Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
File: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft (raw, json)
Hash identifier: 62NiTKtSzCjl9mLWalj7v0HUbhNxQtf2IH8nDp6nrQ8=
Subject key identifier: E1:E0:52:EA:EA:8A:28:B4:57:51:99:D7:EE:4D:F4:A3:FB:0D:E0:81
Authority key identifier: AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3
Certificate issuer: /CN=ac08da139b56f998be24665db14ad1e156768fc3
Certificate serial: 019933EE3D41ED60B87877095CC78209B113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
Manifest number: 0368
Signing time: Wed 10 Sep 2025 14:01:15 +0000
Manifest this update: Wed 10 Sep 2025 14:01:15 +0000
Manifest next update: Thu 11 Sep 2025 14:01:15 +0000
Files and hashes: 1: YtEd8YCCc2z1I29jS88Pyzvdbak.roa (hash: evRpvoMqfORfl1HiyuiXKz+wbjxY32bzO48vEqf95co=)
2: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl (hash: B3pzlJYfsDTzIdsLGOKdj803kF9PsSFVXUSfHYQW5P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ee:3d:41:ed:60:b8:78:77:09:5c:c7:82:09:b1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac08da139b56f998be24665db14ad1e156768fc3
Validity
Not Before: Sep 10 14:01:15 2025 GMT
Not After : Sep 11 14:01:15 2025 GMT
Subject: CN=e1e052eaea8a28b4575199d7ee4df4a3fb0de081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:0c:23:79:64:1b:04:32:69:1c:82:ba:96:
9d:67:ac:c6:7e:98:a3:d6:a6:0a:2a:07:40:85:19:
4d:8b:1d:bc:31:46:31:36:c0:30:ee:1e:6d:34:1d:
2d:95:4c:1b:80:b6:32:b2:3d:c4:40:7b:82:54:14:
ca:f7:b2:cf:de:3d:2d:65:cb:1c:f0:ad:58:04:9d:
df:7e:d9:53:f5:20:58:0d:ad:60:77:f3:66:63:1f:
10:08:ac:51:b7:c6:31:9d:42:c6:0b:e0:33:4e:38:
ca:27:31:0c:79:09:7b:ae:08:27:7f:c8:a7:59:44:
3a:92:bc:7c:7d:e3:57:e8:16:72:5c:bc:18:09:09:
79:1b:6c:d9:25:6d:52:00:eb:ac:b1:e2:da:1d:e7:
1c:f0:b4:ed:f8:fd:1e:ce:76:56:1c:cb:5f:2b:66:
b4:a2:29:57:1b:80:e8:b2:f8:f4:1b:42:9a:67:96:
2b:32:19:e3:c5:e7:22:f3:a3:af:1c:ef:43:23:e0:
49:b6:6d:f6:b4:26:eb:11:0d:47:b4:0a:cb:af:c6:
e4:2e:20:ad:62:bd:b1:40:7e:bb:08:4a:f0:89:22:
83:47:5c:40:69:63:90:33:eb:80:88:51:ff:c4:c1:
03:49:a0:51:ab:a6:dd:01:b8:b2:1e:51:fe:f9:d6:
47:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E0:52:EA:EA:8A:28:B4:57:51:99:D7:EE:4D:F4:A3:FB:0D:E0:81
X509v3 Authority Key Identifier:
keyid:AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:8c:0c:c7:da:45:38:37:a2:ba:73:b0:0b:03:ed:d8:73:c5:
f1:ef:32:d3:9e:57:5f:97:ae:39:8e:9a:e7:df:18:ea:75:c0:
9a:a2:a7:55:43:ea:58:20:4f:0e:b8:58:c0:36:15:05:7b:96:
d6:e6:49:c3:f1:d8:01:ea:28:52:f7:6e:3b:02:45:71:3b:2f:
7a:a7:cb:15:35:1a:c7:5b:df:cb:d2:6b:85:b1:9f:48:e1:70:
f4:59:c6:38:a6:43:b7:f8:47:7f:ae:77:3b:54:05:f8:46:73:
10:54:56:51:d3:71:38:4a:3c:2c:43:50:cf:8d:46:96:88:11:
03:ab:2b:b8:96:1a:51:0d:ae:06:0a:1d:11:70:34:cc:cb:c8:
92:b6:19:a2:fc:bd:2e:6b:19:4b:a5:4a:8f:f2:e3:2e:9e:07:
a3:25:0b:fe:38:03:59:6d:3b:ff:9d:c0:0c:c7:18:00:80:8f:
c4:c6:bb:9c:3e:96:68:60:0c:15:0d:9c:a4:dc:45:20:b6:0d:
05:e3:75:18:5b:a8:90:06:3b:54:42:da:3d:42:9f:13:0f:69:
54:21:9b:69:b9:25:56:81:e3:35:88:d4:bb:d8:58:88:ec:58:
ea:1b:31:40:9c:bf:d2:5e:a0:ff:d4:15:8b:53:d7:94:47:d0:
65:76:fd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 18:41:21 2025 by rpki-client