Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
File: ieXrHhIJiXh0XVQNypbP8N5HBNo.mft (raw, json)
Hash identifier: J9T/8tasVMk6bjvPMO/6S6XrQstcJ1MhrOWTwB3pYvc=
Subject key identifier: AE:6D:42:CB:E6:D7:90:19:99:31:40:49:A2:98:9F:68:1F:38:63:36
Authority key identifier: 89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
Certificate issuer: /CN=89e5eb1e12098978745d540dca96cff0de4704da
Certificate serial: 0198838C9AFFCD3FC7A5B63CEC191092B93E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
Manifest number: 0A94
Signing time: Thu 07 Aug 2025 08:01:26 +0000
Manifest this update: Thu 07 Aug 2025 08:01:26 +0000
Manifest next update: Fri 08 Aug 2025 08:01:26 +0000
Files and hashes: 1: ieXrHhIJiXh0XVQNypbP8N5HBNo.crl (hash: 1BFydnizcQGXdjJ6aAGv2BHF/J+J3NXqCHBZ3i328u4=)
2: l-HFEGYP57VmF8aDDh7--ZbJBDw.roa (hash: z6foBKVqU7T5Yu/Dwks8ZalWU/MYlRsXoQCU7GPCUOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:8c:9a:ff:cd:3f:c7:a5:b6:3c:ec:19:10:92:b9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e5eb1e12098978745d540dca96cff0de4704da
Validity
Not Before: Aug 7 08:01:26 2025 GMT
Not After : Aug 8 08:01:26 2025 GMT
Subject: CN=ae6d42cbe6d7901999314049a2989f681f386336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:9d:29:bb:8b:be:3b:19:3b:bc:12:fb:43:
c8:09:f8:b4:88:7c:5b:c1:df:3b:07:e9:93:33:0a:
9b:d9:2f:df:84:63:de:3b:6e:03:43:d7:f2:3b:87:
3a:dd:f8:cd:9f:1e:c4:97:a0:09:73:10:6d:50:99:
41:8b:b7:c8:cc:a3:e7:01:99:eb:ef:c3:25:e4:9d:
9b:4c:ca:4b:1e:07:ca:b0:37:32:80:ce:47:62:a7:
ec:b4:29:e1:73:d8:fd:e8:6d:f6:36:fe:20:0d:0d:
c2:32:dd:90:30:0b:4f:6b:c0:ab:41:a7:45:57:8e:
f5:43:df:e5:99:a6:7b:e7:7f:5c:21:30:01:b3:e6:
70:c5:12:57:73:f2:22:df:5a:b1:9e:61:ee:d9:7b:
54:c6:ea:41:81:62:88:d4:b4:7e:4b:87:42:3a:d3:
38:dd:8c:21:46:c5:a3:b2:9f:d5:b2:a9:c5:13:91:
46:d0:a6:08:ca:48:c1:04:2c:4f:81:98:f2:82:9d:
a6:6c:56:86:bf:91:d6:f2:6f:28:e5:27:07:cd:b7:
7b:8b:57:65:7a:ab:6f:92:9e:c2:1e:0b:c6:2d:c8:
a0:32:cc:53:00:d3:67:dc:f2:39:22:ca:de:71:98:
bc:f8:a7:e9:08:59:c4:15:4e:4d:7f:c9:03:79:94:
65:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6D:42:CB:E6:D7:90:19:99:31:40:49:A2:98:9F:68:1F:38:63:36
X509v3 Authority Key Identifier:
keyid:89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ed:ef:9f:e5:0b:68:42:28:bb:18:28:12:5e:f1:8b:3f:3f:
51:ae:74:7b:26:ad:83:62:af:33:bc:3c:c8:b9:25:76:52:86:
ec:f2:0b:34:ce:aa:a1:fd:09:73:3b:dd:b1:32:06:72:c1:91:
f4:93:b7:f5:cc:7b:32:42:1e:12:c0:77:23:9f:04:bd:a7:0f:
2e:eb:ff:88:14:38:a7:7a:1b:12:9b:1f:fb:fe:ce:45:2b:06:
7d:03:35:28:0b:13:af:9a:64:39:fd:cf:1c:fa:84:f5:2b:7d:
fd:73:0a:60:8c:65:d5:7f:c1:6c:c0:23:9b:07:50:33:64:b7:
b3:51:de:7a:05:5f:85:49:03:67:56:51:6c:5f:e6:9d:fe:b4:
ca:31:a4:aa:e2:6d:7f:6f:5f:53:82:b4:4e:5c:05:b1:03:d2:
aa:61:b3:c6:b1:1a:b7:1a:cc:c9:fe:a8:57:e4:be:f3:11:27:
e5:05:cc:85:51:fe:53:fb:84:e6:f2:5e:37:37:94:b6:87:81:
af:6d:24:22:3a:77:5e:5b:c8:63:a5:2e:54:e6:de:16:4a:42:
b7:53:7f:c8:c7:e0:8f:14:d6:17:b2:93:01:8b:55:68:dd:2e:
1b:18:29:94:d0:1b:ed:bf:6c:67:2a:ac:e0:09:92:4c:90:3d:
84:1f:56:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:10:38 2025 by rpki-client