Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
File: 9EAkreXkgCwKL2Hm-A9NItwVSFM.mft (raw, json)
Hash identifier: Y9tNV8G9+3XB6GTsdxi/YF0shvp4oj61J0S/OSDehrk=
Subject key identifier: 70:FF:28:AC:EE:AB:94:01:BF:3D:3B:27:A3:CC:F8:BB:C3:48:98:7A
Authority key identifier: F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
Certificate issuer: /CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Certificate serial: 0199233180F48AE6167991D7CA2D09C8CB71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
Manifest number: 13B6
Signing time: Sun 07 Sep 2025 08:01:10 +0000
Manifest this update: Sun 07 Sep 2025 08:01:10 +0000
Manifest next update: Mon 08 Sep 2025 08:01:10 +0000
Files and hashes: 1: 4J1X6PCF39tH0Ho4_SbJ7AtxDbg.roa (hash: sDrnXJKsdAbmdaesDlUsR31uPE7GfMdA3txIVC37ks4=)
2: 9EAkreXkgCwKL2Hm-A9NItwVSFM.crl (hash: fSiv1hgg+5y3mDALFJbnYy+h2TWH/SvC7o5+kzVqfoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:80:f4:8a:e6:16:79:91:d7:ca:2d:09:c8:cb:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Validity
Not Before: Sep 7 08:01:10 2025 GMT
Not After : Sep 8 08:01:10 2025 GMT
Subject: CN=70ff28aceeab9401bf3d3b27a3ccf8bbc348987a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:fa:98:7e:dd:ba:98:7f:10:cb:f5:50:7a:
43:9f:fb:ee:a9:97:51:0f:f7:34:da:bf:ca:1a:09:
48:08:d3:67:3f:4a:eb:16:e0:e4:e9:61:ee:3c:86:
7e:16:77:3a:20:b2:4c:fd:b0:c1:c5:d4:ed:b4:24:
d9:1b:8e:a9:d4:a7:47:c0:8d:1e:b4:ab:c8:43:68:
bf:55:5e:2d:07:af:77:f6:91:41:64:a4:9a:96:e2:
c2:d1:cd:e5:0a:9d:87:a1:64:14:37:41:f0:b2:c7:
8d:cf:6e:ec:a7:09:0e:aa:0e:d0:ab:78:a3:e4:b9:
35:43:f8:2c:78:03:ed:ea:b6:89:7a:c9:b1:d5:62:
fd:d6:c6:65:91:2e:4f:a5:72:0c:79:59:75:fa:2c:
69:2f:8a:19:6c:f9:00:ed:bd:c2:0b:fc:08:b2:3b:
7f:c8:29:79:2c:18:78:c7:dd:75:fb:22:61:3e:2e:
90:68:f0:40:d3:28:4a:46:5c:72:38:05:45:51:3b:
1e:49:9b:51:f8:17:d6:2a:71:87:49:38:1a:f6:86:
4f:e6:a8:c9:26:10:1d:a6:7c:16:a3:89:58:47:dc:
de:28:b7:b4:b9:a0:9a:5b:d5:e0:fc:db:37:2a:ec:
16:9f:dd:9c:3c:15:b5:5d:8f:eb:1d:86:2c:f5:ec:
21:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FF:28:AC:EE:AB:94:01:BF:3D:3B:27:A3:CC:F8:BB:C3:48:98:7A
X509v3 Authority Key Identifier:
keyid:F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c8:51:20:3d:99:a7:fc:3f:8b:79:09:7d:62:dc:a2:f3:ce:
62:ed:52:e9:77:99:bb:cd:03:39:2d:9e:38:2b:a8:39:20:50:
2b:4f:d3:a8:a8:4a:62:96:a0:ef:82:4b:83:b9:2f:b4:4c:2e:
1d:bf:fb:e2:14:9b:d2:cc:6e:2b:93:26:f3:a6:23:c5:91:89:
1b:94:8c:df:06:4f:ff:8e:f7:28:d3:c9:26:f4:e1:83:e7:cb:
b1:8e:18:09:db:46:86:f4:f6:67:e6:b4:c2:cf:f5:00:9c:41:
9b:13:9c:c1:58:2d:57:2c:08:15:4b:8a:7f:9a:cd:15:aa:ef:
e9:73:36:a0:3b:1d:2c:cc:00:de:ff:3a:05:e4:a5:1e:5c:7d:
50:8b:b1:da:fd:e5:f7:9b:69:4e:65:94:0b:e4:33:45:4e:83:
7a:39:27:69:c1:51:1e:18:e8:99:91:ca:30:cf:69:77:84:c1:
e1:df:04:c6:9a:d2:b2:75:62:c2:97:64:7c:ea:ec:ea:49:19:
3e:38:3a:72:c1:43:52:f9:5a:56:46:ce:7b:79:f2:82:d4:cd:
0c:0d:a1:d4:5a:9e:0e:86:c6:43:9e:91:9c:47:05:a3:6c:c4:
5e:8c:d4:b9:a6:a9:43:fd:90:0a:dc:b3:fc:bf:dd:89:b8:76:
a8:cb:00:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:56 2025 by rpki-client