
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: XehJOya87KVree5qTbtkD1o9aEMb/HN6NcYydhYK9tQ=
Subject key identifier: 90:D2:71:69:90:19:4C:6A:CF:E3:9D:88:C9:CB:68:64:4C:F1:72:EC
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 01987A1B9EAC5D5F107ABF6E2486EE25F293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 08AF
Signing time: Tue 05 Aug 2025 12:01:27 +0000
Manifest this update: Tue 05 Aug 2025 12:01:27 +0000
Manifest next update: Wed 06 Aug 2025 12:01:27 +0000
Files and hashes: 1: 9T-K1Qm3b8gpXgz9zJRHreyTvgM.roa (hash: dWSzFCZcssBKJcBODdxFw6oV27vvhXKSqLYxiGBOtGQ=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: EwD47ubBVPlm4PudK8bn5ViPYJhtRMHu99lTB4xo0eM=)
3: hEhkAm4wvhKI8lm4TouQ913BI64.roa (hash: QBQPmns85EKoDttpiWLYZhYuUsat9iVL0D6w2NFPGj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:9e:ac:5d:5f:10:7a:bf:6e:24:86:ee:25:f2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Aug 5 12:01:27 2025 GMT
Not After : Aug 6 12:01:27 2025 GMT
Subject: CN=90d2716990194c6acfe39d88c9cb68644cf172ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:dd:24:e8:37:6b:c3:86:76:d1:56:49:7e:29:
52:d4:6e:fd:45:36:50:83:3c:db:e9:2d:5b:bb:6c:
2a:b1:23:03:96:84:74:72:ea:9c:c2:85:bf:23:36:
47:34:49:db:a9:33:0e:0d:f9:ae:44:45:d0:a1:77:
e3:52:e1:9a:67:11:d9:7f:90:22:53:91:98:07:95:
73:d9:78:51:1d:5d:06:d7:39:fc:7f:58:8c:21:91:
17:b1:9d:76:7e:5e:13:d5:f5:92:7f:fa:af:3d:48:
64:c4:65:6d:4d:5f:9a:5f:96:ca:27:9d:83:16:ab:
62:34:bb:dd:5a:f5:5e:55:8c:c9:04:28:3c:be:0b:
ac:db:70:60:8e:93:81:94:91:12:40:03:8f:b8:f6:
89:3c:79:21:ff:0d:0b:51:2f:22:28:db:7b:4c:7b:
e8:76:b6:df:c1:77:75:da:51:c7:b7:93:61:7b:70:
fd:fc:9b:fd:02:d3:99:95:b5:ea:46:63:9f:ae:03:
28:63:0e:07:65:66:36:32:7a:fe:18:ff:32:df:8f:
1e:69:c6:a3:b1:75:05:6f:2e:97:29:12:e3:aa:89:
7f:31:e0:ea:0f:3c:80:bd:6d:8e:ae:6b:98:27:13:
ed:da:c7:70:ee:95:84:2b:4a:35:e1:d6:95:d2:ab:
4f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D2:71:69:90:19:4C:6A:CF:E3:9D:88:C9:CB:68:64:4C:F1:72:EC
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:83:1b:0e:6f:d1:19:7a:50:d7:5d:03:0e:a8:5b:b2:b4:f4:
a0:d8:52:6d:ab:bf:1d:98:e8:9d:2d:55:7d:95:9d:ea:36:70:
a5:78:3f:03:eb:52:cd:8c:4e:3d:fe:96:13:cc:aa:c6:86:dd:
28:21:72:6c:54:57:cc:c3:f7:cd:40:87:41:be:3f:1a:1a:f2:
14:e9:11:24:89:06:a1:63:b2:99:7b:39:1d:93:cd:8b:41:87:
ce:3b:5b:fa:4a:65:51:80:ba:58:98:bb:8d:47:6b:87:a1:17:
30:d5:04:25:c3:81:68:06:21:a1:05:50:9e:a9:a9:4a:19:55:
cc:26:6e:d1:90:02:70:1f:5d:d6:3c:41:09:05:ef:bd:43:0e:
55:32:dc:66:57:1a:99:da:00:3b:4f:c4:2e:4c:da:8d:ae:44:
b7:46:6c:76:93:9f:7e:db:8b:3e:9d:a2:84:52:59:8e:b2:c4:
90:67:28:4f:41:1c:ff:9e:e4:71:7d:c9:6b:53:23:ca:d2:58:
15:c3:14:78:02:5d:bb:af:d0:58:94:d5:e0:6d:e3:56:6a:99:
43:c1:9b:36:b9:b9:b6:de:4b:bd:d9:6a:64:04:1c:63:fc:c1:
26:7e:94:6a:85:5f:53:cf:b1:a7:20:5b:b8:4e:7f:3f:c8:ce:
6a:14:b7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:31:24 2025 by rpki-client