Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
File: e9s8XZUevruGqZqE0jjn_KdY4pY.mft (raw, json)
Hash identifier: 6uRgrVM0Z+QpP/chdy9osIM2WVJlm7s/HnmxsF9Esj4=
Subject key identifier: 0E:9A:9C:83:77:EA:B0:7B:21:CC:55:3C:92:86:A9:77:F7:DB:4D:A0
Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
Certificate issuer: /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Certificate serial: 0198D4E037734EA1E9F204D53FF97FD6F419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
Manifest number: 0CDE
Signing time: Sat 23 Aug 2025 03:02:00 +0000
Manifest this update: Sat 23 Aug 2025 03:02:00 +0000
Manifest next update: Sun 24 Aug 2025 03:02:00 +0000
Files and hashes: 1: DIa5pw00VBuzd8TnmLxOAmAN6Io.roa (hash: X2ZL9HHT+jpKG7EXK5mDhvGY1GOQw7aFu6sUd6IVFrk=)
2: e9s8XZUevruGqZqE0jjn_KdY4pY.crl (hash: ZFFk356aAR6jQU1kCoi0j+vIGlRyJimpcmWzhRqyS3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:37:73:4e:a1:e9:f2:04:d5:3f:f9:7f:d6:f4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Validity
Not Before: Aug 23 03:02:00 2025 GMT
Not After : Aug 24 03:02:00 2025 GMT
Subject: CN=0e9a9c8377eab07b21cc553c9286a977f7db4da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:ac:4a:fd:67:d5:02:55:a5:c0:94:28:da:
e6:a4:38:e7:00:59:92:db:86:05:49:46:89:bc:05:
4b:e0:05:cf:e5:59:92:16:ac:3e:b8:38:a2:8a:f1:
df:8d:ef:e5:19:36:22:7c:ab:2e:65:53:e2:32:12:
4a:3c:73:bc:77:08:98:e3:a8:6b:75:a9:99:98:f2:
5f:db:80:4e:25:b8:e6:a4:07:f4:15:c1:ed:d3:d8:
fc:3e:11:72:6c:72:5c:3a:38:79:61:d8:d7:d8:8e:
68:32:81:8a:1d:f7:ab:9c:41:d8:fb:42:27:a9:ab:
ed:f2:35:db:93:f4:ec:52:05:91:10:89:e3:82:93:
e6:b5:43:ed:5a:a9:97:45:f8:d8:23:50:6d:ae:de:
76:a8:e0:09:ec:23:ae:0a:1e:80:b6:7d:a7:09:6e:
3d:94:89:c0:52:fa:66:a1:c3:43:0a:91:7c:10:60:
f8:c2:de:72:e9:d4:bc:01:dc:cd:de:3b:d0:bb:56:
99:8d:aa:dd:45:86:d6:60:53:82:f9:c8:e0:4d:bb:
f6:87:ea:89:64:8b:e6:07:b5:c6:ce:bb:c5:c2:da:
74:af:8a:34:7a:47:cd:b9:3a:0e:6e:21:84:8b:30:
40:df:45:c8:a3:ca:32:87:ac:be:a4:34:2c:01:b8:
26:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9A:9C:83:77:EA:B0:7B:21:CC:55:3C:92:86:A9:77:F7:DB:4D:A0
X509v3 Authority Key Identifier:
keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a3:f7:4b:38:fe:f6:26:86:7c:95:47:ac:9a:da:75:be:f4:
12:d7:1c:f8:1d:84:6a:cc:6f:2b:ed:9d:cd:aa:2f:31:e2:7a:
cd:6f:a1:db:47:c0:e8:54:0c:7b:85:a0:fe:2d:78:71:26:b2:
14:80:91:24:5e:61:68:7a:2a:60:44:6a:73:a0:7b:33:65:f4:
5c:1e:d9:2e:fa:6c:2a:44:88:36:41:87:64:d1:17:04:d1:ef:
40:e9:29:4f:7b:1f:db:4f:01:a3:33:c5:46:af:64:5d:ca:db:
a4:84:71:3e:a7:78:f7:8c:77:a8:08:d1:53:70:1a:a0:11:e1:
c7:74:5f:21:78:c5:51:3e:59:c4:30:21:14:1b:67:f4:99:bd:
c6:2b:c4:04:1d:22:27:26:08:db:ca:4e:5d:2b:c3:15:55:f8:
93:8c:ab:a9:f6:7e:32:34:b8:fb:46:0f:ea:6c:98:87:0b:00:
82:07:4c:d5:e6:8b:87:3e:ba:bd:cf:5b:a5:ca:9e:ec:56:48:
46:be:0f:a1:97:d2:85:05:a5:d0:45:af:44:6f:6a:4e:6b:97:
2b:4c:86:2e:98:a4:32:de:5f:d1:47:d2:92:00:9f:2a:73:92:
9f:49:3e:c1:3a:2e:7a:d3:89:47:a0:3f:00:5d:c9:17:43:c8:
78:2b:56:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:21 2025 by rpki-client