Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
File: _-cGk0VLwzSF3sadIZ0FAmVKwEo.mft (raw, json)
Hash identifier: c0chm9zT/2WN7lmC2Zcl3yLoum6vm9MXxKevrc+jMV0=
Subject key identifier: 4D:9E:B8:BA:B2:9A:37:FA:85:8C:53:CF:BD:3C:6F:A6:FA:0C:A2:A1
Authority key identifier: FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
Certificate issuer: /CN=ffe70693454bc33485dec69d219d0502654ac04a
Certificate serial: 019879E4437DFEC5E89A9935BD2BA05A01D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
Manifest number: 10AC
Signing time: Tue 05 Aug 2025 11:00:59 +0000
Manifest this update: Tue 05 Aug 2025 11:00:59 +0000
Manifest next update: Wed 06 Aug 2025 11:00:59 +0000
Files and hashes: 1: HTKjluKoMYE3YnxNS8OX7g6z7cg.roa (hash: sAIqDaQKvUjEGEm5NaK3hjATSYMoprKa9F9LOvjEkOU=)
2: _-cGk0VLwzSF3sadIZ0FAmVKwEo.crl (hash: OwRdTjcLEp5U9pvsvaG+kyrqlpO34+z1B/xhYVevD1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:e4:43:7d:fe:c5:e8:9a:99:35:bd:2b:a0:5a:01:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe70693454bc33485dec69d219d0502654ac04a
Validity
Not Before: Aug 5 11:00:59 2025 GMT
Not After : Aug 6 11:00:59 2025 GMT
Subject: CN=4d9eb8bab29a37fa858c53cfbd3c6fa6fa0ca2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a0:52:3c:eb:b0:52:4a:2a:df:3d:64:00:5e:
cc:03:ef:98:39:bd:c5:14:0e:60:7b:b6:7a:e0:99:
75:cc:ad:50:21:43:cd:e2:e8:23:1c:41:f5:72:72:
de:18:24:8f:5d:70:74:aa:35:49:f7:8f:65:86:a8:
55:33:71:6c:f2:c4:19:b3:a3:7e:ec:22:ac:4b:01:
f7:34:51:81:39:b9:24:c4:61:64:21:b6:85:47:9e:
9e:17:95:88:60:41:bb:6d:a5:2b:b3:e3:47:50:cf:
82:77:0e:01:74:e0:55:4f:05:71:a0:14:2f:94:11:
99:3b:69:fb:24:9c:bc:ec:5f:9d:95:46:a0:ed:0f:
ec:f1:b1:e2:c5:44:ae:e2:12:ec:a6:8b:e5:a2:9e:
63:e8:50:65:81:ab:7a:ea:52:2a:17:16:7a:b6:60:
c4:cc:0c:df:6a:29:35:97:b1:ac:8a:fc:44:a8:ff:
bd:3d:9e:07:ba:53:e3:a5:9a:11:60:4d:e7:d4:e7:
40:a8:a0:ed:ac:12:e1:c0:e7:db:32:41:c4:a4:f5:
cb:99:ce:cf:14:e0:f0:ee:43:ff:93:7f:6a:0b:6c:
88:f7:74:59:d2:2f:5f:a2:35:93:d9:63:f6:48:d3:
63:99:d7:9e:2a:8a:0e:ea:3d:d2:37:f5:4f:2f:b5:
46:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9E:B8:BA:B2:9A:37:FA:85:8C:53:CF:BD:3C:6F:A6:FA:0C:A2:A1
X509v3 Authority Key Identifier:
keyid:FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:9d:33:f3:91:fb:90:f1:ff:c1:c6:91:59:1f:d7:c0:fc:7f:
08:ee:a0:e0:5d:75:c7:3a:6b:95:74:3c:f9:2b:f2:1c:ec:36:
92:39:98:4d:d0:5e:5d:e6:b3:04:1e:85:a9:8a:f1:55:f5:23:
11:4f:a6:97:0d:b3:64:98:82:fd:0a:23:c5:e8:36:ea:48:e8:
99:02:3b:8c:56:c5:0c:28:d3:ad:91:2f:2a:b2:ac:1e:ec:2e:
03:58:27:7a:9b:9b:a9:e1:49:01:15:89:9c:b5:b9:eb:a5:f1:
e7:97:52:77:37:bc:7f:31:2e:35:4a:9d:33:d0:ce:cd:d5:89:
b2:b8:33:0c:39:15:3d:45:61:83:ef:2e:2c:d3:70:6c:26:37:
e0:0f:e8:85:98:0f:18:c6:05:99:de:6b:62:1b:e4:4c:26:3c:
ea:53:be:41:73:d4:10:9a:d0:ad:e4:a4:71:93:6e:22:b4:1e:
35:b0:36:13:60:84:60:ae:82:9f:e8:47:85:06:af:d2:61:00:
f3:56:4f:48:e7:19:db:74:61:27:c7:61:b1:d5:e8:6c:b5:33:
43:54:b9:8a:4a:24:3f:45:2d:e6:e2:2d:35:1b:4b:8d:e7:d1:
87:88:fb:72:c2:e5:da:4f:a0:bf:ed:7d:a8:61:cb:35:01:63:
b7:a5:3f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 19:57:08 2025 by rpki-client