Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
File: eY1wE6f9u1Zj_ThKT-0SMDFF484.mft (raw, json)
Hash identifier: Q9adUWtlaOSPSqay3GsNRQ/47xNom8BCm3ondWfVjiM=
Subject key identifier: DA:16:A8:E0:48:9C:0A:24:56:76:5E:80:90:2A:E0:45:80:1F:A5:A3
Authority key identifier: 79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
Certificate issuer: /CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Certificate serial: 019921E7910D2D94730CBCCA52B84C3B4FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
Manifest number: 119B
Signing time: Sun 07 Sep 2025 02:00:48 +0000
Manifest this update: Sun 07 Sep 2025 02:00:48 +0000
Manifest next update: Mon 08 Sep 2025 02:00:48 +0000
Files and hashes: 1: eY1wE6f9u1Zj_ThKT-0SMDFF484.crl (hash: D8CtU000+kZKydxJ4JaBh7xgupzFk7MMUk2EvGt6toQ=)
2: rCglPn4knwgWeE7oLxm6sX7WFlI.roa (hash: wKFZrWQvHUIDP0fnVkeuzqCpYiJl4+aOfjYBOGOYUoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:91:0d:2d:94:73:0c:bc:ca:52:b8:4c:3b:4f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Validity
Not Before: Sep 7 02:00:48 2025 GMT
Not After : Sep 8 02:00:48 2025 GMT
Subject: CN=da16a8e0489c0a2456765e80902ae045801fa5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6e:35:63:aa:ff:dd:f1:cd:d9:5a:46:0f:b9:
e1:b9:a0:2c:0b:a6:b5:fb:f2:9f:b9:3f:bb:36:80:
19:5d:0e:a7:03:e7:72:10:b5:e5:21:b7:4e:f1:0d:
53:bf:76:a4:37:4b:a1:14:a7:75:d9:20:cb:d9:9e:
22:06:ba:13:cb:0c:dd:85:96:ea:ca:2e:1d:f0:5f:
26:d7:c8:69:2d:4d:f4:e8:d4:65:65:d2:f3:08:24:
55:97:4c:90:32:b5:aa:fa:9a:85:95:0e:67:24:bb:
2d:d3:de:9f:87:54:6d:5e:d8:3d:81:d3:72:af:4e:
7e:6f:32:e4:15:35:2d:dc:9c:ea:4c:50:08:d7:08:
69:b9:e5:e7:f2:fd:73:76:3f:5d:96:c9:bf:99:b0:
52:14:c8:48:e9:64:b7:a7:b6:5e:b5:3c:63:03:10:
0b:f2:1a:4b:16:7f:8f:03:4b:db:9c:f1:7b:98:d4:
7b:65:24:49:d2:08:5a:49:06:a3:12:e1:e2:9f:75:
c3:72:98:15:84:22:5f:e1:0d:a9:af:1c:2f:e0:68:
bb:e1:e9:f9:51:c5:ac:19:6e:d6:c7:7b:b4:24:ee:
08:6f:d0:a2:36:fa:e5:74:eb:ed:f6:bd:c1:88:13:
4e:d9:24:cf:73:03:67:4a:53:a4:36:e7:44:dd:6d:
fa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:16:A8:E0:48:9C:0A:24:56:76:5E:80:90:2A:E0:45:80:1F:A5:A3
X509v3 Authority Key Identifier:
keyid:79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e9:18:a1:e1:0e:d1:38:34:ca:16:d8:8e:4c:fb:9e:1a:1c:
ec:8a:9a:78:34:43:2d:8a:79:14:33:68:62:84:43:55:2a:5b:
8c:93:58:25:e6:30:87:2c:3f:70:cc:49:7b:18:6c:0d:f8:66:
63:da:27:3d:fa:8d:19:9a:49:04:0b:fe:34:a4:05:93:61:de:
c0:25:a1:eb:84:97:63:24:11:7e:11:aa:26:a1:ce:da:e4:1f:
d0:d6:b5:ec:84:ba:46:de:eb:6e:0b:3a:14:af:2d:77:a0:98:
0c:93:71:5d:d9:0b:16:bb:2d:50:8b:74:29:04:c2:db:3c:a1:
eb:2e:d0:4a:f8:6c:3c:00:eb:7a:45:db:81:16:f6:d1:89:16:
06:70:ab:36:4b:1b:d2:b7:3e:12:eb:83:7b:22:c6:c4:b2:08:
eb:f0:ca:49:0b:b6:91:10:26:80:52:10:98:43:ee:f5:8c:8a:
61:62:13:54:b2:cc:5c:0f:1e:f7:ee:4c:f4:33:37:41:69:58:
7d:8c:30:08:dc:82:65:04:70:e1:53:29:5e:7e:fa:eb:f7:28:
06:d9:76:e4:a2:c5:8c:3e:34:b4:cf:9b:e4:fb:da:db:91:1a:
28:7b:8f:3e:af:74:fc:55:2a:b9:61:fe:cc:87:1e:3c:f6:54:
fb:33:2c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:08:27 2025 by rpki-client