Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
File: 240I7cQ5OoZxKW-OrLvs-U12Vio.mft (raw, json)
Hash identifier: SQ0Er1i9zlGO5++60ZUvX+u+LTwyqpvYGdDAkDJF1YY=
Subject key identifier: C0:91:D0:71:1B:FA:2C:A2:F4:74:80:1F:89:E7:4A:1A:E4:B1:2A:FD
Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Certificate serial: 01991BE56D4AF4B210B82695FFDEB79C39F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
Manifest number: 1346
Signing time: Fri 05 Sep 2025 22:00:44 +0000
Manifest this update: Fri 05 Sep 2025 22:00:44 +0000
Manifest next update: Sat 06 Sep 2025 22:00:44 +0000
Files and hashes: 1: 240I7cQ5OoZxKW-OrLvs-U12Vio.crl (hash: Cv0zobHpR0HHSa4xvjymeOggng985Po3jqZjCuYL6LM=)
2: EAKe9346ONHQ_VuM_WxVCj_cv4Y.roa (hash: 5H5/ZpQAnmY/nM8N1VtyRS6/84qLoSsU0G+AmpT2T/k=)
3: RBJ-L0gnLCM7Rv9f1a6uxn7Yu-0.roa (hash: 4xHToao8czKd/Xx3uSwWIpAVRfAfaES7tBaw71UFRvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1b:e5:6d:4a:f4:b2:10:b8:26:95:ff:de:b7:9c:39:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Validity
Not Before: Sep 5 22:00:44 2025 GMT
Not After : Sep 6 22:00:44 2025 GMT
Subject: CN=c091d0711bfa2ca2f474801f89e74a1ae4b12afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:cb:fd:c9:fa:4f:93:5e:47:62:62:31:99:
3e:3f:86:7c:7d:2c:53:01:a7:e0:2e:05:38:70:80:
3d:6b:91:5e:26:5f:ba:7e:c6:dc:a8:a6:7f:3b:36:
32:df:22:8a:7b:bb:a5:ee:2f:c0:db:ea:7d:a7:98:
27:c8:34:c3:fa:e6:7b:8f:87:35:ae:f7:cc:1e:06:
f9:7d:b6:ec:3c:6f:3f:82:1e:8c:ed:c1:8d:69:7f:
24:f3:88:e9:db:91:c0:d1:25:46:bc:5e:23:2b:60:
fb:f3:66:c4:18:53:a5:55:19:07:8d:64:35:ad:8e:
20:d7:d5:d8:1e:8b:70:32:26:ac:f4:f2:56:87:e2:
cf:c2:6a:07:7f:76:51:77:87:2e:bf:8e:88:76:0b:
e4:48:11:59:52:b6:c4:aa:19:41:6c:a4:03:81:60:
46:b7:5b:a3:1d:a9:5a:86:3c:b9:84:2e:f3:e9:d8:
83:35:94:7d:30:77:84:41:89:dd:24:34:ab:a1:e4:
3c:98:0f:3e:03:83:d7:c2:54:3f:71:6b:47:e3:01:
e5:e4:68:74:9b:14:0d:88:e7:e5:ee:fb:c2:fb:5a:
eb:bd:a6:f2:1d:d3:43:56:be:7f:65:ba:86:b1:b8:
e3:34:9a:1a:32:97:ad:5d:dd:00:10:30:27:49:76:
5c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:91:D0:71:1B:FA:2C:A2:F4:74:80:1F:89:E7:4A:1A:E4:B1:2A:FD
X509v3 Authority Key Identifier:
keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3c:1c:fe:7f:f0:84:29:dc:8c:27:a7:4b:05:9e:08:7d:90:
32:43:7e:04:93:ea:2c:50:0d:a1:93:2e:7d:c0:1a:b0:5f:12:
b9:41:0b:5a:f3:a5:8f:7a:7f:d3:14:52:70:38:20:72:c7:e1:
01:26:b0:89:cf:b3:4b:3c:da:48:0f:8a:c3:f1:20:24:52:9b:
9b:81:5d:5d:ff:63:07:f4:4f:b7:e3:f8:5e:58:61:45:19:c7:
bb:1e:8b:8a:0b:75:55:96:06:ba:80:a5:50:c5:e9:d2:dc:0b:
b7:df:d0:42:c3:0b:f1:9a:e3:5f:72:bb:c4:81:d4:c1:08:28:
28:b1:f9:ab:fc:3c:06:b3:0f:f5:66:48:b1:ae:03:08:08:6c:
e0:19:d3:86:76:c9:63:60:35:17:ae:a2:14:38:ca:f1:f6:28:
72:ce:9f:a9:67:38:e6:7d:f8:4c:a4:3b:17:e3:7f:b4:2b:f6:
23:c3:00:8d:b0:d2:b6:ac:a5:6b:17:16:41:81:de:e1:7d:68:
7d:90:cb:f6:f3:5e:42:6a:83:67:7b:4e:08:28:86:d9:93:f5:
0c:3c:f4:7b:eb:de:f5:d9:f2:2b:4a:d6:2f:9c:d5:4e:20:b0:
fb:a2:f4:a8:ce:23:1e:15:0f:42:30:f9:1f:53:0e:27:2d:fc:
26:0f:e9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 08:15:08 2025 by rpki-client