Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
File: 9aEH8WvGsAt2TDms_WMzY2RtWZY.mft (raw, json)
Hash identifier: lDqVGB6O8YNhWUUW7gm40uf8McNBMeyNhe5gOg/3CNU=
Subject key identifier: ED:CA:C1:EF:20:6A:F4:5C:69:8F:AF:6A:00:86:B8:7B:F4:0A:25:86
Authority key identifier: F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
Certificate issuer: /CN=f5a107f16bc6b00b764c39acfd633363646d5996
Certificate serial: 019846D1D3EC464E1546E11C3794ED8B65AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
Manifest number: 0321
Signing time: Sat 26 Jul 2025 13:00:13 +0000
Manifest this update: Sat 26 Jul 2025 13:00:13 +0000
Manifest next update: Sun 27 Jul 2025 13:00:13 +0000
Files and hashes: 1: 9aEH8WvGsAt2TDms_WMzY2RtWZY.crl (hash: DNBrHNZcD8J1uiEECwuu9ld9dk+1i8i6s2HTAUBd/dE=)
2: i8fQ4SDQp7cMewdMesiICFs9ZAg.roa (hash: bCMQ7OQEomrpckp+sy5Q02dQCcDmXIN8SQy3NDUMNVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d1:d3:ec:46:4e:15:46:e1:1c:37:94:ed:8b:65:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a107f16bc6b00b764c39acfd633363646d5996
Validity
Not Before: Jul 26 13:00:13 2025 GMT
Not After : Jul 27 13:00:13 2025 GMT
Subject: CN=edcac1ef206af45c698faf6a0086b87bf40a2586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:08:3a:b4:7f:e1:50:6e:cf:ec:92:21:1b:
90:5a:08:07:f2:6e:c1:b6:69:99:df:74:f0:2b:0b:
f4:38:c0:19:54:4e:b2:49:77:a0:ef:8a:ed:2b:4d:
c8:b7:42:32:69:dc:0e:14:f0:44:59:10:ff:ec:a1:
35:49:1b:73:23:29:ad:f7:3f:70:5d:d6:8a:c0:cc:
c8:c0:2d:ca:68:ea:62:91:ff:6c:10:02:9b:c7:82:
29:0b:af:85:1c:2d:8c:d0:df:a0:9b:d5:7d:cc:d8:
0a:25:96:57:57:86:c8:99:cc:dd:71:33:70:96:47:
9c:57:ad:28:18:c8:14:fe:f2:4f:7a:8a:65:a9:6e:
68:af:6d:f4:ad:2b:b5:84:87:b3:8b:b3:d3:e3:0e:
70:c9:b9:7d:7c:47:5d:cc:13:16:50:b0:4b:b5:43:
0c:92:15:08:df:0f:e4:ec:09:ba:74:d4:38:8c:80:
0e:02:9b:c4:df:a0:5e:ef:e9:98:10:5f:6b:6b:24:
67:1d:b3:eb:58:46:e6:4c:fe:37:ce:11:29:f5:4b:
65:44:2f:0c:1b:53:c0:3c:0a:83:b8:a8:fa:bc:4b:
b0:48:59:b3:32:6e:46:26:57:b6:a3:97:33:1f:35:
d6:70:0b:71:75:99:12:6a:eb:a4:c0:48:f6:ab:59:
b2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CA:C1:EF:20:6A:F4:5C:69:8F:AF:6A:00:86:B8:7B:F4:0A:25:86
X509v3 Authority Key Identifier:
keyid:F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:0c:90:35:27:bb:89:51:95:f3:02:66:21:64:6f:da:64:68:
31:84:24:6e:14:6c:0f:08:33:80:76:31:fb:4d:65:4c:13:52:
d6:e7:30:69:22:01:66:5f:e7:c0:0a:0e:db:23:b6:4b:dc:4c:
d3:f4:1a:1a:4b:3d:17:32:1f:55:26:63:5a:6f:6a:13:bc:e6:
4c:51:ff:ef:56:87:d5:34:7d:e6:8f:24:b2:cc:5f:a6:d7:d0:
9c:53:c5:bb:00:5d:70:14:61:99:2c:b8:ab:bb:d8:f7:19:7a:
52:d7:93:64:41:df:c2:43:6d:53:f5:fc:46:44:d8:cb:77:3f:
2a:9b:aa:1c:18:eb:42:fc:5c:ff:40:9e:1c:55:3a:81:53:28:
c4:44:7f:9d:85:62:cc:e5:34:fe:14:21:c2:7c:5d:e8:a0:65:
bc:e4:83:9f:fd:cf:32:80:b1:20:8c:e2:a7:f0:fa:2b:a7:29:
79:e4:30:d1:5e:4d:5e:f2:25:2b:a3:87:a9:b1:da:26:ac:bb:
98:e9:7e:35:52:94:ff:8a:a0:43:cf:98:a1:ba:a1:66:95:6d:
1d:51:d4:14:d2:05:4b:3c:06:f4:0c:a0:ff:60:1b:b1:0f:1e:
05:4f:e1:ed:ef:13:23:d9:6e:21:d3:93:41:b6:eb:e1:37:38:
55:06:4f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:47:41 2025 by rpki-client