Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
File: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft (raw, json)
Hash identifier: p9qWu6vZCDRpmQ9FjpZCttEVI8HVR52ETLcLoU9BNEc=
Subject key identifier: C8:F9:96:BB:6D:D2:F7:E7:68:D7:18:59:B7:C4:43:CD:9C:D8:25:29
Authority key identifier: 47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
Certificate issuer: /CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Certificate serial: 0198D73BA3A6A52AF81B694ED05708706889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
Manifest number: 0E25
Signing time: Sat 23 Aug 2025 14:01:06 +0000
Manifest this update: Sat 23 Aug 2025 14:01:06 +0000
Manifest next update: Sun 24 Aug 2025 14:01:06 +0000
Files and hashes: 1: H-v5pinh1r0DqvUuZ4Dpr-LVv9s.roa (hash: MrFKT5HifVb8WtkT0D1HsRfweQopMnxqy5W6wHomHZU=)
2: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl (hash: /AGuHPKIEQgKHSlP4S3D4MdtyeW3W6YwUq8g7DRFmyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:a3:a6:a5:2a:f8:1b:69:4e:d0:57:08:70:68:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Validity
Not Before: Aug 23 14:01:06 2025 GMT
Not After : Aug 24 14:01:06 2025 GMT
Subject: CN=c8f996bb6dd2f7e768d71859b7c443cd9cd82529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:da:3c:48:8b:e8:f5:b7:99:c0:ff:b6:50:
26:93:91:4c:ba:80:04:12:24:fa:47:aa:8c:99:5e:
53:cc:9f:58:8c:eb:5d:86:3d:e9:43:87:38:80:a3:
50:bc:5e:8a:fe:bf:0e:69:28:3d:ea:72:cf:92:bc:
31:3f:7b:c6:32:e4:3e:c8:30:97:d6:1a:48:b1:4a:
a0:04:ee:6b:15:8a:26:1f:e4:c9:52:cf:b8:36:94:
ad:fc:25:41:29:45:7e:d0:9f:b7:6d:bc:d3:eb:db:
25:87:08:22:61:78:a5:a9:8e:27:50:4c:20:c6:ed:
04:21:a7:20:d6:dd:7f:3c:d8:73:59:ff:a6:da:22:
90:9c:e2:5a:b5:b7:e6:55:05:9c:e3:b5:40:03:7a:
b5:e0:07:23:32:ac:d2:63:2e:56:19:61:80:52:c8:
88:4b:77:d1:c3:8c:ae:a4:15:65:d0:12:ed:8d:e7:
62:b3:77:d7:18:5a:92:dd:2e:b8:cf:c8:ab:26:9e:
03:82:0a:58:b8:da:7c:4a:b5:f9:19:2f:7b:5a:3a:
b9:fa:62:d0:21:ba:5d:77:62:b7:fe:30:d2:8f:5d:
6b:23:bb:3e:e4:bc:80:e2:6e:3d:51:8f:9f:46:57:
ca:20:17:11:63:a3:eb:6f:92:1b:21:64:c9:8e:09:
e5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F9:96:BB:6D:D2:F7:E7:68:D7:18:59:B7:C4:43:CD:9C:D8:25:29
X509v3 Authority Key Identifier:
keyid:47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:61:94:1c:41:06:07:6b:0b:ee:7c:29:4c:a2:fa:bb:ac:2f:
ea:08:ed:c9:e5:dd:21:4a:76:5f:e3:d5:a7:a0:e6:1a:45:43:
28:41:e2:ed:f5:1b:cb:91:c0:65:37:a5:c3:7d:b8:86:08:82:
1b:2c:cd:c4:58:6d:c9:b7:12:59:dd:ce:26:6c:2d:12:07:17:
e8:63:ad:04:95:fb:dd:38:41:cb:f1:22:7a:62:4f:f3:b9:7e:
3d:eb:f1:27:f8:77:7a:73:3c:10:1b:0d:08:d1:ab:d5:af:84:
2d:f8:e9:f4:de:57:1e:0c:96:b9:d3:8a:49:64:7a:95:a6:86:
ed:c3:7b:39:cf:ff:f9:e3:6f:14:e6:cb:b0:7d:22:c0:b2:20:
8c:d7:0b:34:2d:2a:dc:58:48:8a:14:5a:b3:6b:65:a8:43:72:
80:54:3a:bf:3c:2f:53:ed:9e:8b:72:92:e0:f3:7d:b2:f3:62:
9f:b7:af:1b:f3:ae:72:50:4d:9d:99:34:91:65:a6:3d:d4:f9:
b4:85:95:94:2d:c2:7f:35:a4:35:d3:5a:86:ee:f8:62:3d:2c:
95:4f:1d:b6:f5:04:d1:d8:6e:2c:8d:0e:49:0e:01:38:e9:ba:
d7:33:10:9d:7d:e4:6d:ed:95:d8:52:23:6d:13:92:92:3b:28:
d0:f5:d6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:30:44 2025 by rpki-client