Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
File: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft (raw, json)
Hash identifier: dIYr6ImKaAsy6ksIc4VaMzxor58hca5w0nMTYEficeU=
Subject key identifier: E6:3B:FC:51:35:E1:0F:DC:EC:D4:E1:9E:14:94:33:CF:27:52:A2:DE
Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
Certificate issuer: /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Certificate serial: 019847ADC199BF2B530B84C45331DC4B9C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
Manifest number: 15A9
Signing time: Sat 26 Jul 2025 17:00:26 +0000
Manifest this update: Sat 26 Jul 2025 17:00:26 +0000
Manifest next update: Sun 27 Jul 2025 17:00:26 +0000
Files and hashes: 1: 2_G9MV3MarApcSIaC14zzAbTXto.roa (hash: Xsc0Q6TWSpbouB+us1TXP5dMLNVqwF4nhlITaZf4sco=)
2: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl (hash: JycNksKod+F95pNcNe+ZMIW/zWUTFZNITNDRQown79k=)
3: f4A325yGj48RuMfkjcKdx35IWgg.roa (hash: j8y8oC78Ayis+Zl1DL+FUWPv5N+us3D0FIOg/cZJpDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:c1:99:bf:2b:53:0b:84:c4:53:31:dc:4b:9c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Validity
Not Before: Jul 26 17:00:26 2025 GMT
Not After : Jul 27 17:00:26 2025 GMT
Subject: CN=e63bfc5135e10fdcecd4e19e149433cf2752a2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a9:13:60:76:33:75:7b:cc:ec:35:f2:59:62:
84:05:68:34:fc:14:45:7b:b1:87:e7:38:3b:a6:16:
d2:50:52:6c:1c:5a:f5:f8:95:e5:03:1e:10:5f:e0:
4f:ac:b2:49:96:67:64:4f:0c:80:68:76:54:11:22:
35:49:aa:cf:c1:86:4b:8a:b6:52:6e:cf:33:76:d3:
bd:fa:92:19:bb:29:4f:49:fe:bd:5b:8c:1e:22:c3:
2a:ed:e7:7a:3d:36:f1:40:98:0e:2e:4c:2c:1d:13:
6a:2b:dd:2f:ee:6a:84:4b:cf:b3:c1:e2:70:41:65:
b4:f6:98:76:1f:03:95:3b:26:79:9c:cd:69:8a:31:
95:39:2f:7d:be:09:f6:73:c7:e4:30:6f:a6:3f:7d:
ab:99:0d:de:33:4d:35:ce:63:39:39:0e:06:72:da:
c5:a9:d7:e7:2d:de:be:06:d1:eb:bf:61:56:82:8b:
b2:ce:e3:3b:aa:24:c2:7a:d1:0d:f1:58:ea:d6:f1:
34:97:4e:eb:d9:1b:48:ed:79:fb:19:c9:04:fb:b5:
74:91:a6:2d:96:52:8c:ea:b1:95:2f:42:36:44:4e:
d2:ec:75:61:d2:69:2e:a3:c3:ed:73:95:7e:51:0e:
f3:bc:a0:27:5c:25:cb:c6:83:a7:b4:e1:43:79:24:
1b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3B:FC:51:35:E1:0F:DC:EC:D4:E1:9E:14:94:33:CF:27:52:A2:DE
X509v3 Authority Key Identifier:
keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:39:f6:07:48:9d:b9:2c:45:1b:5f:61:2c:ae:b2:c7:9c:79:
c7:64:9e:23:e9:69:c1:79:d9:9f:d2:9e:2e:fb:64:08:bb:fb:
1c:76:4f:41:d7:c7:17:a2:66:95:52:71:e6:21:7e:fc:b3:a9:
ef:a0:4f:3e:8d:65:65:8a:a0:87:86:3c:c9:63:bc:cf:fc:99:
78:59:4b:56:7d:be:06:78:f5:c4:d6:f8:aa:8b:1f:84:21:9b:
15:30:8e:cd:36:53:27:1c:59:92:fa:dc:6e:1d:78:8b:94:41:
1a:b1:43:52:ae:c3:f6:5e:32:af:b3:23:5b:c5:fc:75:57:f4:
b7:17:9e:bf:b6:49:f4:4c:0c:ef:c6:98:a6:94:c7:c5:2f:29:
66:98:38:30:da:46:6c:9b:e7:55:94:80:2a:17:2b:5c:0d:cb:
41:7b:d3:9e:b2:e0:cf:5b:3b:f5:17:3d:7c:3e:f2:aa:8a:13:
43:b6:1c:a2:82:ac:d2:4d:ff:0d:a5:2b:88:87:6e:cb:ff:97:
4a:4e:96:64:45:16:fe:55:a6:6d:fa:a7:cd:1d:1a:8a:25:ce:
72:1d:f5:e7:e7:fc:5a:95:7b:2d:d3:1d:ea:2e:86:6f:9b:59:
e4:71:25:35:da:53:15:f7:e3:99:71:b8:e2:06:16:08:36:0b:
7e:80:16:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:49:07 2025 by rpki-client