Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
File: 24oKPWpEpYME4bHb9i5dehaziHo.mft (raw, json)
Hash identifier: l9AGoiK+asrslPfdvgIXjHAOyz6HCNdzpZFZWPjZZgo=
Subject key identifier: 90:EE:BA:C7:86:63:23:11:4C:0B:8B:67:48:DB:7C:7B:93:DA:91:8D
Authority key identifier: DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
Certificate issuer: /CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Certificate serial: 0198936CCD01BCBD8ED1FFC8BEBD4AB6B8A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 10:00:37 +0000
Manifest this update: Sun 10 Aug 2025 10:00:37 +0000
Manifest next update: Mon 11 Aug 2025 10:00:37 +0000
Files and hashes: 1: 24oKPWpEpYME4bHb9i5dehaziHo.crl (hash: 3p7gazWrl7M6rd+7QUOUpqlekPLITBoNr53vdGwJoig=)
2: wHHMwXNW_N83G6X6FvCX0cxSHMc.roa (hash: EDHNa2I735GRLd+NXqVnh5LuTlV6xmWH1ELRRt1kANs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6c:cd:01:bc:bd:8e:d1:ff:c8:be:bd:4a:b6:b8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Validity
Not Before: Aug 10 10:00:37 2025 GMT
Not After : Aug 11 10:00:37 2025 GMT
Subject: CN=90eebac7866323114c0b8b6748db7c7b93da918d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f5:e5:a2:30:29:ed:68:3d:a2:4b:ae:21:3e:
58:64:11:99:d5:34:f2:e3:6c:c2:bb:54:49:64:e0:
a9:16:ec:50:02:61:1a:57:89:3f:49:8b:03:90:02:
86:d5:73:92:8b:3d:de:fd:4e:a6:54:42:31:a2:fd:
75:4b:bf:20:c2:97:e4:10:b5:74:b6:53:63:ea:1c:
34:b7:06:d6:de:c5:bd:1b:7d:f9:cb:2d:ee:ab:9d:
5d:f6:40:7d:ea:11:e0:e8:32:dc:6a:68:2a:8e:c0:
3f:b7:e2:7e:38:ca:2d:1a:09:f2:2d:7b:9f:97:9b:
93:b2:db:9f:17:a8:f6:ea:6a:57:20:15:f1:d1:4b:
5b:d7:3e:39:53:80:a9:97:fd:d0:09:20:93:c6:07:
3e:87:73:bf:b2:c1:06:da:ea:62:9a:bd:4f:62:39:
35:c7:1c:e1:10:55:c8:ec:ad:df:3c:f4:9d:3e:3d:
0c:17:41:d0:16:a5:8c:a5:b7:02:40:bf:ee:41:20:
1d:d6:92:e6:73:9c:c3:36:9a:14:b6:f1:88:b9:15:
3b:19:5c:6f:fb:eb:bf:34:5a:ab:99:7d:c5:6f:3c:
fa:53:1a:02:65:b2:3a:10:6f:35:91:de:e9:f9:61:
e3:a1:79:5e:b6:43:61:4e:67:20:99:7e:9b:07:81:
39:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EE:BA:C7:86:63:23:11:4C:0B:8B:67:48:DB:7C:7B:93:DA:91:8D
X509v3 Authority Key Identifier:
keyid:DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:12:ec:f0:b0:44:84:40:fe:ac:95:62:3b:5b:86:12:dd:f7:
68:8c:91:da:72:35:66:a6:17:59:17:d3:55:84:59:6a:38:17:
c5:c2:3d:3b:4f:22:8e:0d:62:9d:c3:08:1f:b0:9b:93:56:87:
15:16:24:53:ed:6c:3f:e5:e0:c3:5c:19:22:e8:7c:e9:ae:4a:
7d:cb:2a:9c:3e:66:45:be:fa:34:14:d5:7f:a4:89:0f:c4:eb:
3b:8a:a7:af:84:66:f9:6b:ac:31:1e:1c:8d:65:a8:e6:22:f4:
6d:bb:9b:0f:bd:24:16:dd:35:0f:b3:22:0f:6a:63:02:9a:c0:
ab:c4:ea:c2:89:da:9c:61:a1:b8:aa:a0:8e:23:f3:23:a1:c2:
ed:c3:8f:e3:23:40:9a:51:f2:0e:b9:d4:5c:f7:6f:0e:e0:b0:
5a:7c:19:8b:7a:cf:0c:58:07:dd:d0:58:d0:ed:90:7b:af:7b:
00:0b:f0:6e:b0:86:82:25:19:95:90:26:31:19:ec:b5:27:5d:
d9:71:93:bf:c8:24:dc:45:b9:2a:27:4f:60:06:d5:49:61:d3:
c5:89:d6:1f:0d:54:3d:f5:20:f4:07:bf:42:b9:cb:23:60:ce:
b5:1a:50:d6:66:bb:76:eb:ee:3e:69:86:92:af:13:5f:5c:64:
06:61:2b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:27 2025 by rpki-client