Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
File: mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json)
Hash identifier: GhVtnbJukIyacV5kDGXqO/ZTNR39VC7zoF+NgOrHbdM=
Subject key identifier: 10:DA:65:F3:5A:A6:CF:B2:CB:E7:FD:8D:49:78:35:55:D7:77:03:57
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 01988F901FE5A74F4A7CE0963D6D8240ADF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
Manifest number: 15B6
Signing time: Sat 09 Aug 2025 16:00:43 +0000
Manifest this update: Sat 09 Aug 2025 16:00:43 +0000
Manifest next update: Sun 10 Aug 2025 16:00:43 +0000
Files and hashes: 1: 7Q18JYmAuxaMa6IHufbofG2Nif4.roa (hash: SgEEylWwu8UHfA3f6YmbRxIxeIe/WWwb7mO+pnXONBI=)
2: Z-qhy45K2zlM7WIh7yxwKFBjWYI.roa (hash: 23XRpBYe78gwQGj8rW9uI1A0myazk2hz/zj+cGkCS8s=)
3: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: lBDEeWd5mUExSYSn1xIk2+cFqQBdC9yzinHOzjXACXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:90:1f:e5:a7:4f:4a:7c:e0:96:3d:6d:82:40:ad:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: Aug 9 16:00:43 2025 GMT
Not After : Aug 10 16:00:43 2025 GMT
Subject: CN=10da65f35aa6cfb2cbe7fd8d49783555d7770357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:16:54:4d:5e:02:9e:c4:7e:6e:45:50:d9:a1:
13:4c:86:3c:95:97:2d:2a:b9:e3:93:00:dd:ca:39:
5d:86:05:22:f7:23:d4:c5:71:12:88:55:75:8f:27:
81:b9:ac:18:66:a4:75:14:b2:aa:83:d6:c8:78:d1:
32:4a:db:30:72:db:59:55:29:b9:69:d7:2e:f9:fc:
60:ba:34:a7:e2:30:0f:bd:3f:5d:8c:50:b5:32:13:
d9:9c:43:64:c7:b6:fe:d6:8f:35:dc:c2:f8:fa:0d:
08:6b:20:24:47:70:f1:a3:8b:4a:1c:15:ce:22:07:
15:5d:58:57:be:8e:c7:22:70:86:7f:51:79:cc:90:
f2:e7:a2:38:bc:87:e5:a2:06:6b:9f:a5:de:e4:d9:
5d:5e:9b:a8:05:13:2d:0f:f8:b9:56:7d:92:6f:a6:
f0:54:ff:39:68:01:86:c9:c2:03:59:bb:5d:f1:a4:
cb:dd:8a:c3:6b:6b:69:07:27:4e:e8:26:bc:7d:81:
ca:35:90:fa:60:fa:e8:98:c7:ea:00:69:fa:7a:a9:
29:1b:83:1a:1a:a1:0f:38:d0:5a:f4:d3:cc:00:97:
03:d2:7e:74:9c:5a:c1:ec:b2:e6:f4:9c:d8:77:ba:
ae:b3:51:41:9c:6a:df:92:23:29:ab:b8:3e:ee:b3:
64:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DA:65:F3:5A:A6:CF:B2:CB:E7:FD:8D:49:78:35:55:D7:77:03:57
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7f:73:86:6a:86:ac:8d:d2:56:70:bc:9d:db:fd:b5:86:56:
d4:42:eb:59:7a:99:4c:90:31:9d:e9:45:63:48:58:4d:be:f1:
dd:7e:ae:2f:26:d9:a6:a2:15:92:d1:73:90:65:0e:30:20:05:
d9:e6:e3:d9:5f:3a:ed:71:ca:8a:c3:ce:b4:ec:7c:98:e9:10:
92:0b:61:88:42:10:58:3d:3b:ba:45:6b:16:bf:30:cc:86:4f:
38:4e:fa:ca:bd:1e:de:7a:d2:f6:a4:8b:7c:e0:e2:75:b7:74:
e0:29:15:d9:c0:cc:6d:86:11:46:ef:7e:23:2d:08:51:4a:0a:
b0:59:c3:8c:70:e1:e8:da:08:e4:9a:cb:cb:c2:e1:45:1c:ef:
de:5a:14:ca:99:a4:73:9c:2a:3e:e0:ca:98:e6:2e:5b:b6:96:
44:89:23:44:92:7a:26:d2:ef:cb:b6:3c:3b:d8:f4:06:fa:fb:
e1:04:f8:27:05:93:05:14:79:4f:5b:03:f7:e2:92:83:83:73:
de:b8:cb:6b:fb:4f:40:13:ff:04:a1:db:c7:74:ce:cb:d2:00:
00:19:be:22:a8:91:a7:c9:19:fd:54:b6:6f:a0:bb:d4:2c:c3:
9f:17:68:7c:9f:6a:f6:44:57:31:62:cc:61:e1:34:c5:ed:bf:
04:1f:06:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:33:16 2025 by rpki-client