Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
File: R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft (raw, json)
Hash identifier: VpKzbF6MQF/pKaHRarFBWg15ESHtOmgR3S3CTejwCfY=
Subject key identifier: A8:75:34:95:72:50:12:9E:FD:EF:11:36:2A:5A:21:A8:A2:51:EC:A3
Authority key identifier: 47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34
Certificate issuer: /CN=47e5d333dad9d62d5328d12578a31def42af8f34
Certificate serial: 01989E5E45B67D9EC1A65713E8CC9C45B738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
Manifest number: 08AD
Signing time: Tue 12 Aug 2025 13:00:35 +0000
Manifest this update: Tue 12 Aug 2025 13:00:35 +0000
Manifest next update: Wed 13 Aug 2025 13:00:35 +0000
Files and hashes: 1: I_0zk_rD0Gdq5jU6WeRSly4SVcs.roa (hash: JHLttM3n9KjjQEXLZtpKJI1GYGGri8Vj45nM2EhgE4A=)
2: R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl (hash: 5YPln0CV8eT1/odZvAOEqmEVsyrtdKQyuPV9p2lhpOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5e:45:b6:7d:9e:c1:a6:57:13:e8:cc:9c:45:b7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e5d333dad9d62d5328d12578a31def42af8f34
Validity
Not Before: Aug 12 13:00:35 2025 GMT
Not After : Aug 13 13:00:35 2025 GMT
Subject: CN=a87534957250129efdef11362a5a21a8a251eca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:45:8c:52:b4:22:69:fd:55:c3:88:0f:4f:
af:04:04:d0:b6:59:ca:32:d2:fe:2a:ec:09:d4:7e:
64:02:7d:6b:c5:30:a5:9f:eb:bd:01:89:ab:48:b5:
0e:f5:22:3c:cf:3a:dd:42:53:72:e7:5c:13:f3:9e:
41:ac:7f:d1:d8:f2:94:fa:bf:69:a5:df:6f:ea:90:
85:a5:96:7d:57:c8:65:17:f0:74:8f:2c:13:b7:49:
65:fc:bd:90:7f:04:3b:91:bb:40:bb:fa:58:56:f9:
72:5d:51:f8:5f:5d:be:bc:00:4f:2e:c6:3e:18:b0:
89:a5:b4:13:2d:c5:69:a4:3d:5f:9b:2f:a6:e5:09:
e4:6e:69:27:1b:a3:0f:1e:0b:f1:7e:d5:f5:76:6d:
75:bf:df:fc:30:55:62:26:1a:21:a8:15:89:c1:d5:
c5:68:cd:4e:ec:c2:3d:e3:37:7a:e0:d0:5c:bb:6b:
da:8b:da:47:9a:24:be:19:97:cd:3b:6c:4d:82:9b:
49:35:08:1e:08:c4:54:16:98:9e:98:ec:35:30:f8:
a6:63:1c:31:76:db:12:65:fb:5f:fe:24:94:94:4d:
41:ce:95:1a:56:47:4e:15:25:ec:e7:b4:7d:24:a3:
d8:b8:f0:12:20:24:ef:c2:41:48:15:f8:15:37:aa:
32:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:75:34:95:72:50:12:9E:FD:EF:11:36:2A:5A:21:A8:A2:51:EC:A3
X509v3 Authority Key Identifier:
keyid:47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c0:b7:c3:aa:38:f1:10:ff:39:3e:59:d7:d7:d6:8d:ca:52:
ae:1a:81:ef:f2:c9:71:00:5b:39:ab:27:b4:89:fa:a4:d6:45:
cc:81:13:69:2c:5f:ef:85:d5:a8:17:9e:6b:db:96:31:48:25:
bd:b3:62:ac:b5:d1:e5:c9:8b:52:1c:f1:01:63:7a:fb:5a:a4:
fd:30:2e:dd:08:55:2f:2d:b7:d0:fd:6b:86:c0:79:d3:1f:16:
e8:24:10:1a:0b:36:43:29:48:1b:c3:20:e9:16:98:8d:4a:ba:
66:5c:f1:4a:13:69:62:49:6f:dd:ef:ec:22:9a:eb:b2:ea:aa:
05:fe:56:08:43:bd:7c:ca:12:72:00:3b:5f:f7:63:32:e2:fe:
c0:9d:fd:94:7e:a8:91:4c:c4:68:a0:7f:09:a4:48:4c:96:21:
f8:af:10:73:d7:06:eb:d4:68:f5:a0:03:c2:39:7d:76:94:db:
2c:e0:6f:76:6d:1b:93:95:ac:88:e3:1e:5a:ab:e9:f3:24:ca:
ad:c7:5c:f1:a2:8f:57:99:18:4d:96:d5:35:92:4d:47:cb:3b:
84:60:94:50:88:fa:c8:cd:00:75:cd:66:71:cf:61:ad:7f:e8:
db:76:cb:34:82:83:64:74:51:b5:02:9b:e4:5e:ca:85:81:20:
d7:e2:b6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:50 2025 by rpki-client