Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
File: sXtEkEx2lKVAig0pcsOf8LGwPqU.mft (raw, json)
Hash identifier: IQJPeMM1FYvXX0W14b05Wb2HWDuKtk+FQ1UXf+UPiAQ=
Subject key identifier: 75:F2:83:D9:E6:0D:A7:A0:41:B9:56:49:52:F9:8B:D1:FC:D8:98:B5
Authority key identifier: B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
Certificate issuer: /CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Certificate serial: 0198933654C98E3147276D005EBA94CB53AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
Manifest number: 0E71
Signing time: Sun 10 Aug 2025 09:01:08 +0000
Manifest this update: Sun 10 Aug 2025 09:01:08 +0000
Manifest next update: Mon 11 Aug 2025 09:01:08 +0000
Files and hashes: 1: UDhX8BuvHOYMS5e9vYOFjWjGBYk.roa (hash: C1cyztzqKdd1lIZCQFArU9xrG3gU6hCt1VPEU5YkilM=)
2: sXtEkEx2lKVAig0pcsOf8LGwPqU.crl (hash: XehrJF29LAVj2PejWovT9PMj2k4pQAJkN0X/e3xNd/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:54:c9:8e:31:47:27:6d:00:5e:ba:94:cb:53:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Validity
Not Before: Aug 10 09:01:08 2025 GMT
Not After : Aug 11 09:01:08 2025 GMT
Subject: CN=75f283d9e60da7a041b9564952f98bd1fcd898b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:48:1b:77:69:f4:21:21:7b:b6:53:b2:90:
4d:78:84:c8:00:d6:b9:c0:b8:33:bd:15:44:29:f5:
df:e6:94:2c:07:6f:5e:7d:1a:10:2d:4e:19:91:7f:
e4:66:c1:6c:96:c4:e9:46:7c:de:dc:0d:1a:89:1e:
0f:8f:17:55:bc:d7:6b:ae:b8:83:80:e2:9d:c2:cc:
15:10:6d:2d:b7:a1:35:b8:de:31:6d:49:ce:b7:bb:
65:c5:d3:7c:10:67:09:90:eb:23:d5:d4:b3:03:64:
4c:bd:41:d8:e9:d4:0a:74:bb:5a:5f:d6:0c:29:3e:
f0:c9:a9:75:c6:1f:a7:5b:75:f3:ff:ff:fe:ab:29:
a5:2a:ab:55:35:3a:18:99:e1:27:9c:a3:49:13:c7:
d3:60:e0:77:ec:7d:c6:72:b2:a6:6e:88:1c:40:0d:
9f:f8:1c:ad:3c:2c:c6:12:27:21:a3:dc:88:b7:72:
60:4e:98:cc:b7:5e:e6:90:ee:53:6c:d8:a8:0f:d7:
c8:ce:82:d5:69:65:48:14:e4:9b:da:55:a6:f5:6e:
4d:7c:3d:1d:d8:ec:08:d8:b7:12:62:d0:6d:e9:89:
e6:ae:5a:63:49:7b:45:2f:a3:44:4b:72:3e:b6:70:
c6:ad:17:dc:22:53:c7:d1:80:40:86:84:03:81:b7:
12:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F2:83:D9:E6:0D:A7:A0:41:B9:56:49:52:F9:8B:D1:FC:D8:98:B5
X509v3 Authority Key Identifier:
keyid:B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:6a:5c:13:ec:5e:c7:54:bc:f6:8b:c7:75:de:67:a1:c3:e8:
10:a8:c4:00:9e:7a:20:80:e5:81:98:14:64:3c:ac:0a:69:49:
29:9f:2c:b7:d3:e8:fa:1a:0a:3a:a7:61:7a:b1:aa:ed:a3:87:
89:1d:56:53:5c:94:18:27:95:c2:d0:e5:1b:1f:79:60:e9:0d:
b1:4e:f0:46:dd:4c:b3:78:5a:b4:ca:44:58:bc:3d:25:43:64:
3d:11:1f:75:ef:16:07:cd:f5:8c:c1:57:c4:54:14:90:51:3e:
ee:2e:e7:6a:1b:62:16:4f:8f:bd:31:ed:9b:b4:08:7b:a1:83:
30:32:f9:0b:58:2d:d0:ee:0f:e0:da:d4:95:fd:79:f3:63:b9:
0a:f9:5b:d7:7e:a2:7e:82:96:f9:7e:a3:12:19:61:65:2a:0e:
5b:06:88:92:d2:54:22:e1:e5:be:97:40:d0:75:82:a4:d8:5f:
b4:82:7c:d0:e0:1d:79:42:3e:63:75:80:67:41:4e:67:49:3b:
fe:bb:01:f4:92:2f:a0:a3:05:c0:da:31:d9:6d:2a:64:2c:e1:
d3:8b:e1:57:14:a5:4c:7d:ba:2b:a0:6e:81:44:2d:1e:ad:ab:
39:7e:f2:8a:21:8c:82:cd:0f:c0:81:0c:da:05:e8:22:6e:ab:
95:bd:ce:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:50:48 2025 by rpki-client