Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
File: 0R9tkk1vbMDpQIN9kwH85zIGV3E.mft (raw, json)
Hash identifier: eDpQE5roMcPwvsDO0hwymsGIL+V8+2NFuezwdTESl0Q=
Subject key identifier: 61:2F:0A:B6:4F:0A:DF:83:88:9F:7B:23:0F:47:BF:A7:47:50:11:6D
Authority key identifier: D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
Certificate issuer: /CN=d11f6d924d6f6cc0e940837d9301fce732065771
Certificate serial: 0198D5836B75B3B2AAB66EBE91D91D6CCCAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
Manifest number: 04A2
Signing time: Sat 23 Aug 2025 06:00:16 +0000
Manifest this update: Sat 23 Aug 2025 06:00:16 +0000
Manifest next update: Sun 24 Aug 2025 06:00:16 +0000
Files and hashes: 1: 0R9tkk1vbMDpQIN9kwH85zIGV3E.crl (hash: l7muQLgV9pn6twkxSSFoCY1WSw20XzTgyxK7soe/eCo=)
2: iJSQx0f1nTa0-CmNbadm7Gos7IA.roa (hash: LXabEDWzH1fx8QmFW8g5Pa/8Oh8pnxFijMUOQc1WwTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:6b:75:b3:b2:aa:b6:6e:be:91:d9:1d:6c:cc:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d11f6d924d6f6cc0e940837d9301fce732065771
Validity
Not Before: Aug 23 06:00:16 2025 GMT
Not After : Aug 24 06:00:16 2025 GMT
Subject: CN=612f0ab64f0adf83889f7b230f47bfa74750116d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:d7:a1:57:ba:f6:89:9b:bf:a4:df:a7:51:
b4:a5:39:2f:9a:bc:c0:2e:9a:54:cf:4a:4e:c8:bd:
82:12:db:c5:cf:12:5a:c4:b4:68:4e:07:b3:72:3b:
6c:f0:ea:e8:8a:b7:db:58:c4:f8:74:5b:2f:31:3f:
fd:8d:a1:8f:2e:dd:bb:5d:04:e6:69:78:b5:e8:fc:
b6:7c:45:b1:8b:ca:f9:7e:b5:00:78:30:43:e8:a2:
69:df:ab:f3:8a:95:b3:c9:95:bf:b8:26:70:59:1d:
a2:9b:3a:ec:88:84:f0:ac:1b:84:e7:b5:e7:36:9b:
1d:eb:b3:13:28:8e:d5:8e:37:3e:0e:f9:18:36:84:
2e:f8:67:0b:46:9d:f1:7b:a6:f4:4b:2d:a6:46:87:
59:93:43:f1:d2:b9:41:e6:8e:49:47:6b:2e:b5:56:
40:f3:f0:84:7f:49:a6:e4:41:be:b3:80:4d:9d:62:
f3:71:52:9f:b4:ef:7d:12:1b:ef:7c:95:3f:ca:5f:
1e:1c:8f:3d:8b:7c:28:71:60:c0:a1:e7:91:7b:1a:
e0:40:c0:e4:91:ca:f5:ad:f7:43:c7:4c:2f:74:3f:
aa:70:01:97:ac:a2:9f:e7:82:ca:f9:46:fe:ed:72:
50:a2:b8:a5:86:51:c0:72:9a:b2:f8:fa:51:56:74:
e8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2F:0A:B6:4F:0A:DF:83:88:9F:7B:23:0F:47:BF:A7:47:50:11:6D
X509v3 Authority Key Identifier:
keyid:D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e2:1e:52:ee:e2:8d:d0:ad:46:56:15:dd:80:9a:67:f7:91:
31:c6:3a:a8:e0:eb:2c:2c:d8:3e:69:a4:d1:53:ec:40:05:88:
71:48:44:cc:ab:5d:48:d1:ad:92:69:50:74:c8:4d:db:f0:cb:
59:3b:bd:22:eb:a8:ec:ef:e3:3b:83:25:d5:6c:23:b9:15:f7:
d9:eb:82:4b:6f:c4:89:8d:8f:21:9b:a1:8e:2d:c5:8e:5f:8d:
df:54:c0:3f:c6:56:89:80:29:f8:d8:25:72:1b:03:09:b0:2b:
71:a4:ab:b4:8e:71:71:6e:29:17:9b:ac:2b:98:89:59:c1:03:
81:5e:41:55:d0:ae:93:09:95:7b:f4:03:88:05:a0:82:2c:19:
6c:0a:76:1f:57:1a:b3:72:b6:72:c4:fb:a4:d2:6e:b1:73:51:
19:7e:4a:18:ff:3c:8d:40:c3:28:84:06:a6:d0:63:4f:dc:69:
46:0b:c5:b4:b3:de:1f:84:a1:38:cf:be:47:9e:1d:f7:e8:c0:
99:2f:95:ac:ae:58:77:10:2c:22:64:2e:9a:d6:01:c3:c7:f9:
e5:e6:c1:12:c2:1c:9b:77:72:ee:38:46:3b:02:d9:4f:ee:a1:
b9:bc:b4:a1:c9:7d:17:a0:a3:8a:20:f7:92:47:4b:31:1c:cf:
96:d8:7f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:53 2025 by rpki-client