Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
File: d8jZS9834PkAzWqMQizbFNl860Y.mft (raw, json)
Hash identifier: kaHsNqBA6TJMSltfUMU5h5w7YMJTP/KA/4NOBSmmQcg=
Subject key identifier: E5:D0:4B:A0:95:84:4C:B8:79:77:4D:91:47:9A:6D:4D:21:00:14:57
Authority key identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
Certificate issuer: /CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Certificate serial: 0198D698323F58DF75593FDE97FBC494F5FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
Manifest number: 01D0
Signing time: Sat 23 Aug 2025 11:02:35 +0000
Manifest this update: Sat 23 Aug 2025 11:02:35 +0000
Manifest next update: Sun 24 Aug 2025 11:02:35 +0000
Files and hashes: 1: 2IggjZcKQnsJ27bFYIHqEpYv-GQ.roa (hash: QiDI9ap52s0p2XMZDDr7ZxsLONOENyLmIWJ6ECFI2k0=)
2: d8jZS9834PkAzWqMQizbFNl860Y.crl (hash: mlERPloifx5+surRtZTA7Qjb3cVOfPamtskmfJRarpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:32:3f:58:df:75:59:3f:de:97:fb:c4:94:f5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Validity
Not Before: Aug 23 11:02:35 2025 GMT
Not After : Aug 24 11:02:35 2025 GMT
Subject: CN=e5d04ba095844cb879774d91479a6d4d21001457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f7:3c:78:e9:b6:e7:7e:72:c8:e3:3a:21:27:
2d:6d:2f:85:37:f2:02:af:7e:60:11:f3:41:4a:ad:
44:49:97:9c:86:c7:16:18:35:e0:a7:0b:e2:25:dd:
8a:7d:6b:9a:50:37:0d:ce:6f:fd:7f:aa:0c:28:e1:
c9:df:ff:5e:c7:3b:1b:de:b2:be:44:17:23:f5:a5:
0c:62:0d:97:70:4a:7c:ce:48:85:85:2e:8b:8f:45:
a7:04:c2:ee:f7:f8:b1:78:85:09:a3:cf:92:f0:1a:
2f:58:64:5a:cd:12:d8:fc:62:dc:58:63:f5:c2:d0:
93:0f:4c:e6:41:16:e8:41:94:9f:e3:64:c6:10:6d:
ea:69:7d:a7:24:3c:98:48:60:d8:4d:59:02:8e:15:
4b:33:30:3b:06:ba:a7:5f:ae:9d:c4:90:dd:1a:7a:
14:e9:2c:45:da:59:fb:9f:e9:4e:9a:b9:5c:a2:8b:
85:fb:8f:8f:7e:70:20:f1:1f:37:48:db:46:aa:11:
cf:2a:b7:d6:3c:30:79:ba:66:e9:59:e6:d8:dc:2f:
4a:99:08:ec:56:f5:06:8b:75:c3:f3:9c:1d:7b:dc:
b0:02:8d:5a:ac:bf:76:ef:de:87:1b:09:89:c3:b8:
41:25:0b:60:f7:d5:ed:f3:ed:35:c1:81:09:62:45:
20:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D0:4B:A0:95:84:4C:B8:79:77:4D:91:47:9A:6D:4D:21:00:14:57
X509v3 Authority Key Identifier:
keyid:77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d7:87:33:7b:05:a1:d7:58:63:f7:68:1d:ee:12:3e:7d:51:
f4:86:5c:3f:b7:ca:98:c1:c8:8b:ee:9a:40:ac:a5:c4:a3:e7:
c4:2d:12:12:ae:de:c0:65:c9:1b:80:1f:58:0e:ff:62:8d:fa:
0d:52:e5:c2:97:e7:4f:7c:45:0b:13:e1:cf:ba:fa:75:2a:d2:
87:18:cf:27:5a:3b:cb:6c:3d:82:49:93:0a:d2:a8:57:87:f4:
32:c7:30:38:bb:d4:36:df:46:55:b7:40:d5:3c:b5:0c:f5:f1:
e8:c6:ee:85:b2:d9:9a:03:9e:17:ac:03:d4:4d:1e:c8:fa:f2:
86:6b:2c:c1:95:52:80:ab:03:c4:a5:88:3a:aa:c4:22:e1:d9:
0b:57:cd:b7:00:a5:45:3d:e1:fa:47:89:06:e6:90:5e:24:15:
17:cc:3b:a3:d4:2c:49:8e:d3:15:b5:e8:de:a4:71:c5:47:e7:
07:19:bb:5c:bf:54:81:0d:d5:5a:56:8b:15:c1:ef:dc:13:7d:
45:15:21:67:cd:18:2b:00:b6:2d:c0:c0:5d:61:7c:fd:34:aa:
5f:d7:66:1e:5a:2e:da:cc:ed:38:4f:1d:a3:b6:32:f5:bd:f6:
79:4d:a6:01:05:77:72:f9:7c:56:80:e3:4f:bd:32:80:9a:da:
2e:c8:f2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:04 2025 by rpki-client