Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
File: 9EAkreXkgCwKL2Hm-A9NItwVSFM.mft (raw, json)
Hash identifier: oEXSYznke8lsGaJRWinrEk5a1Vq/mJJ49PaVuX7zNh4=
Subject key identifier: AC:A8:2E:21:79:BE:1D:AF:C8:88:47:FE:7C:A2:7F:6D:63:BA:CA:AB
Authority key identifier: F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
Certificate issuer: /CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Certificate serial: 01987B2DBE520163A7D814E6A7FAA5C59B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
Manifest number: 135F
Signing time: Tue 05 Aug 2025 17:00:51 +0000
Manifest this update: Tue 05 Aug 2025 17:00:51 +0000
Manifest next update: Wed 06 Aug 2025 17:00:51 +0000
Files and hashes: 1: 4J1X6PCF39tH0Ho4_SbJ7AtxDbg.roa (hash: sDrnXJKsdAbmdaesDlUsR31uPE7GfMdA3txIVC37ks4=)
2: 9EAkreXkgCwKL2Hm-A9NItwVSFM.crl (hash: 8vt8rdMdahr2UAA07wWepsdTEheq72pRaKH5kR5cC8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:be:52:01:63:a7:d8:14:e6:a7:fa:a5:c5:9b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Validity
Not Before: Aug 5 17:00:51 2025 GMT
Not After : Aug 6 17:00:51 2025 GMT
Subject: CN=aca82e2179be1dafc88847fe7ca27f6d63bacaab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:67:d2:b3:08:2d:7d:0f:50:56:2c:56:87:
32:3f:65:f3:44:91:83:ca:3b:03:76:0f:f1:fa:73:
4e:c9:a7:d9:2d:79:41:c9:43:4b:08:66:38:77:65:
23:67:7b:af:2c:a3:a2:3d:2e:29:97:92:54:5f:f3:
cb:be:83:42:9c:bd:b9:0d:9c:12:ba:fb:5d:74:36:
76:b3:08:c8:1c:7c:4c:d4:63:f6:d4:73:95:fd:6f:
2b:28:47:85:a9:89:b8:39:c0:83:75:22:b2:72:0c:
b2:7e:b2:5f:d0:9f:dd:0d:65:76:76:35:21:39:e2:
79:c3:a2:23:00:b0:ac:3f:d0:d6:8f:6f:e8:70:4e:
ba:32:c9:3c:7e:b6:f3:cc:8e:e3:8c:76:f8:14:10:
b2:60:0d:97:4d:8e:d5:f7:31:47:83:1e:da:09:b1:
30:fc:0c:03:f5:1f:df:23:31:cd:97:0f:af:14:57:
95:d4:76:6f:cc:05:d1:ca:ea:b9:60:23:18:57:09:
23:18:3f:14:e9:17:82:48:bb:18:20:47:60:fe:bf:
40:0e:3a:0c:6e:8a:da:1c:65:91:64:bc:2a:99:1a:
0a:5a:63:c8:e7:e3:8f:c3:de:55:33:3d:a4:f8:c0:
6d:eb:99:ff:e4:68:a2:20:b3:27:e0:fc:b7:16:0f:
ed:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A8:2E:21:79:BE:1D:AF:C8:88:47:FE:7C:A2:7F:6D:63:BA:CA:AB
X509v3 Authority Key Identifier:
keyid:F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0c:31:0b:07:98:51:ff:e8:12:12:d6:e7:a2:a5:50:b3:36:
1d:51:6e:c0:89:90:2e:42:4f:84:1e:51:67:01:fc:14:c5:5f:
db:8f:b3:f2:8a:ac:38:00:41:19:9f:19:13:62:cc:ad:39:b2:
5c:fa:b1:a7:83:6a:97:3a:1a:81:07:3f:3b:b4:e3:24:eb:6c:
62:b8:05:a6:8f:4a:2f:1c:2b:56:c7:d6:4e:cd:04:ab:2b:2f:
5f:79:0e:ac:cf:91:0a:a0:36:63:97:2d:03:c1:b9:ec:da:43:
21:0d:db:2c:0c:3e:4b:de:4a:8b:b3:69:52:1c:d4:cb:28:d1:
92:a7:da:6a:e2:5c:c3:c1:17:99:a8:21:5b:6d:83:cc:9f:be:
6d:1f:91:44:10:0d:79:af:0b:67:7e:1a:bf:aa:54:d3:43:51:
64:6c:97:70:3f:c9:39:34:8b:f6:ea:a3:74:8c:25:46:cf:3d:
db:43:6f:5f:f0:d0:b7:56:a1:f5:18:c0:52:26:36:23:7e:7e:
bb:1c:9e:94:cb:dc:50:32:ff:c5:1e:d8:bc:05:c3:be:6c:d9:
84:be:70:54:15:e4:e6:64:64:92:8b:75:fa:0f:c9:07:97:b1:
26:dc:6f:90:4b:35:1e:88:2d:a2:f9:33:b8:66:08:65:ca:1d:
f0:26:c2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:04:51 2025 by rpki-client