Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
File: sA09NPYeSEaIv_-cxwN1WCN3WZg.mft (raw, json)
Hash identifier: 0YwHGepGwwv56p+FfUSsAU44WSjuNwa5E3OnCbPML84=
Subject key identifier: BA:B6:44:D2:30:B6:C0:F8:20:6F:DA:C3:E2:F2:87:62:E6:9C:C9:BE
Authority key identifier: B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
Certificate issuer: /CN=b00d3d34f61e484688bfff9cc703755823775998
Certificate serial: 0198744FAEAEF9FE717477155262CF927841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
Manifest number: 12CB
Signing time: Mon 04 Aug 2025 09:00:35 +0000
Manifest this update: Mon 04 Aug 2025 09:00:35 +0000
Manifest next update: Tue 05 Aug 2025 09:00:35 +0000
Files and hashes: 1: LKbJBE8NWEbtvlmwjvUv8EH6lzg.roa (hash: OvzM1ONuWDYGL3UTKmOuYTSxh3U96Ifed1WChkSuccI=)
2: sA09NPYeSEaIv_-cxwN1WCN3WZg.crl (hash: i1WONGEuK1fPAQH57ChIXI2IWNvdOB8aIeqycX3vgTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:ae:ae:f9:fe:71:74:77:15:52:62:cf:92:78:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00d3d34f61e484688bfff9cc703755823775998
Validity
Not Before: Aug 4 09:00:35 2025 GMT
Not After : Aug 5 09:00:35 2025 GMT
Subject: CN=bab644d230b6c0f8206fdac3e2f28762e69cc9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:43:3a:a6:6a:de:99:83:09:10:04:eb:51:
cc:e1:5f:ef:8d:e9:ea:c0:82:44:ac:4c:a6:d7:89:
b3:e2:7c:2e:05:99:0f:fc:14:a3:bd:68:e0:62:5a:
41:3e:77:11:8d:93:2d:42:81:39:fb:6c:68:47:a6:
1f:c8:12:26:64:ed:de:21:b4:77:f1:08:e0:13:2d:
21:ca:fa:99:0f:3c:11:05:82:2d:26:25:44:f3:2b:
6a:34:7c:39:45:77:ac:0b:4f:73:8f:55:d1:3b:c2:
60:6d:4d:a7:ba:d8:a2:0f:a4:54:79:5e:da:31:3b:
d6:dd:1f:a0:88:63:e1:50:fd:e7:70:49:08:de:09:
0d:0b:5d:fc:e4:94:bf:e3:57:56:5e:b3:08:a8:2e:
13:0c:f8:b2:65:f8:1b:63:10:3c:1f:32:c3:b1:fe:
07:9b:a3:5c:4b:a9:c1:bc:5c:39:bb:69:d1:88:01:
37:f4:4e:94:93:de:8e:72:d4:5e:42:08:30:2f:a1:
bd:1c:f0:98:34:38:8f:91:db:ff:f1:8b:c2:39:75:
91:55:35:b5:50:fd:db:5f:3e:bc:4b:ee:f3:ac:b1:
45:c6:4a:41:b9:e1:90:6e:ca:5c:42:98:60:6d:c9:
f3:2b:07:cc:08:01:6f:b3:fe:dd:23:2b:4e:f2:ff:
59:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B6:44:D2:30:B6:C0:F8:20:6F:DA:C3:E2:F2:87:62:E6:9C:C9:BE
X509v3 Authority Key Identifier:
keyid:B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:ff:c2:8f:cf:34:36:e3:ed:9e:81:b6:a2:66:6e:f4:10:ce:
d2:d5:f8:1f:e8:ec:a4:c3:3f:55:e1:1b:90:26:68:3f:d8:af:
e1:32:a0:4e:ca:ce:17:5e:cd:c4:ed:80:cf:29:0a:b7:1b:4d:
31:9d:bc:e2:81:9c:3f:02:de:93:75:0a:83:55:f6:f4:37:30:
ef:35:31:fd:83:93:26:1f:35:a3:76:ac:db:cb:4f:45:c2:0b:
1a:7e:c7:66:2a:07:1a:b8:43:92:29:b4:48:6c:7a:70:4e:2a:
11:1c:a4:5d:06:1b:7d:16:3c:d5:fa:00:bb:06:d5:ad:7e:2e:
10:53:04:63:15:cd:a8:e9:77:4f:73:98:35:05:18:25:fc:60:
b4:4d:52:b0:bb:48:0e:92:1e:b5:ff:58:44:5a:40:4b:99:f3:
fb:ff:88:e9:82:8c:06:d5:13:1e:b0:50:d6:98:1e:05:bd:5e:
f0:a7:03:03:f2:c4:a6:36:5f:e0:b2:d0:b1:68:e8:6a:65:4f:
75:d7:db:a2:b3:80:0b:10:99:96:49:13:70:9a:49:6d:86:2b:
27:b8:f0:01:78:0a:58:6f:f2:b1:52:55:68:a9:30:83:c0:5e:
d6:b5:e1:33:8a:a7:c7:08:a6:81:4e:5c:03:96:8b:6b:02:c0:
fb:a2:aa:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:02:14 2025 by rpki-client