Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
File: tF5iJw0g-UZ6avx4lj28-4D79So.mft (raw, json)
Hash identifier: ot1fVRJ7AYK4gh9GXX8NMQEvrLDqXX2QmP+9ajn3oKM=
Subject key identifier: 58:23:33:E6:F6:68:92:DB:2B:AC:F5:4F:16:3A:B0:FF:F0:50:CC:23
Authority key identifier: B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A
Certificate issuer: /CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a
Certificate serial: 019923A0E8BD104296AB1EDC1F3D12562074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
Manifest number: 0DF1
Signing time: Sun 07 Sep 2025 10:02:51 +0000
Manifest this update: Sun 07 Sep 2025 10:02:51 +0000
Manifest next update: Mon 08 Sep 2025 10:02:51 +0000
Files and hashes: 1: tF5iJw0g-UZ6avx4lj28-4D79So.crl (hash: vhY/z/pYlVI5BdfHhx62gURCODZWdMEOElzVilFwCJA=)
2: uvCFX9itk7RPxPZl6lvvghFjg1E.roa (hash: P3N8o135VPbcqFaS3kCnXkMSVi3GCBY96T9QuQyMyig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:e8:bd:10:42:96:ab:1e:dc:1f:3d:12:56:20:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a
Validity
Not Before: Sep 7 10:02:51 2025 GMT
Not After : Sep 8 10:02:51 2025 GMT
Subject: CN=582333e6f66892db2bacf54f163ab0fff050cc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:82:b8:09:1a:ea:76:00:07:0d:de:85:43:6b:
f8:ae:63:69:d6:76:c6:08:86:d9:e9:cc:2d:2e:fe:
eb:71:83:e5:74:a5:ae:9a:83:1c:76:8d:b8:92:55:
62:a0:48:a0:a2:c0:e0:e9:8c:79:a8:fa:eb:ce:48:
35:d6:5f:02:d3:df:15:e9:ce:14:93:a6:05:9f:60:
40:45:75:dc:20:15:49:e8:48:15:67:22:3c:11:97:
81:3f:84:b6:11:90:82:e9:6d:5e:62:06:f5:52:84:
9a:50:0b:3a:3e:ee:0e:6b:95:5a:85:4c:e3:f4:b9:
dd:1f:f9:59:c6:a0:67:3c:e8:c1:1f:64:04:0b:9d:
fe:c0:2b:28:60:8e:76:b2:93:f7:94:f1:57:fe:8f:
67:cc:da:42:a3:b0:ca:70:01:c8:98:37:86:0e:11:
cc:b9:75:3b:93:01:c4:2d:09:6d:21:b9:f6:62:26:
b9:13:3c:66:c8:2e:00:b3:fc:47:d2:e3:ff:1b:ba:
14:d1:7d:f1:a8:5f:68:fe:d6:88:eb:c5:e9:67:e0:
db:d5:e8:dc:38:8e:0e:f0:7d:54:d9:ee:3b:38:7d:
33:06:df:e5:4c:e6:cb:12:a2:ad:85:f2:ee:6a:87:
cf:83:aa:a9:22:cb:3d:69:d2:5a:2d:1f:36:18:54:
e0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:23:33:E6:F6:68:92:DB:2B:AC:F5:4F:16:3A:B0:FF:F0:50:CC:23
X509v3 Authority Key Identifier:
keyid:B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e8:14:4d:1c:1d:c7:17:31:7b:32:09:ec:c6:68:39:42:cf:
60:90:36:75:97:79:23:55:60:ac:d0:0a:a8:61:36:39:9a:af:
f4:74:cb:02:53:c2:e9:8a:60:e3:1f:a0:ce:32:af:0b:9a:cf:
50:75:8e:b7:78:6d:a9:ff:14:7d:a3:83:6f:5a:2b:a7:fa:34:
9d:1c:ed:ed:a7:77:9c:8b:84:e6:96:b8:64:8a:cf:d1:2b:05:
a8:81:25:9a:36:7b:e4:6f:5f:32:1f:72:b9:cc:16:1b:8b:ab:
03:b3:15:d4:ff:76:08:ff:d6:1d:e2:62:6f:6c:22:a4:eb:90:
62:82:3e:da:59:42:46:71:5f:37:72:05:5b:59:4d:3b:f2:05:
bb:8a:fb:f3:61:5b:3b:d5:3c:64:76:fa:d7:a8:a3:12:72:f2:
e3:ae:fa:5d:44:bf:12:9f:bc:8e:e0:f1:81:0b:d9:04:c1:7c:
2c:52:d5:98:01:a8:21:f7:cd:c7:d0:e2:84:cb:6c:d1:6a:ab:
8f:1a:19:e0:d3:c1:bc:6a:e5:1f:4f:11:18:d5:6d:68:b4:2c:
ff:1c:cc:21:47:4a:98:92:a2:1d:f8:0f:c2:d6:f2:a2:19:55:
99:44:99:a1:45:fa:cc:87:0f:27:af:3b:1c:20:fc:63:35:06:
a9:e2:3e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:58 2025 by rpki-client