Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
File: 0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft (raw, json)
Hash identifier: MS6DlSOa2q0GXW/H8FZ2ljEuKw9FnvZauHWPzvBiofM=
Subject key identifier: 02:E6:7A:F2:10:45:A5:07:80:EE:A5:8F:5F:45:4E:E0:AB:C5:57:A3
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Certificate issuer: /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial: 019927B2B4BB8D1A9D38A87ADA2890AC2926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
Manifest number: 119D
Signing time: Mon 08 Sep 2025 05:00:46 +0000
Manifest this update: Mon 08 Sep 2025 05:00:46 +0000
Manifest next update: Tue 09 Sep 2025 05:00:46 +0000
Files and hashes: 1: 0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl (hash: cuOxE3itEYsaXFQ+BdCmX6dYt9gF3SJa7ZOQ+j4Gx3w=)
2: SAF1KbjuvZdI9BSVM80ADIZ6zn0.roa (hash: wfp9L/QbKQTs8wDMXGcfyHh9p8y5+4/kclZuUrsUs5I=)
3: jOqd2wJBuE3wT3pRawlL9knhjV8.roa (hash: pvOd4te8ScnLLx0JwvYK3xwrNCWYubvf6Z+FLbM/DCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:b2:b4:bb:8d:1a:9d:38:a8:7a:da:28:90:ac:29:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
Validity
Not Before: Sep 8 05:00:46 2025 GMT
Not After : Sep 9 05:00:46 2025 GMT
Subject: CN=02e67af21045a50780eea58f5f454ee0abc557a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f6:8b:df:34:2e:52:b3:29:19:76:ba:2a:3f:
85:c8:87:68:61:4d:e9:5f:3f:c9:0c:48:50:a2:75:
31:14:d0:76:d8:8e:ef:cd:9e:3a:26:58:07:f2:4a:
76:cf:bd:2d:2c:24:22:47:cb:94:72:9c:58:1d:40:
41:cc:ff:b4:e2:13:1d:ac:80:e2:da:ca:75:59:5b:
d7:f3:d1:47:ac:d4:ad:a9:ee:f1:3c:ec:c0:6e:3b:
ea:35:a7:90:6c:c2:24:a3:d3:36:0a:d4:44:a3:b9:
23:ef:82:37:1a:89:34:0a:af:18:20:dd:5a:10:2d:
4c:8a:ee:03:0a:6e:e3:6c:cb:b3:63:a4:88:cd:a6:
d2:34:d1:21:7f:2b:3d:f9:a8:d1:58:23:e9:27:5b:
d2:5a:5e:be:d8:87:6e:cf:a6:68:db:9b:57:51:24:
f5:68:09:1c:c2:ed:44:f1:59:4e:27:10:ff:58:fa:
f2:7b:25:61:14:28:9c:91:32:76:14:f6:79:49:ee:
91:70:b6:31:d2:6e:7e:3c:e7:86:34:89:d8:74:c0:
a2:50:3b:b2:20:08:b8:d7:69:f7:bd:89:c6:cc:fc:
46:e6:cf:96:0c:2a:70:31:f2:22:2a:2e:65:b1:fa:
ef:45:7e:84:5f:86:9b:2c:c4:8f:d5:48:21:e5:32:
ca:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E6:7A:F2:10:45:A5:07:80:EE:A5:8F:5F:45:4E:E0:AB:C5:57:A3
X509v3 Authority Key Identifier:
keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b1:f9:35:32:47:cf:e3:4e:54:03:c9:9f:bd:e3:de:e9:e8:
53:9c:a5:e7:a8:1d:6d:b1:7e:b3:ff:6b:61:aa:e7:9f:09:f0:
e8:08:f4:ce:8c:ac:cf:a0:62:85:09:ed:91:06:6e:9c:95:13:
92:77:82:81:76:38:3e:be:8e:b5:fa:bc:8a:77:a4:9a:1e:8b:
49:0d:c8:32:a2:7f:69:a0:b3:12:f1:93:d8:5b:5f:3f:24:45:
69:ea:57:16:d4:55:ab:b5:c8:02:90:23:0e:ad:bc:81:2f:fb:
90:63:9a:f3:51:6d:99:80:49:14:2b:49:7b:85:f5:02:d9:a0:
79:a5:0e:95:1e:f8:8a:8e:53:c1:02:35:c7:e6:d2:05:b1:45:
bc:2c:e4:cc:e8:0b:b8:50:5a:4d:ae:96:da:27:45:23:93:55:
52:49:51:a8:69:77:e7:15:88:8e:14:11:bb:0f:2b:6c:9d:e3:
3c:39:51:b3:d9:c7:8e:d4:60:1f:eb:d6:cb:3c:4e:d4:91:92:
43:f0:bf:69:9a:17:1d:79:d4:e3:1b:cb:92:75:8f:c9:23:1e:
d3:ed:71:6a:a2:57:34:a3:f6:cb:b0:bc:21:c7:e1:c1:b0:5b:
d0:ab:a0:46:b6:71:28:0d:12:56:ca:8a:73:1d:9c:fd:6b:84:
b9:36:45:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:44:34 2025 by rpki-client