Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json)
Hash identifier: 5pxchXVGKtTXnS1zqIF1P9Dx3gRlOSfR/qbcjbxv6Do=
Subject key identifier: E0:DE:ED:EA:81:AF:C3:A3:51:D7:F7:B0:43:8B:50:2D:3A:18:B3:07
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 019916BEED7C443B7398109D92A8F42806B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
Manifest number: 0790
Signing time: Thu 04 Sep 2025 22:00:35 +0000
Manifest this update: Thu 04 Sep 2025 22:00:35 +0000
Manifest next update: Fri 05 Sep 2025 22:00:35 +0000
Files and hashes: 1: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: ru0DRgEfbopiLxesOJfz8RSns0/Eq1KPc0YpYroICJk=)
2: ZCxXOfPObH4boT7reY7sJ5pWUzU.roa (hash: Tbh3eBRkhC/IgUecypI3j1+I4M5Pu1MDDQCmicyE7ec=)
3: rxFd7eqhMDq90CR2tb_lKkld3Lk.roa (hash: wqrxOaDhbmrdzLDEWz1pB4UyOw4VsIT4K3MNi4YvwdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:be:ed:7c:44:3b:73:98:10:9d:92:a8:f4:28:06:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: Sep 4 22:00:35 2025 GMT
Not After : Sep 5 22:00:35 2025 GMT
Subject: CN=e0deedea81afc3a351d7f7b0438b502d3a18b307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:88:c0:ea:77:ba:56:a3:68:a4:d3:90:b8:
93:c5:d1:8b:7f:32:7b:c8:31:1b:62:61:f0:58:5a:
5d:26:44:06:b6:59:c9:ff:f7:77:b0:b7:da:9b:5d:
51:69:86:55:ee:83:6e:c5:34:74:9e:3f:ae:d8:2b:
2e:f4:a0:13:e1:62:b2:3c:56:ce:d0:85:7a:16:e0:
e7:76:9c:d0:32:a4:0f:78:d7:03:d9:db:0c:e9:7f:
0e:c9:f4:86:9e:14:45:5b:85:28:9a:1b:fe:8f:4c:
fe:05:cf:ec:80:8c:ca:e2:5c:45:e9:62:63:d2:23:
24:8f:69:e7:94:d6:e0:f7:af:44:cd:15:1a:d0:8d:
b0:e9:0b:46:0a:b7:35:ba:f8:af:8a:51:11:a9:f4:
e1:e2:82:39:28:83:9d:78:97:37:57:42:45:c8:c6:
cd:32:1c:fe:cd:28:e2:9f:07:b4:a3:96:3a:99:69:
11:36:dc:98:d2:98:76:b8:56:8e:75:73:29:af:be:
b7:26:7c:32:9e:ec:1e:83:be:fe:d8:63:c1:2d:73:
e4:83:a0:68:60:fe:63:ac:c1:e2:24:ad:90:a9:e8:
9d:27:9e:31:9f:a1:d1:47:a1:5e:7c:cb:87:b3:31:
27:d4:76:6a:aa:89:71:24:d6:d5:3d:74:48:7f:db:
ae:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DE:ED:EA:81:AF:C3:A3:51:D7:F7:B0:43:8B:50:2D:3A:18:B3:07
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:67:4c:ad:3c:3e:22:4d:03:b1:09:2d:a7:25:0a:fd:44:c3:
85:0a:04:9f:1b:d7:0f:e2:c1:3e:82:66:a6:b6:b1:7e:7d:4f:
4b:f6:ec:9d:9c:40:f9:7f:09:84:93:8f:0e:a3:2e:26:0d:c8:
42:3b:06:dd:57:fb:cd:1e:bf:4f:54:ce:f5:c3:08:c8:80:84:
de:7e:1b:aa:1b:af:ea:1b:a9:5d:ea:1f:48:41:12:0d:e1:9f:
73:ab:30:5a:7d:de:bd:8a:90:50:80:56:e0:f5:a6:69:ec:3b:
86:ad:e5:3d:28:b1:24:24:3a:57:11:8e:13:69:5c:0f:00:24:
b1:6e:4e:8d:a4:d3:f3:01:5f:70:3d:ea:d4:35:72:2e:11:2c:
20:91:90:b2:11:de:d9:6e:02:57:a1:f2:5a:4f:e6:48:10:82:
69:9e:27:13:0f:bf:86:37:f9:fe:0d:88:aa:de:0b:3d:bc:ae:
d3:f3:d0:75:bf:8d:81:fe:20:b5:30:d0:67:20:c9:c5:48:39:
5f:23:5a:06:e4:27:2a:ae:6c:44:1c:e2:89:9b:7e:b9:c7:65:
16:66:e7:9f:51:1b:d4:90:e9:fc:a0:ca:dc:c9:ad:f3:fb:06:
f4:f6:53:45:3b:d3:f5:ca:50:a2:f3:6e:33:98:51:49:ae:9b:
09:92:51:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:35:56 2025 by rpki-client