Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
File: r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json)
Hash identifier: rgYx9TmKv5m1sJPBazx8cnQX87WC3KA37Y+5vy0vGw0=
Subject key identifier: B8:C4:E9:DC:36:9B:15:F2:04:84:D2:06:08:46:CA:42:5F:E0:75:7D
Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
Certificate issuer: /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Certificate serial: 019957C5316DD975B3BA6DEFF1839EB67580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
Manifest number: 090E
Signing time: Wed 17 Sep 2025 13:02:44 +0000
Manifest this update: Wed 17 Sep 2025 13:02:44 +0000
Manifest next update: Thu 18 Sep 2025 13:02:44 +0000
Files and hashes: 1: DTxczwIBr_nfZRTIPgBtQYWGTi8.roa (hash: +VMycRtyrx3wbrRNOQ5x4frKIMykN9VHtpPYdKmVF5w=)
2: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: 92BNIDXc4c3/VIGHECAMCwTxeK9UVucHX4OvpTop+ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 13:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:c5:31:6d:d9:75:b3:ba:6d:ef:f1:83:9e:b6:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Validity
Not Before: Sep 17 13:02:44 2025 GMT
Not After : Sep 18 13:02:44 2025 GMT
Subject: CN=b8c4e9dc369b15f20484d2060846ca425fe0757d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ba:7c:92:1e:f3:74:66:de:0a:f9:f1:0a:b0:
de:88:58:8b:84:de:d0:dd:a2:89:32:09:27:3c:f8:
4a:48:95:b6:8c:28:40:7d:94:ba:68:b5:2b:5a:fd:
a8:99:49:6c:27:a2:59:1e:91:3c:96:d5:49:67:e4:
04:27:b0:5b:8b:f6:64:79:37:0d:22:8b:58:3d:91:
9f:fe:55:56:fa:c7:92:ea:51:d1:0a:d6:8b:a0:36:
bc:4c:09:7d:a9:f0:1e:32:4c:bd:be:a1:c4:da:2f:
82:95:f9:e7:e1:61:6f:5e:ef:68:5a:96:38:72:81:
c2:1b:48:c8:44:fe:0b:56:27:3a:09:4f:da:80:d3:
eb:e5:9f:8c:22:4a:44:4d:38:6a:c6:e3:96:99:80:
8b:55:c7:7e:af:dd:72:70:1d:34:f5:77:3c:cc:84:
3a:ea:e4:60:99:69:ad:9e:8a:d4:c6:c7:21:1c:c1:
ef:55:58:3c:d4:5b:52:06:1a:20:6e:65:98:d2:f5:
4a:17:97:f8:ef:03:6b:67:ff:54:e3:67:b8:6f:b5:
bf:eb:8c:03:5c:80:58:f5:15:41:a5:ec:54:53:2b:
9d:ff:92:64:de:ff:40:c0:e4:56:4b:34:24:6e:4a:
d5:08:d5:b2:d6:00:80:a1:0f:fa:53:75:38:49:75:
3c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C4:E9:DC:36:9B:15:F2:04:84:D2:06:08:46:CA:42:5F:E0:75:7D
X509v3 Authority Key Identifier:
keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:37:32:b6:9b:7f:4a:32:3a:84:71:b3:a6:9d:30:f1:03:f5:
70:f2:0a:bc:25:3b:fb:67:58:c6:9a:68:6b:c7:6e:b2:fe:01:
ce:12:2c:3f:e0:75:29:8f:19:41:bc:b3:71:b1:a2:12:76:d0:
ef:ba:24:47:a8:e6:ce:0e:7a:d8:05:87:48:4c:2a:96:d8:15:
ec:bf:c1:b6:bf:49:19:92:0c:7e:6e:95:ff:7a:56:ac:02:1f:
ed:75:fe:b0:c4:41:55:c6:71:3c:d6:1b:24:d8:b6:d9:90:cb:
20:7e:df:f2:65:61:2d:db:77:86:be:85:33:66:9e:44:2c:d7:
1a:3f:1f:8b:b6:28:6a:ef:96:cf:0a:08:c7:37:07:9d:54:07:
97:42:43:08:8c:9c:84:5c:27:41:f5:ff:62:06:70:fe:5b:c5:
12:47:d7:09:50:9c:07:13:dd:30:1c:4d:78:d0:fc:45:c1:25:
a1:3f:93:5e:d8:f9:85:56:b0:e1:6f:5f:d8:64:83:f1:51:9a:
8f:27:fc:f8:45:64:3b:45:8c:08:61:fb:0b:47:03:c3:ce:06:
f9:25:17:d3:5d:9d:cb:aa:1e:4c:08:b4:bb:f1:c6:9b:ac:b7:
35:9c:80:7d:74:4e:3f:11:69:79:88:56:ab:a2:b1:b4:f6:38:
a3:5e:b1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 15:15:17 2025 by rpki-client