Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
File: rm8YQW19RwqgStALyldoPHidhU0.mft (raw, json)
Hash identifier: na/jcl5SfM/XgpAaVlt3gyCnA8GTTN5dYXN97jjkhO4=
Subject key identifier: E7:E5:11:AA:45:B3:30:AE:38:A1:A2:F3:C9:E6:62:C7:E8:79:CF:59
Authority key identifier: AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
Certificate issuer: /CN=ae6f18416d7d470aa04ad00bca57683c789d854d
Certificate serial: 01988EEBD91CE6563FF2DE0F428B7DC42C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
Manifest number: 0D0B
Signing time: Sat 09 Aug 2025 13:01:17 +0000
Manifest this update: Sat 09 Aug 2025 13:01:17 +0000
Manifest next update: Sun 10 Aug 2025 13:01:17 +0000
Files and hashes: 1: 1-boXqKY_Hyoe19Z5JIZ3K6AJj94.roa (hash: a5qc0h3BhqmeqSpAZh7GFmd10hjtqvPl4/lqfepgblo=)
2: rm8YQW19RwqgStALyldoPHidhU0.crl (hash: nCy6EsGM8zRv5hGbhjKLhrroX1vOvdkWGgAtRTH1yc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:d9:1c:e6:56:3f:f2:de:0f:42:8b:7d:c4:2c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6f18416d7d470aa04ad00bca57683c789d854d
Validity
Not Before: Aug 9 13:01:17 2025 GMT
Not After : Aug 10 13:01:17 2025 GMT
Subject: CN=e7e511aa45b330ae38a1a2f3c9e662c7e879cf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4f:e3:db:57:3f:46:30:66:d2:5c:85:6b:02:
be:0a:21:e9:e2:62:46:cc:de:35:6b:c9:2a:06:ba:
b4:6d:89:9e:15:ed:fc:b8:98:17:f8:07:e6:b2:40:
fb:b8:4f:56:a4:26:28:e9:cd:47:ee:d4:24:55:53:
e1:e3:9a:e0:64:42:4a:97:36:05:f8:13:d8:2c:2c:
fd:dc:8a:83:15:b1:66:e2:c5:0c:fb:f9:09:09:f1:
31:7e:74:1a:b6:2e:a3:49:70:b1:5b:82:36:7f:53:
09:98:fd:7c:b5:66:86:ac:ab:9e:d0:57:5a:9a:ee:
04:46:de:2e:cf:d0:32:ca:e6:52:8e:c2:80:86:f1:
95:f0:93:af:18:5f:c2:73:f5:cc:18:48:9f:d3:be:
9e:5c:03:92:62:f3:f2:7b:1f:c2:fc:1a:2b:27:4b:
12:71:fb:28:30:f6:47:19:12:cf:d7:9a:9b:d2:ac:
31:4c:27:00:c3:15:e3:9b:9a:ca:da:94:99:30:83:
09:c9:6c:a0:7b:8d:5f:7e:08:1c:06:7d:d7:bb:a5:
f0:f3:03:e6:0e:75:7c:e5:63:ab:14:7e:22:69:8d:
f2:cf:a6:64:b5:6a:ef:4d:87:aa:84:d2:b6:d6:eb:
8a:dd:22:5f:aa:db:9d:0f:ad:a5:af:f4:62:47:57:
08:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E5:11:AA:45:B3:30:AE:38:A1:A2:F3:C9:E6:62:C7:E8:79:CF:59
X509v3 Authority Key Identifier:
keyid:AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:77:dd:b9:5a:a9:48:d5:f6:4a:53:4e:b1:93:e3:37:98:d4:
f3:24:8d:a4:16:f1:c4:dc:07:a9:01:b8:65:1c:92:50:01:f8:
e9:09:6b:c7:35:b4:84:81:3b:c8:47:fb:5e:c7:43:6f:34:a8:
32:c3:56:92:97:52:1c:b8:2f:f1:e1:4d:91:7b:49:0d:5f:c8:
c7:98:4f:be:70:78:53:e9:98:ad:12:3d:7a:90:0e:bb:10:fc:
c6:4e:b5:4b:0c:5f:ea:bc:4d:dd:d6:51:64:c5:62:8a:b1:c8:
f2:2c:19:b2:f9:e5:40:3c:6b:99:44:4c:27:5b:a5:09:3f:25:
41:87:dc:dd:c5:58:75:51:46:32:61:e7:62:9a:b5:1c:dc:e5:
99:1c:b4:2f:e6:e4:5e:1c:34:2c:a9:29:77:5f:4e:bd:7b:5c:
b0:41:16:01:84:17:23:f5:6e:d0:dd:11:eb:90:4e:6f:90:a4:
ca:dd:fb:c1:98:5a:40:c5:9c:fe:93:f8:68:82:d0:5b:9e:bc:
6e:3f:2e:c3:fd:f4:c5:c7:14:48:44:cc:6a:97:de:f4:e7:b7:
f7:17:95:2f:44:43:39:96:c7:c2:8f:3c:39:96:fb:e6:49:86:
70:2a:64:e2:e6:8d:17:d4:30:55:03:21:14:50:ef:c1:8f:92:
30:07:47:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:41:41 2025 by rpki-client