Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
File: v9eGsktLMCdbzI1SRONO4ASB15A.mft (raw, json)
Hash identifier: xMFnPyJxG2t1K75cCxgvAiOUGNqG7IbRrvoXnvNfoeM=
Subject key identifier: C1:9D:1E:51:8E:E9:43:95:8D:E0:B6:71:A8:DE:D9:EA:54:10:86:BB
Authority key identifier: BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
Certificate issuer: /CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Certificate serial: 01984588668CB2016155A6CA19842C1D7E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
Manifest number: 1183
Signing time: Sat 26 Jul 2025 07:00:23 +0000
Manifest this update: Sat 26 Jul 2025 07:00:23 +0000
Manifest next update: Sun 27 Jul 2025 07:00:23 +0000
Files and hashes: 1: jvaFexoxtk4rKhDumsQjGLQsBLU.roa (hash: trR6TCS5RgKXy+FTVPF28Tq5uhqKg+8D3gvbODYNaCY=)
2: v9eGsktLMCdbzI1SRONO4ASB15A.crl (hash: TgTK8mbMHj1FkeRGWw0Lh6AQGowKVIQscCknua82YL8=)
3: zPseRt5WlA5PNoUFkbv3vmUfDV8.roa (hash: Ya/w9mpoqyM5Bw8KTqPuY/qxCTIk7UQN48ES6+Vh43g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:66:8c:b2:01:61:55:a6:ca:19:84:2c:1d:7e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Validity
Not Before: Jul 26 07:00:23 2025 GMT
Not After : Jul 27 07:00:23 2025 GMT
Subject: CN=c19d1e518ee943958de0b671a8ded9ea541086bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0f:bb:b7:0e:b0:9e:79:05:38:fc:75:f6:f7:
4d:8e:01:e2:cf:e4:4d:9b:91:cc:c0:26:36:f7:74:
d9:5f:40:a6:5d:69:ee:bc:f5:c7:e6:e4:5f:00:85:
37:00:3f:ae:4f:c2:8a:b4:2c:87:fa:76:39:10:01:
34:13:aa:e0:2c:79:b1:10:7b:14:81:3b:53:4d:40:
c0:73:bc:c1:1a:64:65:80:07:a8:77:21:72:3f:fb:
e3:b9:de:49:82:5e:5c:40:82:4d:a4:12:f0:ba:dc:
2a:90:5b:06:1b:98:7e:93:85:eb:6f:9f:38:59:53:
ec:84:19:94:ac:6b:5d:58:1e:60:04:8e:6e:53:fc:
6a:d1:86:37:83:48:37:61:98:02:e5:db:85:39:5f:
01:e4:72:b6:82:2e:3d:db:2a:ad:dc:d7:18:29:94:
83:5b:4e:59:f5:b5:76:da:f2:a0:66:05:5e:ee:cc:
52:97:6c:29:4f:89:47:7d:f7:63:ae:7b:aa:74:da:
26:93:10:3c:61:3b:42:d7:b3:f5:ac:47:96:81:49:
54:40:16:0b:11:8a:96:b4:b1:9f:36:e0:ba:94:5e:
aa:37:9d:bb:d0:37:2e:0f:eb:fa:e3:06:b6:dd:b4:
94:9a:8a:06:fa:5a:86:0d:9f:3e:c0:99:ee:f7:c7:
3c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9D:1E:51:8E:E9:43:95:8D:E0:B6:71:A8:DE:D9:EA:54:10:86:BB
X509v3 Authority Key Identifier:
keyid:BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:77:7d:e9:1b:f8:6e:10:1a:f8:25:d2:f3:05:1e:9b:fb:d3:
b8:78:dd:af:a0:1c:a7:7e:ca:04:a0:4a:68:e4:0a:fe:a1:b2:
f1:96:1a:e9:7e:da:37:c5:3c:a9:6b:7b:2a:17:98:44:87:b3:
1d:8e:f1:0b:4a:92:18:e8:0a:48:96:fa:35:fe:08:c4:e0:ce:
ef:71:f5:9b:d9:52:c0:cd:9c:5e:a7:9a:73:9d:49:96:12:aa:
4a:4f:07:b3:6e:95:87:e2:18:4c:62:f7:98:00:57:ae:94:a5:
71:f7:dd:06:31:0d:c7:38:e0:9f:27:85:22:0b:7b:0c:55:84:
3e:c6:a2:14:19:fe:95:f9:a7:b0:76:10:8b:06:bc:6c:25:0b:
a8:21:07:ed:cd:55:4c:b7:65:55:86:75:43:fc:8c:f8:ea:91:
9e:6a:7a:80:9b:37:6a:9e:e6:75:00:0e:f3:ee:51:90:ad:f2:
29:d3:a2:e0:ff:40:61:13:57:66:19:c5:62:ba:3c:b9:b7:28:
7d:84:54:e5:82:97:55:b1:7e:d1:b3:5d:eb:37:53:1c:d9:58:
5e:c0:1f:7e:75:1f:54:bd:69:80:3c:e5:33:74:ed:44:98:59:
92:5a:44:18:5a:f6:51:d6:5d:25:98:f6:b1:1e:d4:e7:0c:c0:
92:0e:c2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:46:01 2025 by rpki-client