Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
File: s90R00a2O7HrIqB8JswSkaKgaJU.mft (raw, json)
Hash identifier: wGHtpasinCSnUKQ1jDZgxC4UmpJ2uBuV+KhdacSOTA4=
Subject key identifier: 9E:A7:C4:A1:E9:D9:CB:10:19:9D:C4:E7:6A:98:AF:AF:6C:22:6E:E7
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 01988C58C4602E69139BEFCC54E79A76537B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
Manifest number: 0E2F
Signing time: Sat 09 Aug 2025 01:01:24 +0000
Manifest this update: Sat 09 Aug 2025 01:01:24 +0000
Manifest next update: Sun 10 Aug 2025 01:01:24 +0000
Files and hashes: 1: DUVtp5rmZWhjlPTwXejQEd3V8J4.roa (hash: qTcPo/VJaQTji8d15MDDjiWvnKJ389xtHOegN0VgXp0=)
2: s90R00a2O7HrIqB8JswSkaKgaJU.crl (hash: ZC1Qw1oP2ZdY5spK0ZI75XYTLYmW+ShZCxtTdVkTOrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:c4:60:2e:69:13:9b:ef:cc:54:e7:9a:76:53:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Aug 9 01:01:24 2025 GMT
Not After : Aug 10 01:01:24 2025 GMT
Subject: CN=9ea7c4a1e9d9cb10199dc4e76a98afaf6c226ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f4:99:20:93:89:91:93:52:d2:c4:f4:45:5d:
dc:66:42:e2:93:65:2c:e8:c6:02:83:57:c5:43:af:
ae:1b:f9:a3:e4:c6:11:f7:f6:b7:2f:08:11:16:25:
d8:a7:55:a8:bf:85:5a:6c:22:bf:1c:31:8c:33:20:
d5:f3:2b:84:97:4a:49:88:d8:1a:ab:e2:5e:d4:12:
84:ac:5c:2d:bd:80:bb:65:0b:58:12:81:9a:08:e0:
01:47:89:e5:d1:e7:3b:88:0e:23:63:6e:ad:07:67:
84:f6:68:39:9b:30:0e:34:97:bf:d2:a1:5d:87:89:
f8:9e:2a:0e:ba:8f:92:fc:3e:a9:bc:e1:6c:dc:a4:
4b:f5:0e:33:ef:b0:c1:0e:df:c8:e2:44:c7:ae:26:
16:2a:ec:07:df:91:19:a9:63:d6:ab:98:e8:fd:08:
27:af:87:ea:ba:2f:96:3a:63:4c:0b:6a:c0:5c:51:
5c:a5:7f:e4:09:b6:90:c8:72:81:05:ce:0a:9f:d0:
db:73:47:a7:f4:74:25:c5:2a:21:a0:72:a3:7d:2b:
c5:ab:89:53:25:cd:35:ba:52:3d:b6:30:73:91:c7:
ec:06:80:2e:d1:4e:2f:e0:f4:8d:4e:93:4f:42:f5:
8f:44:3c:18:90:fd:d5:85:17:b6:17:54:2e:15:de:
65:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A7:C4:A1:E9:D9:CB:10:19:9D:C4:E7:6A:98:AF:AF:6C:22:6E:E7
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a5:94:36:1a:0e:0c:72:73:55:2d:67:8b:06:1a:18:1d:57:
ba:56:67:17:14:49:26:82:54:de:93:8e:2c:ef:67:d9:82:dd:
9c:e0:77:22:5f:31:a6:29:06:15:1c:a6:8c:af:f3:5e:4c:6d:
76:44:76:06:3c:4a:b6:fa:70:7a:aa:03:44:61:78:c7:f5:cd:
8a:c1:28:49:ce:45:96:9f:b3:1c:ab:92:53:f4:0a:82:97:3c:
2d:fe:54:7b:90:f4:9a:e8:0a:e4:3b:5d:aa:16:a4:6b:af:bb:
f9:e3:88:81:ac:e9:17:af:16:b4:b3:a7:0b:4a:f1:a9:e0:b1:
27:67:f7:c3:68:67:69:8d:97:ab:12:04:23:41:c5:97:93:d2:
5d:7c:d4:d7:50:9a:5a:e6:d0:b7:c2:c2:63:b1:03:07:46:2f:
88:6d:e5:c4:5a:f8:a4:c7:48:c8:9d:18:85:3c:b1:7b:af:ad:
b4:5a:f1:b8:a1:94:6b:20:e3:6f:29:d5:cc:b3:30:3f:2a:73:
bf:67:df:37:08:73:fd:32:6f:1d:42:b4:c1:ad:e4:5b:d2:91:
ce:b3:82:c2:1a:83:9e:85:ac:7d:27:dc:a5:a7:f2:3e:ac:40:
56:84:6d:3a:ef:7d:c5:b1:7d:e3:d6:fc:44:62:c6:50:81:78:
54:ea:f9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:38:05 2025 by rpki-client