Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
File: 21m85hup0qDjVb4B8TQbjfdq69s.mft (raw, json)
Hash identifier: B+3MrEW714BT5NDKdf6SSB0luqVxBni5tvNBvD4H2Yk=
Subject key identifier: 55:AF:F2:E6:52:9D:5B:0C:BA:1F:E1:3C:F4:34:76:BD:7B:15:4D:A0
Authority key identifier: DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
Certificate issuer: /CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Certificate serial: 01988A6A42308F09ABA5B076156BD713D153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 16:01:16 +0000
Manifest this update: Fri 08 Aug 2025 16:01:16 +0000
Manifest next update: Sat 09 Aug 2025 16:01:16 +0000
Files and hashes: 1: 21m85hup0qDjVb4B8TQbjfdq69s.crl (hash: j5/FC5kyCh9ObZ5FsocUnbarS3Aqj39art8puVNkhyM=)
2: y6zUASqLMYC9vOre4NE5oaCGRIY.roa (hash: nU1xlMhFlcEyY9/vfWFwqCMNEfoKNvZKlYNQ0axw4og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:6a:42:30:8f:09:ab:a5:b0:76:15:6b:d7:13:d1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Validity
Not Before: Aug 8 16:01:16 2025 GMT
Not After : Aug 9 16:01:16 2025 GMT
Subject: CN=55aff2e6529d5b0cba1fe13cf43476bd7b154da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:45:04:f6:7b:6c:d7:11:5f:d1:de:8e:67:c3:
4d:2e:9e:12:c4:2a:7e:85:4b:0f:0c:44:80:83:91:
07:86:51:9b:26:28:33:28:6d:e6:40:60:1c:ac:ff:
50:ac:d6:2d:38:97:58:d7:11:36:ce:08:a9:28:33:
76:3e:ca:b0:74:d7:94:f2:b5:5c:da:c4:19:af:06:
1f:1d:80:7d:39:e6:f4:c8:27:4a:e2:59:c2:cc:1f:
60:0f:ca:38:b2:49:eb:98:ce:6b:e5:f3:4f:d8:67:
d8:90:a6:81:9d:76:86:cc:52:5c:ed:6c:3e:b1:84:
e8:ad:be:7f:73:c3:de:17:15:ec:a2:2f:3c:a9:e9:
bc:2c:48:13:5f:e0:d4:c7:c5:89:c5:51:20:32:40:
80:e2:c1:57:68:07:cd:19:8c:93:44:df:8b:0c:96:
e4:d0:70:ae:80:f7:df:77:ba:5b:97:b5:93:c5:91:
dd:fc:c5:87:2e:56:69:ca:1e:ca:89:35:90:9f:69:
b3:77:a3:01:bb:7c:c3:22:fd:e4:eb:37:79:7c:7c:
2e:1b:bf:09:29:69:be:6b:5a:43:a9:15:df:91:19:
13:0b:06:af:ac:c0:98:52:d3:86:71:4b:d0:e4:e0:
b9:19:76:8d:85:5b:4c:4c:7c:40:c3:b2:c6:cb:7f:
76:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AF:F2:E6:52:9D:5B:0C:BA:1F:E1:3C:F4:34:76:BD:7B:15:4D:A0
X509v3 Authority Key Identifier:
keyid:DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:74:cb:86:15:d5:e0:d7:98:50:5f:76:43:d6:b2:28:63:f6:
c9:e3:78:37:a0:30:f7:10:3f:32:16:9e:d8:47:27:e9:f8:9f:
f2:80:db:17:ba:97:78:ac:04:47:a4:2a:34:72:db:fd:78:89:
88:60:34:b1:c3:0f:95:95:36:2f:f8:53:19:ec:a8:ff:28:65:
f4:0f:dc:82:23:f8:c9:88:90:de:e9:61:9d:9b:d3:45:44:78:
71:e9:8b:c1:d9:d5:22:ad:d5:7e:0d:18:cd:fe:1a:a2:87:e0:
97:5e:34:b4:91:a8:2f:44:d0:dd:f1:05:9e:78:2c:f4:70:13:
61:07:ec:24:1d:0b:00:0e:2a:34:e3:62:e3:f9:47:90:fe:f1:
9c:e6:0d:07:f5:d5:8b:2c:f4:2a:94:ac:93:b0:81:01:5d:10:
61:2a:ac:73:ff:38:07:7f:87:67:24:85:05:97:39:fb:c5:94:
02:4f:51:0a:9d:7d:18:f5:6d:72:57:28:11:90:d9:49:d8:f5:
4f:1f:6f:91:8c:7c:9e:23:f8:60:37:67:69:f9:da:f4:6a:05:
f3:93:5b:ca:00:5f:e3:d6:75:d5:34:48:5a:64:a6:c9:cb:b5:
40:a9:e4:3e:2f:b3:63:0a:12:dc:ed:b5:69:b0:f6:19:bf:3c:
01:91:db:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:57:05 2025 by rpki-client