Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json)
Hash identifier: plda+/KUvNO0ciAJLRDYYvfrieEgPYuahYR2+rAdZH4=
Subject key identifier: 7B:25:6B:5D:DD:90:13:E5:8A:B2:C8:C1:2E:0D:F6:31:C5:F6:AF:50
Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Certificate serial: 0197808E89EE560A287E9D853ED7CC845A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
Manifest number: 0E
Signing time: Wed 18 Jun 2025 01:01:54 +0000
Manifest this update: Wed 18 Jun 2025 01:01:54 +0000
Manifest next update: Thu 19 Jun 2025 01:01:54 +0000
Files and hashes: 1: dlXIk7WimVWVHc3ungqiNoZMusw.roa (hash: RfuMfcHrLbRg0Y3xsz3a1+VdHPSrzNKZ40aYKpVDn2E=)
2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: +4Yr/2Orvz9UfGd8D1aUBEHTmobtnaf5b3IB/9MwDs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 01:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:8e:89:ee:56:0a:28:7e:9d:85:3e:d7:cc:84:5a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Validity
Not Before: Jun 18 01:01:54 2025 GMT
Not After : Jun 19 01:01:54 2025 GMT
Subject: CN=7b256b5ddd9013e58ab2c8c12e0df631c5f6af50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7a:a0:9a:14:39:b9:0b:0b:01:16:43:f8:de:
e4:ed:48:36:df:5c:80:4c:e3:b8:9b:dc:e9:a2:d4:
99:02:6c:93:7c:01:4e:22:08:cc:5b:84:b8:2d:9e:
5c:96:50:38:39:0b:e8:cb:4c:dc:ee:ed:03:28:57:
9c:aa:21:52:b3:a0:b4:0f:6a:da:0d:9d:7b:19:43:
c5:30:9a:6a:3e:1e:ac:c8:05:63:47:e6:84:69:74:
9c:9e:47:21:06:52:2c:57:94:74:1f:ac:5f:09:4a:
6c:b6:b0:c7:73:65:0a:ee:17:b9:ab:b2:a2:41:48:
5b:74:d6:56:8e:4a:e8:88:70:8f:46:7d:3d:74:19:
ef:9b:c6:ea:58:4b:d0:37:b8:32:23:d5:4c:7c:34:
58:c9:ec:9b:f9:2f:31:f2:21:c8:3a:c6:77:70:f1:
30:6c:a0:b8:16:02:b4:d2:e0:57:85:c4:3d:05:53:
c0:3b:60:38:02:cf:91:0d:8d:f9:59:71:f1:65:35:
31:13:6c:02:09:8f:e4:76:4a:cb:63:32:30:b0:cc:
38:f8:aa:d7:62:d1:50:a7:c7:53:6d:79:a0:10:2c:
37:f8:87:0b:60:a9:fa:59:bc:4c:bb:38:7e:96:c1:
f2:86:a3:21:9a:4f:f3:92:2d:99:63:1c:42:37:ce:
09:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:25:6B:5D:DD:90:13:E5:8A:B2:C8:C1:2E:0D:F6:31:C5:F6:AF:50
X509v3 Authority Key Identifier:
keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ce:b1:36:34:36:27:48:54:b4:b4:f3:95:63:1c:05:23:bb:
3d:bc:a6:2f:19:08:dd:b1:44:eb:3a:d0:aa:4f:62:f4:73:f4:
44:8b:95:dc:5a:87:63:c3:34:de:72:96:fe:8c:b2:88:0f:17:
18:63:9c:dc:cb:25:8e:12:99:10:6a:33:c3:e3:83:ed:c7:77:
39:7e:dd:59:b0:df:35:68:0b:b2:0b:95:e0:65:22:aa:e2:eb:
83:7c:36:75:cf:04:c0:ef:dd:66:a4:60:32:cf:93:90:f2:e4:
7a:2a:3a:27:fc:d5:78:74:e5:f3:3a:ec:44:55:4b:cb:c2:e6:
2c:b7:f2:1f:d4:dc:46:b3:2f:b1:89:dd:7f:42:ab:e4:69:24:
d5:37:9f:d7:c1:e1:88:49:63:da:e2:67:6c:d5:f1:e3:2e:e5:
1f:65:82:0f:3d:ba:d7:e1:4f:c5:1d:ec:e8:2b:ad:d4:ec:02:
63:e1:e1:8e:6d:3a:04:0a:31:c3:47:51:5d:a8:ae:02:75:b1:
a0:c7:a0:79:70:27:15:ba:b9:9c:ae:78:c0:8c:5f:a2:e1:05:
91:b1:52:54:26:a8:39:6c:c6:26:cc:45:d5:86:41:cf:3a:7e:
e6:36:5b:55:62:f2:aa:69:3f:64:f4:33:02:77:a2:6f:10:31:
bd:ab:9a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 10:40:51 2025 by rpki-client