Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier: CXDwpc2oxOEhCq9HS+LGozmhLRZQ525GF7+u01KLWrg=
Subject key identifier: B4:AE:49:1A:8B:FF:02:BC:E1:60:28:E2:48:8F:AE:8C:C0:CA:40:CF
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 0198D4E0983C51253BED6BFC5930CDC4F004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number: 0D15
Signing time: Sat 23 Aug 2025 03:02:25 +0000
Manifest this update: Sat 23 Aug 2025 03:02:25 +0000
Manifest next update: Sun 24 Aug 2025 03:02:25 +0000
Files and hashes: 1: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: GhaxofaV4FJHyJPaHzD1K+FKRFnhljLwaQ03ivA4Npo=)
2: YyGPwu-_r-eFoNX2ZTx6n9Sl7sU.roa (hash: iag5NIeY+dB9ncpa+rQd04Kk2wb7pISvllYkBby24Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:98:3c:51:25:3b:ed:6b:fc:59:30:cd:c4:f0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: Aug 23 03:02:25 2025 GMT
Not After : Aug 24 03:02:25 2025 GMT
Subject: CN=b4ae491a8bff02bce16028e2488fae8cc0ca40cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:01:e4:71:99:47:4d:b5:ae:d2:70:3a:5b:
52:af:1a:f1:05:16:37:6a:c3:2c:ce:f6:23:ac:d7:
bd:5d:9c:18:66:98:34:8f:58:1d:e5:d0:87:2a:0c:
4e:8e:09:a0:d4:19:09:29:e3:40:83:99:5b:3d:80:
1d:9c:29:d4:cf:63:5d:c2:7d:62:72:e4:e1:ec:d4:
d1:54:de:01:1b:5c:f2:01:86:cf:53:27:da:07:5c:
57:29:1c:8b:63:7c:9b:62:3b:3f:32:48:34:4a:ad:
24:32:ed:54:82:c6:5c:e1:be:3f:a4:b3:3f:a2:4b:
c8:87:42:43:3a:d7:13:39:e3:19:66:b8:61:f2:0a:
cb:7a:e6:07:be:ba:5b:84:b3:15:5a:51:ec:9d:98:
29:ea:97:bb:1f:2d:76:7b:b4:73:f2:62:98:3b:db:
80:79:2a:44:87:dc:77:50:a9:0a:4c:b6:18:5d:87:
00:f5:db:d6:30:f5:73:bc:fb:7b:d2:49:b2:22:a9:
65:15:76:46:bf:27:47:52:c3:6b:ec:ca:ae:26:4b:
65:58:1d:73:e8:59:9a:01:a4:d8:5b:dd:2a:2d:87:
cc:db:56:93:e3:8e:32:23:bc:f9:cd:ea:57:ed:4f:
07:01:73:72:3c:66:0b:62:80:67:6d:78:6e:cf:29:
2d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AE:49:1A:8B:FF:02:BC:E1:60:28:E2:48:8F:AE:8C:C0:CA:40:CF
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ad:13:9e:ac:c9:9c:89:a5:ef:60:fa:65:05:44:36:50:68:
37:c4:be:9a:36:6c:26:88:da:f7:c5:4c:f0:bf:ad:24:03:b1:
a4:ca:01:4e:45:b7:cf:1b:0b:1c:26:f7:f4:ca:e3:06:11:89:
36:48:c3:48:f6:14:27:f8:b6:ea:76:6a:e9:62:9b:69:2c:58:
ae:d8:6b:60:68:05:01:6e:ca:82:a6:59:7c:a0:0e:9d:5e:7a:
c2:44:48:87:fa:62:f9:de:65:f4:f8:e1:8e:fa:7c:1b:9b:a7:
68:96:e6:95:d6:97:c4:5f:5a:e0:f4:78:db:f2:c1:e4:31:f4:
3a:ac:8b:fe:b9:34:8a:65:a3:94:07:7d:25:9b:74:6f:1e:13:
c4:7a:ed:e0:7d:16:0e:0d:7b:0d:ee:cf:88:9f:d1:cb:dd:45:
18:12:e9:ce:8e:cb:e1:5b:4c:be:27:fe:ab:fb:56:36:44:18:
22:35:42:0b:bd:65:3e:c6:39:37:69:c0:30:17:e3:40:50:e9:
bd:ac:c4:59:60:79:bf:04:53:7c:5e:9d:df:47:36:ba:7e:83:
76:86:cb:e6:7b:5c:b2:cd:45:91:ce:e5:69:74:e2:0f:37:88:
74:4d:47:16:95:92:cb:dd:49:74:ee:24:cd:4e:63:88:5f:50:
1b:89:1d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:42 2025 by rpki-client