Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
File: rM-ri4kwEKG14lBy4dRWkEST9S0.mft (raw, json)
Hash identifier: c60fH59KuSU/4ZdntWddLxO3xxd8OLiQ7gEDQwnMpcI=
Subject key identifier: EE:AF:D7:E3:DF:86:51:AC:40:E9:65:90:90:ED:5E:93:BA:F3:61:8D
Authority key identifier: AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
Certificate issuer: /CN=accfab8b893010a1b5e25072e1d456904493f52d
Certificate serial: 019921E77E6EC3195E8AB1FC56B7D5FA046A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
Manifest number: 0F35
Signing time: Sun 07 Sep 2025 02:00:43 +0000
Manifest this update: Sun 07 Sep 2025 02:00:43 +0000
Manifest next update: Mon 08 Sep 2025 02:00:43 +0000
Files and hashes: 1: 1-3Y-4ahWm1ezt431zCYGOBUyQvs.roa (hash: zupu0GMNILT7rH6BKtk5nw5qlb8oVDhhuZpZjAfbi5M=)
2: rM-ri4kwEKG14lBy4dRWkEST9S0.crl (hash: 6JV1WATS+kYIakHtEcZTNxefNF2lzjzuAtQDT7O3BVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:7e:6e:c3:19:5e:8a:b1:fc:56:b7:d5:fa:04:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=accfab8b893010a1b5e25072e1d456904493f52d
Validity
Not Before: Sep 7 02:00:43 2025 GMT
Not After : Sep 8 02:00:43 2025 GMT
Subject: CN=eeafd7e3df8651ac40e9659090ed5e93baf3618d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:f4:ef:65:45:d7:3c:c1:c3:37:5b:f1:3c:
3f:de:d6:78:a5:24:48:c9:2c:04:84:2c:d8:e0:d2:
d1:b3:85:b2:a3:e6:90:4c:ad:51:d5:ef:69:2b:e7:
ac:3a:a0:47:de:33:48:69:c2:97:b3:c5:a5:7a:7f:
66:8f:08:aa:c6:d9:af:2d:de:66:2a:24:ac:5d:cc:
1b:20:fa:19:a3:60:19:94:61:43:19:c4:e5:01:09:
6a:bf:8b:82:9c:62:ce:ec:4f:93:53:89:0d:da:e9:
78:87:b5:49:33:65:92:e2:84:3d:34:f8:29:5f:62:
b7:f2:46:22:c3:11:e8:69:cb:92:ed:5a:4e:ce:fc:
27:29:d9:f8:c4:21:91:d8:22:2b:43:af:a3:7a:8e:
0f:ad:ac:90:2a:b1:83:5c:ec:31:0e:1c:57:ea:df:
ab:2d:3e:15:40:dc:d1:ad:15:1e:b8:50:93:5e:22:
49:62:5b:d8:88:ce:7c:26:85:40:42:18:be:c1:c4:
91:ec:ee:85:c2:87:b1:4d:44:1e:03:a8:74:ec:88:
06:6c:e5:14:ba:5b:a9:d6:f3:c9:a5:60:70:e4:4e:
70:a6:5a:25:d8:6e:8f:e9:e1:17:e6:3b:52:c2:2b:
f5:0d:c3:e2:d6:d9:81:24:ed:f4:19:07:60:74:48:
ae:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AF:D7:E3:DF:86:51:AC:40:E9:65:90:90:ED:5E:93:BA:F3:61:8D
X509v3 Authority Key Identifier:
keyid:AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ba:d3:de:31:48:5c:b7:e6:61:a5:d7:f9:a3:d7:fe:fe:52:
6b:d9:93:13:9b:db:70:f4:2b:63:15:a2:ad:74:96:73:a9:54:
20:ab:e0:50:7f:e4:c9:a5:8d:46:e4:82:13:b3:a9:70:8f:c7:
7b:82:c8:d1:5a:20:18:d9:7b:b9:75:03:3e:2b:12:a8:41:fb:
15:3f:0f:ca:5f:8e:fc:e6:ff:c3:24:32:92:26:86:34:28:77:
5e:7d:2d:cb:c2:f4:92:12:37:e3:b1:4a:06:86:c7:d6:98:8e:
34:fc:de:dd:aa:6d:8d:5a:db:65:e6:63:eb:e9:58:82:b2:8f:
53:f4:33:b1:15:99:51:db:78:2e:46:1c:71:6d:7b:76:af:aa:
c3:f2:d4:a2:69:9e:a7:f3:60:9a:1d:3b:7c:1a:70:7c:55:93:
5b:0d:41:aa:de:07:d7:05:78:d2:79:cf:49:2f:f5:99:9a:ee:
3d:2a:7d:e5:58:37:a9:90:71:c0:1f:ed:9a:e2:17:49:31:8d:
fd:37:64:04:d7:62:62:57:93:fd:b4:8b:d3:00:74:e4:d5:a8:
bb:bb:ab:e7:00:ee:0f:c2:fa:1f:10:99:3f:4a:a1:c0:03:a0:
42:50:c4:43:99:a2:57:99:6a:3c:cd:ee:5a:70:7c:c5:9a:c2:
93:5f:80:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:01 2025 by rpki-client