Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
File: rm8YQW19RwqgStALyldoPHidhU0.mft (raw, json)
Hash identifier: X1ao8KGKn4EJ0R/P1RNgQW2no2UipwOp1rL4JIvJjBo=
Subject key identifier: 22:D3:E8:66:BC:19:EA:87:15:80:3E:E2:50:BC:9D:4F:E4:C8:CB:AD
Authority key identifier: AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
Certificate issuer: /CN=ae6f18416d7d470aa04ad00bca57683c789d854d
Certificate serial: 01984778317A826DD33D3E3C3C533DD17EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
Manifest number: 0CE6
Signing time: Sat 26 Jul 2025 16:01:55 +0000
Manifest this update: Sat 26 Jul 2025 16:01:55 +0000
Manifest next update: Sun 27 Jul 2025 16:01:55 +0000
Files and hashes: 1: 1-boXqKY_Hyoe19Z5JIZ3K6AJj94.roa (hash: a5qc0h3BhqmeqSpAZh7GFmd10hjtqvPl4/lqfepgblo=)
2: rm8YQW19RwqgStALyldoPHidhU0.crl (hash: 8I5qpWUt5evD1fMvobNIv6pgMkQJbpEc4n7RUx+ffMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:31:7a:82:6d:d3:3d:3e:3c:3c:53:3d:d1:7e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6f18416d7d470aa04ad00bca57683c789d854d
Validity
Not Before: Jul 26 16:01:55 2025 GMT
Not After : Jul 27 16:01:55 2025 GMT
Subject: CN=22d3e866bc19ea8715803ee250bc9d4fe4c8cbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:70:a9:9a:ee:b6:df:14:22:c4:e9:17:a6:b4:
8c:13:d7:ad:c6:07:f4:0c:c8:c9:e8:4a:da:26:0b:
32:e7:84:8f:eb:2f:06:27:16:79:2d:d2:49:45:2c:
bb:c1:54:aa:f1:ef:ed:94:1c:b3:ef:02:b6:c5:a7:
b8:af:35:c5:f5:a9:0d:be:bb:8f:ad:ae:a1:01:82:
93:25:30:bc:ce:9f:c4:63:50:63:36:99:62:56:48:
92:e0:f4:db:55:a0:29:6d:0a:2b:16:fd:0d:17:f1:
b4:4c:6b:48:a7:0b:22:20:45:0f:1e:27:cb:ee:ee:
fe:88:5b:86:cc:93:28:26:73:38:aa:be:85:e9:9e:
e1:fa:f0:e5:cf:d0:99:c5:0e:d6:b7:20:a2:e5:9d:
de:d7:7f:9a:c0:44:1d:a7:ac:b1:43:49:a8:fd:59:
36:95:e6:ea:4d:c9:7b:54:2b:c9:b4:52:c4:51:f9:
8e:62:c1:9f:45:98:f7:49:fa:ba:a9:ad:1b:c3:fb:
db:05:8f:c9:e4:c5:2a:b2:aa:ee:97:a1:76:eb:67:
1a:7b:c7:54:04:d6:12:a4:a7:eb:ca:94:91:bb:df:
ed:3d:cf:fb:c9:c8:66:8a:f5:5e:ee:0c:12:a8:5e:
22:89:88:9f:a3:af:c3:31:2e:b8:e8:d7:06:c7:2d:
27:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D3:E8:66:BC:19:EA:87:15:80:3E:E2:50:BC:9D:4F:E4:C8:CB:AD
X509v3 Authority Key Identifier:
keyid:AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f4:42:24:cf:6d:d8:e9:01:db:67:a5:69:7f:3b:ca:79:25:
12:7e:a4:0a:ba:55:55:5a:70:17:c0:2f:e8:99:d1:3d:0f:6b:
99:48:83:1f:24:6b:51:e7:ab:50:fd:fb:c7:69:1a:53:db:1c:
73:85:0c:1b:93:b1:c1:85:eb:c2:53:c6:ad:2e:cb:c4:45:bc:
18:b3:bb:e4:2e:6b:25:4d:1f:49:ca:92:e8:c3:38:ff:42:ee:
73:6d:ff:b5:ff:11:d0:74:11:d3:6a:e4:05:51:f1:45:75:51:
9b:4f:c8:e2:37:9f:50:f4:fb:6a:b5:51:d6:81:19:f8:7b:9e:
c1:ba:15:2a:54:1f:0e:13:4f:65:77:a7:58:26:e5:bb:b8:83:
9c:94:99:63:8d:3a:12:e1:0f:0a:50:20:6f:43:62:54:50:41:
31:67:30:fc:31:da:3e:fc:41:3c:22:00:15:aa:87:75:e8:12:
44:c4:d0:b1:9c:a9:9a:b8:65:e9:c6:9d:38:5d:6b:19:79:3a:
63:79:94:3d:35:36:64:3e:46:21:17:89:a1:88:ba:8f:3a:06:
e9:01:2a:ce:aa:93:67:db:90:78:f5:10:8d:13:12:a5:54:99:
ab:12:f4:65:71:63:19:9d:6d:06:b7:81:24:e9:b8:ce:37:13:
dd:c0:0d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:32:45 2025 by rpki-client