:aa:13:75:11:b7:69:d9:
8d:58:00:d5:55:a4:01:19:cd:f6:e5:e1:dc:13:26:
ab:90:27:89:7f:6b:7d:67:dc:c6:48:59:de:a8:0e:
7c:1d:cb:26:8f:bd:e3:5a:0c:96:98:9b:ed:c3:b6:
ce:a2:07:74:b1:9c:a0:56:f1:18:00:89:9e:6e:c4:
fa:fe:40:45:c4:da:04:ec:91:97:56:91:e0:1c:55:
85:42:61:6f:94:8a:3b:20:43:30:b3:47:bc:e7:48:
c2:7b:84:e3:8f:1d:4e:d9:ef:4d:21:a2:33:ff:61:
be:60:75:d7:6f:54:90:7e:47:22:7a:dc:8f:90:b6:
3d:fe:33:70:af:bb:11:4f:f9:78:aa:61:08:04:3c:
64:92:6f:05:b7:b0:90:77:94:e5:71:2e:3b:f1:e0:
e4:9e:d5:c3:31:96:f5:d4:d8:b9:e3:0e:8b:38:89:
6d:b0:7e:f9:de:1e:10:35:e0:3e:b8:9c:83:ed:53:
db:0d:99:4d:df:77:fc:ce:0d:4f:42:58:3c:98:0a:
a6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:36:FF:C0:BA:9C:C2:62:EC:22:50:7B:F9:E8:CD:83:97:BD:2E:3B
X509v3 Authority Key Identifier:
keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:46:24:ae:2b:3c:4a:5b:8a:8a:5a:77:64:74:f2:4a:d7:d9:
f6:fe:2c:22:c0:b9:a2:e8:00:29:fa:46:b4:70:b4:c6:ce:17:
96:95:eb:d1:a4:74:00:f8:42:06:10:ba:f7:d0:b2:e4:40:aa:
27:97:1e:6f:32:f1:f6:2a:f1:a1:ea:f2:22:34:53:45:16:4f:
a7:5d:7c:e8:50:5d:00:2b:07:bd:ea:4d:ae:d0:76:f8:16:b6:
8e:8d:69:46:05:0d:76:9b:f3:7f:1d:fb:98:84:28:40:39:02:
6e:aa:99:7b:64:97:43:1d:cb:38:b1:66:66:bc:03:54:90:99:
08:16:e4:3b:f9:56:d8:0b:2d:3a:f8:98:43:93:26:18:f2:17:
6a:04:c7:16:d8:79:6d:89:d6:80:20:cc:9c:86:15:0a:6e:57:
c7:6f:a5:d2:dd:5f:09:4e:34:75:67:31:12:9a:a5:9f:8d:49:
a6:43:5c:76:95:c3:f7:9c:19:c1:23:1f:dc:59:4c:a3:be:55:
10:51:34:27:a8:58:4c:50:20:6d:40:19:51:28:3a:6d:16:5b:
9b:63:e0:0c:31:53:a1:bc:ab:7f:11:5e:61:e8:07:75:4d:c9:
ac:57:3c:48:f7:2c:de:52:f8:1b:74:7d:ac:9d:eb:6d:d9:d9:
35:d9:80:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:03 2025 by rpki-client