Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
File: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft (raw, json)
Hash identifier: IQkjTbu5LWZ3s3zO7RRhYIWAjvXpQsFLAwZIfPDdJLY=
Subject key identifier: 29:15:B6:51:22:F3:88:3D:F0:52:2F:BB:1C:1A:EC:35:5C:99:E5:8F
Authority key identifier: A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
Certificate issuer: /CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Certificate serial: 0198733D75A153974E54A35C84C8128A92C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
Manifest number: 0B99
Signing time: Mon 04 Aug 2025 04:01:04 +0000
Manifest this update: Mon 04 Aug 2025 04:01:04 +0000
Manifest next update: Tue 05 Aug 2025 04:01:04 +0000
Files and hashes: 1: E8EItKN2__9iKd7VUUHBehRVQCo.roa (hash: mIn23TrAWNsxopm3nGDSwuz19rtPaaB79Dzo0Qrhuqk=)
2: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl (hash: W8fzvJIeKNG4eqrhm2YPtmdGEFn18GyjcRsHNYiNid0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:75:a1:53:97:4e:54:a3:5c:84:c8:12:8a:92:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Validity
Not Before: Aug 4 04:01:04 2025 GMT
Not After : Aug 5 04:01:04 2025 GMT
Subject: CN=2915b65122f3883df0522fbb1c1aec355c99e58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:18:43:39:e7:66:f5:13:7c:54:8a:c4:31:f0:
ff:6c:f2:66:5e:bc:1e:39:5b:8e:cc:2d:55:46:86:
16:bc:b0:91:3f:bf:38:b7:3c:8d:28:bb:f6:da:8f:
79:a2:13:6b:f2:63:25:f1:0b:46:a1:21:8a:30:9a:
4d:1e:3b:77:53:0c:cf:24:bd:fd:5a:05:ba:3f:d6:
ea:b4:79:a8:d4:a7:80:05:bb:60:4f:e1:9a:4d:99:
da:bd:2a:ea:29:39:a8:50:82:dc:fb:ea:65:25:ad:
ac:16:2e:c0:7b:01:e3:72:7c:e7:b4:c8:13:c3:f5:
d6:21:6d:ac:02:d7:b5:88:ce:54:94:f8:d4:f5:b2:
b6:d8:9c:0a:73:f1:3c:a5:df:0a:10:5b:53:86:65:
98:ad:ca:d9:ba:ac:9d:17:a1:f2:d6:8b:74:a5:86:
18:01:14:f5:87:65:41:4e:96:e0:02:80:e0:43:e8:
92:8e:38:fa:ad:30:3c:1f:17:47:fd:76:ea:71:23:
b2:08:85:09:37:13:9d:6a:67:c8:ea:1b:d4:a9:fd:
12:57:b6:9f:14:a9:fd:c2:84:69:51:2b:c8:8a:6e:
d6:9c:9d:22:65:ac:74:a7:2a:25:59:5e:ae:6e:8a:
7e:a6:53:fa:32:ec:79:71:d1:3f:2d:a0:d3:3b:27:
c2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:15:B6:51:22:F3:88:3D:F0:52:2F:BB:1C:1A:EC:35:5C:99:E5:8F
X509v3 Authority Key Identifier:
keyid:A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:58:f7:70:31:62:42:16:00:8c:b2:c2:e3:e8:9a:2d:cc:9b:
d2:cd:7d:b2:d7:2e:0c:c0:36:2d:31:9d:0c:a4:4d:5f:3f:1f:
0b:a2:d3:3f:c5:0f:34:1b:a2:02:cf:67:ea:c5:d3:2a:d7:1f:
e2:a2:e8:bb:08:e8:83:11:a4:41:a7:12:ca:b6:bc:23:73:52:
1a:da:b2:c8:8d:3c:25:36:c9:5c:57:12:2d:18:72:85:f6:28:
45:d8:76:62:28:21:a4:30:12:01:5b:19:85:a5:4a:fd:07:f3:
c3:21:ed:cb:34:f9:3e:f2:e1:4e:17:9d:70:01:bb:22:8b:1e:
f0:e8:3d:83:4d:2b:32:fb:6d:64:50:a7:79:80:65:93:2d:70:
60:ce:8f:4e:d3:9d:88:9e:2c:76:94:39:70:59:9d:18:05:24:
05:40:e4:8a:f9:a2:ec:0b:79:44:7e:98:40:7c:dd:16:1f:c7:
fe:18:b5:d3:5e:d1:4a:25:14:66:70:88:09:00:50:06:db:de:
cd:30:26:52:c1:54:61:47:6b:90:82:e6:69:ae:1a:f5:04:d1:
cb:79:e1:e5:72:55:a1:93:53:4d:5b:a0:62:c6:7c:e6:0d:94:
10:8e:74:8c:54:c0:90:e0:1a:c7:fd:79:fe:4e:c6:37:97:51:
b2:d8:bd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:30 2025 by rpki-client