Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: dl8yvkjcinkUGJB+JBee9dPWhM7sl5aO1hE9B5m7eyY=
Subject key identifier: 69:9C:7F:F0:33:A4:97:77:F7:45:F3:5B:3B:38:DB:96:56:59:CF:89
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 0198752BA926A59379D29951D2ED9CDAAE41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 0732
Signing time: Mon 04 Aug 2025 13:00:52 +0000
Manifest this update: Mon 04 Aug 2025 13:00:52 +0000
Manifest next update: Tue 05 Aug 2025 13:00:52 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: BjTG9i5hlvoJn5L6KYtGNoER8Ij7Rje8yh48BVWviYc=)
2: wvcELSI8p3zOC9FNSdvAaOhzdZI.roa (hash: aWdD7yZCiGD/jhoFXeJkT3mN7GJI55ijye/m8elp9fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:a9:26:a5:93:79:d2:99:51:d2:ed:9c:da:ae:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Aug 4 13:00:52 2025 GMT
Not After : Aug 5 13:00:52 2025 GMT
Subject: CN=699c7ff033a49777f745f35b3b38db965659cf89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5c:58:3d:83:60:89:e5:cb:96:cc:df:d3:af:
9e:70:55:77:49:05:22:d5:8e:83:2a:f9:d3:03:72:
b3:d1:90:10:72:05:b7:4b:df:66:7c:f9:c6:87:27:
06:5b:86:e5:05:2e:2a:ea:89:a9:10:2a:66:0d:e5:
20:e1:ff:4a:bf:af:e4:43:68:47:41:10:b2:e6:96:
d9:fd:16:5b:15:db:fc:c8:c8:e4:76:66:ad:6a:ea:
e3:44:75:b9:cf:4f:bf:fc:d8:86:2e:75:1b:8e:fd:
5e:0c:b1:66:0f:d1:2b:18:ab:4d:f6:5b:b2:1b:12:
1c:06:ad:d8:8a:a3:5c:3d:81:05:75:29:18:1f:31:
cd:e4:f2:bf:2d:05:4a:53:f4:b8:21:68:91:f4:d2:
15:68:9a:e3:8f:eb:5b:df:a7:a9:36:59:9a:dc:2d:
f6:1d:2c:68:0d:1c:7e:4e:66:25:54:58:43:73:af:
f7:3b:63:89:fc:55:96:8e:9d:a0:0b:91:87:d1:e0:
13:e5:e4:dd:ea:b2:93:b5:e5:e4:6c:96:b6:ea:da:
9c:b3:15:ff:1c:ea:ef:88:03:3f:2e:2a:13:62:f4:
63:cf:0f:db:bb:e3:f6:d3:be:25:3d:7d:dc:f4:41:
94:9d:85:94:0a:18:fb:4f:50:f7:33:a0:e1:cb:dc:
0e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9C:7F:F0:33:A4:97:77:F7:45:F3:5B:3B:38:DB:96:56:59:CF:89
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:84:51:31:65:4a:88:36:c9:0e:91:28:f0:a8:56:8f:ef:4b:
31:6c:f9:1d:8f:b9:b2:08:a5:d9:ee:be:f8:95:c9:65:1a:a4:
af:ba:ea:95:e8:b0:89:8b:1d:8a:6c:d9:93:77:f2:ac:76:fb:
3a:89:0d:bb:2e:95:74:35:ad:62:40:cd:56:a9:50:6b:2f:af:
85:ea:fa:bf:d7:6d:6d:fd:57:59:fe:08:b8:67:96:80:78:3e:
4c:a1:ac:66:a6:76:2d:52:9a:f3:30:ec:48:ad:7a:fe:b4:90:
e2:ad:0c:05:73:7f:62:05:04:0e:03:04:3d:58:09:1c:e9:01:
2f:fa:cf:e4:1b:80:77:41:52:38:3a:50:11:60:4c:66:d9:3f:
dc:21:37:96:96:8e:4e:0d:15:d1:00:0e:d3:d1:4e:b4:d6:f5:
ba:7c:f8:57:1b:c1:49:8a:fe:9a:7c:57:48:e6:6c:80:cf:98:
ad:37:34:83:dc:95:2a:5f:92:cd:47:fa:4a:be:d5:4d:89:db:
47:e9:d0:2b:da:70:93:24:80:fc:14:1c:1c:02:7a:a2:9b:c7:
5f:97:bc:4b:af:1e:b9:c2:78:55:21:c5:5f:19:73:b1:2f:56:
5e:86:36:cd:5e:9e:f2:c5:d6:da:71:73:9c:45:79:5e:68:b8:
64:1d:7e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:54:17 2025 by rpki-client