Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
File: D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft (raw, json)
Hash identifier: mnEi88tuIBrA0kRHRNSLCGnzkMQYgKHAeOnH9Fzh5Xg=
Subject key identifier: 5C:01:81:D3:57:84:5E:62:21:84:16:69:3C:52:E0:FB:08:9E:07:61
Authority key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
Certificate issuer: /CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Certificate serial: 01992EC749002E3E22AEAE2CAEA72476D82A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
Manifest number: 0FDE
Signing time: Tue 09 Sep 2025 14:00:36 +0000
Manifest this update: Tue 09 Sep 2025 14:00:36 +0000
Manifest next update: Wed 10 Sep 2025 14:00:36 +0000
Files and hashes: 1: D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl (hash: dD/rNr4BFuFv4yl5q1q2W+7JL6nb9actrYH7EhrcCI0=)
2: ZPNM7KgQKfcGyvV7_2daewtnAlI.roa (hash: gCwHJt9KCFIRPasHifDhV1IvkNRzDs0fMniT9GCnavA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:c7:49:00:2e:3e:22:ae:ae:2c:ae:a7:24:76:d8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Validity
Not Before: Sep 9 14:00:36 2025 GMT
Not After : Sep 10 14:00:36 2025 GMT
Subject: CN=5c0181d357845e62218416693c52e0fb089e0761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bd:7b:b1:f7:d5:ae:22:c7:84:e3:44:ce:b8:
eb:d1:93:8e:0b:02:a0:4a:09:bf:f9:de:44:47:94:
32:27:d8:c6:02:62:f2:69:41:47:73:5f:be:8e:90:
b5:52:4d:84:5b:1f:8a:77:b8:f3:9d:8f:5c:f0:b3:
be:ac:29:8a:40:1c:51:c6:42:ea:24:61:22:08:5a:
e0:b6:85:c8:b9:fc:c2:41:84:72:df:8a:57:36:01:
c6:95:00:79:ed:75:ae:45:a2:97:19:6a:0e:5e:c2:
56:07:9c:b1:d2:34:66:66:60:2f:36:29:92:8a:c3:
2a:80:55:2f:3c:dd:b0:d9:1a:7d:9c:d2:ee:68:46:
ef:d0:d8:8e:c3:cf:e9:92:3d:d3:11:94:1e:c9:70:
4e:f3:5e:60:dd:2c:fe:46:04:56:74:bd:bf:26:f0:
db:8e:3f:1c:37:c8:d3:8f:1d:9e:91:b2:47:4d:aa:
fb:e4:f5:46:6a:89:c4:ba:ac:d6:52:bb:c5:af:29:
5b:be:95:32:ee:09:df:6a:4b:e9:a1:37:03:aa:6a:
77:a3:31:4c:5e:f3:e8:51:b3:35:da:b7:17:fd:16:
44:09:2b:3f:37:b3:80:0f:f8:03:20:05:17:99:d2:
83:7c:24:c0:a8:35:eb:2d:31:34:2e:2f:b5:aa:88:
cb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:01:81:D3:57:84:5E:62:21:84:16:69:3C:52:E0:FB:08:9E:07:61
X509v3 Authority Key Identifier:
keyid:0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3b:f9:a2:23:17:db:67:ab:ce:26:b9:56:66:90:d3:03:16:
97:0c:96:e3:8b:9d:33:39:1c:36:75:b6:ad:12:7b:c9:6c:b5:
8f:c4:74:25:21:e8:95:ba:76:25:a4:11:56:12:6f:39:89:41:
2f:37:15:7f:a3:b6:7b:db:d9:ad:93:63:d0:f9:f4:ca:32:e1:
43:2e:21:f9:1d:34:44:a6:5b:f6:38:a5:4e:0b:33:8a:dc:49:
0e:98:10:4b:b4:1a:23:14:49:12:f2:50:ef:b9:bc:60:21:b8:
38:4a:5a:94:5b:9a:02:e0:50:1b:9d:da:c2:4f:15:46:8c:a7:
21:47:6b:96:69:f1:bd:20:e1:9c:22:b6:26:f1:47:a8:18:47:
cc:41:bc:a2:ce:4d:64:07:22:4c:97:eb:3d:77:8c:62:ad:4e:
87:59:d9:96:29:15:96:b0:b6:f9:99:7f:70:b5:99:96:87:77:
8c:6e:62:83:67:f9:b0:31:34:20:66:a1:fc:1e:f3:a1:65:a9:
82:60:65:f5:0f:60:00:89:76:91:19:af:70:69:5e:f9:6e:eb:
e4:4b:cd:18:af:3e:f9:1b:38:80:d9:9f:7b:bb:de:ec:db:0d:
b5:53:5a:aa:fe:9b:03:93:91:38:81:a0:8f:e0:2f:bb:35:83:
3e:0e:a4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:52:08 2025 by rpki-client