Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
File: SvrK0nmIVvDwZaJloQlwaUGsqOo.mft (raw, json)
Hash identifier: Wh7cy5+ws4DuvGNtMRv02uUN/PbKga6LCE67g6UFfGE=
Subject key identifier: C8:09:BE:66:8C:4F:11:76:B0:98:B8:6A:C0:A3:D2:73:80:63:01:56
Authority key identifier: 4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
Certificate issuer: /CN=4afacad2798856f0f065a265a109706941aca8ea
Certificate serial: 01988EED2FAD8054C3F914C67F1425A17813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
Manifest number: 11BE
Signing time: Sat 09 Aug 2025 13:02:45 +0000
Manifest this update: Sat 09 Aug 2025 13:02:45 +0000
Manifest next update: Sun 10 Aug 2025 13:02:45 +0000
Files and hashes: 1: SvrK0nmIVvDwZaJloQlwaUGsqOo.crl (hash: kb6jI4ZoXRhrISKrWszt1xZoNwzgFnvlg+bNGXadRVw=)
2: rKZbB3iW2mhQrV3B7dzkdgnj7Hg.roa (hash: bzWIX1UDDDSaemHwck5e4pimDCRd9S56ZPwPBB+GA2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ed:2f:ad:80:54:c3:f9:14:c6:7f:14:25:a1:78:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afacad2798856f0f065a265a109706941aca8ea
Validity
Not Before: Aug 9 13:02:45 2025 GMT
Not After : Aug 10 13:02:45 2025 GMT
Subject: CN=c809be668c4f1176b098b86ac0a3d27380630156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9b:9f:e9:6e:a4:8e:58:90:91:c6:7d:97:8a:
b7:c9:ec:a9:85:49:83:a3:18:d4:c6:cb:2c:0d:a1:
10:df:aa:94:d8:51:77:e6:7c:33:cb:31:cb:48:e0:
c5:ca:15:ff:32:a8:05:4e:39:7a:d7:37:d5:dd:18:
26:f6:94:16:54:d5:ef:d4:78:77:45:c6:67:a2:04:
a2:0d:50:f2:7a:6c:e6:d8:43:6f:84:51:fb:be:db:
fa:7c:38:ac:52:ab:26:e1:f3:ff:a5:82:6b:c7:63:
90:94:77:56:18:c8:91:11:c4:3f:3a:d0:37:f1:d4:
d5:f0:c2:16:54:bf:45:c1:0f:51:2c:a1:32:49:88:
7e:4c:fb:61:ec:af:8e:c3:b3:3c:fa:5e:9c:eb:85:
3d:9a:63:08:66:62:6a:7b:9a:82:a0:e9:9f:c8:15:
ab:01:ba:fd:5c:c9:50:6c:79:7b:e3:4d:3b:ef:43:
c7:2d:7f:56:17:6a:b4:88:0a:cb:f8:fc:55:ec:53:
a6:06:e2:9b:fc:32:e6:f9:e8:72:d9:af:12:83:af:
91:d7:a5:16:c7:fd:b1:29:16:2b:4e:54:89:30:74:
d7:6c:27:49:4d:f8:58:99:03:7e:65:22:ed:fd:97:
00:e1:5d:ec:8b:d7:39:fe:23:80:b1:d1:5e:7c:6b:
c6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:09:BE:66:8C:4F:11:76:B0:98:B8:6A:C0:A3:D2:73:80:63:01:56
X509v3 Authority Key Identifier:
keyid:4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:32:d5:7b:e8:ad:5a:b4:70:e9:82:ad:f1:45:2d:89:0c:d0:
b3:b9:3d:73:09:7b:87:2a:6d:80:46:67:42:b6:07:25:6c:cf:
3c:3f:16:3e:c0:5c:0e:ac:ad:95:6b:9c:93:7d:46:f1:97:f5:
22:cd:ae:7d:bf:56:72:a1:94:0a:f5:22:ec:7b:b0:01:22:e4:
39:1c:d7:53:77:94:03:4a:9a:55:47:7d:22:b8:5c:b8:7f:8c:
71:a7:bf:92:54:3b:f1:f8:34:bb:8d:69:13:38:7f:66:eb:ae:
6e:75:a2:23:09:b2:67:ea:b7:cb:14:f3:9d:d2:fb:4e:16:d4:
22:70:71:31:23:4c:c3:98:c0:c2:d6:aa:f5:20:b0:51:2b:fe:
03:4a:4a:39:46:10:c1:6a:4e:89:8e:b9:55:12:0b:67:71:09:
ff:41:c2:ec:2f:da:aa:4e:f2:fd:79:3e:3f:09:a4:22:42:06:
d4:d7:0e:43:24:22:38:b0:cd:c8:15:e5:7b:6b:05:5c:f5:67:
77:48:f2:52:70:a1:c8:d0:9b:14:31:db:d8:19:09:e7:dd:8e:
b8:e4:1a:85:37:bf:a3:7c:3c:c5:d0:8c:60:22:83:d1:16:5a:
6a:36:9e:ee:b5:f7:a3:9b:da:d5:9b:14:fd:6b:80:33:06:90:
2a:7d:bb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:19:27 2025 by rpki-client