Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft
File: bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft (raw, json)
Hash identifier: cKz4ACEW1rihjgrfq8GQCkOxfDuwVXxt2sVgLkJy+sM=
Subject key identifier: E6:5E:93:60:B7:F0:7C:03:B0:15:63:C2:7D:06:BC:0C:AE:6F:E5:5B
Authority key identifier: 6D:3F:44:39:C9:DD:0B:60:03:E0:94:D3:1A:43:E5:30:9F:4F:FE:F5
Certificate issuer: /CN=6d3f4439c9dd0b6003e094d31a43e5309f4ffef5
Certificate serial: 0198D5F1744E2A093E7CCB8E05FABC209A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft
Manifest number: 02D5
Signing time: Sat 23 Aug 2025 08:00:27 +0000
Manifest this update: Sat 23 Aug 2025 08:00:27 +0000
Manifest next update: Sun 24 Aug 2025 08:00:27 +0000
Files and hashes: 1: 7f6247ytrAn8qHZ3lg8x0Jbg3pU.roa (hash: wQjiNc4CCIKnGkmgdVYRMnPV1+DQiNnrix3wCvH87Fs=)
2: bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl (hash: nQNLqWZrbdDESshmzTjb93m876/zp03Ld1nbBLKrHQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:74:4e:2a:09:3e:7c:cb:8e:05:fa:bc:20:9a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3f4439c9dd0b6003e094d31a43e5309f4ffef5
Validity
Not Before: Aug 23 08:00:27 2025 GMT
Not After : Aug 24 08:00:27 2025 GMT
Subject: CN=e65e9360b7f07c03b01563c27d06bc0cae6fe55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:72:d0:63:15:62:ba:48:63:db:c4:63:1a:45:
d1:ba:e4:60:75:cd:4b:a6:8e:c1:ce:e6:cc:22:73:
96:55:0e:43:8e:c9:9f:15:07:af:dc:a6:b5:54:1a:
24:71:1c:e1:31:e4:f6:bd:e7:e5:e7:68:bf:32:98:
1a:47:cd:9b:f0:88:b9:ad:63:97:65:ea:6b:11:d6:
02:55:e7:f4:5b:30:6c:3f:52:01:45:9f:ba:42:ed:
99:85:5d:f6:f8:ae:a3:37:60:b1:df:b8:e1:ea:67:
5d:44:6a:b6:66:01:92:ff:96:f9:e8:ad:5a:20:67:
a9:ac:68:09:60:8b:d3:8b:cf:fd:71:d4:10:c4:94:
05:d3:d4:1f:74:7f:f6:4f:6d:fe:3f:d9:da:f5:14:
a8:73:fd:fa:cf:bf:33:1b:dc:cc:9b:3f:08:f2:40:
64:9e:09:07:7d:9d:3a:76:0c:a8:09:c3:f6:5e:1d:
4a:5f:54:06:c3:76:57:03:6f:15:7c:d0:a8:f5:bc:
f3:cf:4c:f4:86:8e:c3:ce:77:ab:eb:c8:e8:f0:08:
88:a1:b1:48:4d:69:43:f1:ae:9a:ec:ea:f1:6e:3e:
c8:f4:74:ac:09:07:b6:a6:c9:24:61:d8:57:65:f2:
75:f2:9c:fd:c9:61:42:9c:30:ad:98:48:d9:02:ba:
53:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5E:93:60:B7:F0:7C:03:B0:15:63:C2:7D:06:BC:0C:AE:6F:E5:5B
X509v3 Authority Key Identifier:
keyid:6D:3F:44:39:C9:DD:0B:60:03:E0:94:D3:1A:43:E5:30:9F:4F:FE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e1:6b:01:fe:be:b2:d8:a6:72:f1:e8:46:ad:ca:37:fd:8d:
35:12:31:b0:06:b8:61:04:92:e4:de:0c:8d:75:50:37:40:41:
53:41:21:bd:d8:54:d4:01:60:00:c2:3c:44:55:bb:f0:f2:22:
ec:45:45:f2:46:7d:35:7b:1c:ee:40:d8:c2:f2:8b:6b:1c:d7:
81:d2:db:f7:e3:a7:77:6d:e9:91:89:d2:25:56:81:e9:07:d3:
6b:6b:e2:5f:38:e2:c2:14:b6:18:fb:59:4d:80:d1:6c:a9:25:
20:61:88:dd:8c:37:e1:15:26:5a:0f:ae:92:04:ea:34:c5:0c:
a6:1d:bd:95:88:e1:47:9a:0c:a8:24:9e:2c:7a:35:73:4c:a2:
04:7a:a5:f8:81:69:d9:c4:28:e0:71:04:36:63:cc:be:ff:e8:
7e:ca:0e:e2:57:43:49:84:b0:1b:d3:50:23:37:03:54:c0:3d:
69:ca:7f:bf:21:7d:e7:56:8a:88:2e:ce:1a:7d:e7:42:0b:e4:
c2:f4:cb:09:0c:e0:cb:2f:84:18:bb:b0:c1:fc:ab:9a:2f:30:
22:b0:39:3b:dc:0e:88:3d:7f:43:ce:a6:f9:62:a8:e8:77:f3:
c1:bc:e7:1f:2c:d8:69:ca:1f:90:18:5b:f0:19:54:48:e9:ad:
f6:1f:26:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:53 2025 by rpki-client