Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
File: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft (raw, json)
Hash identifier: 7B/86qpUvwmFBEqALihb4EC38Uv8ZCYwG5LVPEbbO4Q=
Subject key identifier: EE:95:A6:59:1D:10:4C:F2:0F:04:58:DE:AD:9C:F4:DF:EB:C5:56:5F
Authority key identifier: F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
Certificate issuer: /CN=f4b207ef8024244bbb4a0106af19270150c9f624
Certificate serial: 0198966DB2D40FE019EDB1381B4E6870DBEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
Manifest number: 05A0
Signing time: Mon 11 Aug 2025 00:00:28 +0000
Manifest this update: Mon 11 Aug 2025 00:00:28 +0000
Manifest next update: Tue 12 Aug 2025 00:00:28 +0000
Files and hashes: 1: 7DAxFJT5VyzcSgHTnJmDdUKxQNw.roa (hash: 37ijJqs68GCjjpypVGN9wvpiuMLosaLv3KKoBIsmUtU=)
2: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl (hash: +aHaSSrUZvj39Kk1NT/7M3xZhqmozLpK8/XhYv7KA10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:6d:b2:d4:0f:e0:19:ed:b1:38:1b:4e:68:70:db:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b207ef8024244bbb4a0106af19270150c9f624
Validity
Not Before: Aug 11 00:00:28 2025 GMT
Not After : Aug 12 00:00:28 2025 GMT
Subject: CN=ee95a6591d104cf20f0458dead9cf4dfebc5565f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b5:e0:08:33:e7:ef:3b:16:c3:15:65:73:4e:
09:43:ee:a9:98:5d:ca:ff:c8:26:13:24:d3:b7:78:
ad:5d:90:81:72:9f:61:23:71:ea:66:c3:bc:af:69:
c3:f6:42:b5:ed:c1:34:92:f1:3b:89:43:da:99:ad:
74:7a:ec:c0:e5:99:07:f1:02:82:f2:58:bc:d2:89:
1b:db:82:f6:78:50:e9:c5:45:e4:bf:e6:09:b7:c3:
03:1b:d0:46:10:d2:f0:b0:96:7e:8a:de:54:ec:f8:
9d:ee:49:fb:74:1f:54:41:d2:49:4e:d8:c6:8a:f6:
1e:ac:df:9a:d4:99:02:f2:0b:de:b5:e2:08:cc:e3:
7e:b0:56:16:a2:45:d4:f6:8d:47:a2:33:33:b7:51:
e1:65:09:e1:d5:21:58:4a:9b:4f:07:66:55:41:15:
bf:70:5d:1f:95:eb:6f:45:0c:36:71:42:c7:c5:6f:
ad:0c:ef:90:a2:6a:73:68:28:66:3a:f4:fe:17:73:
67:04:f1:2b:4d:94:fd:4d:95:de:42:09:5f:51:85:
7b:9a:d2:c1:23:3d:89:75:4d:5f:83:73:22:1d:fb:
ba:a2:7f:4c:67:a6:f3:4a:1a:b9:06:f8:81:4a:3e:
8e:f6:4d:5e:11:e0:4f:49:0b:4c:c5:a8:38:5b:f6:
66:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:95:A6:59:1D:10:4C:F2:0F:04:58:DE:AD:9C:F4:DF:EB:C5:56:5F
X509v3 Authority Key Identifier:
keyid:F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:16:d6:48:e4:d5:bf:2f:d3:63:19:b4:5f:4f:60:08:8c:40:
8b:1c:b6:6d:93:5a:40:d3:c7:b7:f2:b0:3a:9e:d5:ad:59:b1:
d4:d6:a3:1f:33:49:3f:6d:b3:f4:61:4d:4b:ef:71:b8:b9:68:
86:d1:c9:0e:48:9f:7d:d5:53:9c:79:27:d6:17:aa:31:55:b6:
9e:e9:d3:0c:b9:a0:fb:e7:43:bf:b2:8f:00:4b:f4:33:45:a4:
89:3f:d0:06:bd:59:b2:6b:26:a0:91:a0:08:79:ef:29:46:d0:
3c:a7:9a:20:aa:02:9e:a3:e5:dc:9c:23:e2:45:0b:8e:eb:71:
6b:77:8d:50:c6:bf:e0:64:53:6c:a7:37:bd:df:70:80:8f:47:
81:a3:68:42:cd:0d:77:2a:84:e3:d6:07:95:21:c0:76:99:56:
62:d9:d4:d3:dd:9e:c2:f9:e1:3d:cb:d2:48:3f:3d:f3:6c:e3:
43:6a:03:d7:ee:1d:f9:a1:ad:cd:c0:67:88:5c:37:82:9c:f9:
c5:99:eb:6f:48:42:f8:3a:7b:00:4c:1e:fd:94:8a:51:3f:55:
d3:a3:4b:4b:74:22:72:93:71:3d:59:cb:b1:62:80:be:c8:2e:
fe:d4:c3:0d:0a:b6:4a:f6:fe:5f:1c:6d:80:e7:ad:e5:21:72:
73:c4:74:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:08:50 2025 by rpki-client