Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
File: RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft (raw, json)
Hash identifier: HBvWEW0BdBPG4Z9Qma6yJ8JLcPo3mi/sjYeLV+OMU1Q=
Subject key identifier: 4B:DC:CE:5D:B5:0D:E4:0D:87:D9:C7:6E:FA:11:A0:21:9B:1B:DD:F5
Authority key identifier: 46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14
Certificate issuer: /CN=46846557b9e42955163e516b02dc8e3ee3828114
Certificate serial: 0198CACA61AB54D3F7B5F1491947C7C203E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
Manifest number: 0990
Signing time: Thu 21 Aug 2025 04:01:57 +0000
Manifest this update: Thu 21 Aug 2025 04:01:57 +0000
Manifest next update: Fri 22 Aug 2025 04:01:57 +0000
Files and hashes: 1: RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl (hash: osjwG8NvKYpMHwD7pjcocJurduYoRreXazXBpAhLGR0=)
2: Zg1oQlfTlRGn4mPizarntNQVifQ.roa (hash: VCNyDIITF1vB0XbRmzjr12dFWbtUbWzSK0fvTI9GVWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:ca:61:ab:54:d3:f7:b5:f1:49:19:47:c7:c2:03:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46846557b9e42955163e516b02dc8e3ee3828114
Validity
Not Before: Aug 21 04:01:57 2025 GMT
Not After : Aug 22 04:01:57 2025 GMT
Subject: CN=4bdcce5db50de40d87d9c76efa11a0219b1bddf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:e3:65:27:1d:7b:5e:b8:ad:6a:72:97:2e:
9b:90:c6:ab:51:40:6e:f7:06:ee:57:93:1f:43:d0:
92:bb:8f:9f:25:1c:f9:60:eb:a9:3e:5b:c8:36:a8:
c5:bb:ff:90:88:d3:32:da:d4:10:09:cf:98:4e:c1:
f9:79:e1:74:e4:57:02:06:f5:67:b2:9d:ee:03:fd:
de:56:e6:56:53:6e:cb:d7:82:b9:b7:53:a0:c4:4b:
26:a6:95:4a:0a:2c:db:b5:72:e2:06:ff:28:10:56:
bc:1b:16:89:40:a3:41:a7:05:a8:6d:34:b4:ed:55:
ac:22:3c:33:2c:8d:6d:67:2e:4e:3f:57:d9:17:fd:
19:2e:6d:65:f8:bc:e5:41:f8:c0:b3:b9:29:be:2e:
3c:5e:9b:65:c7:67:a6:aa:ed:85:60:54:ae:c0:73:
c1:b4:0b:0c:9d:ad:a0:9e:e5:21:63:54:ab:0e:97:
90:fe:18:88:b0:a6:3a:f2:80:1d:6d:e5:a3:15:c5:
ff:26:f8:c4:f3:af:3e:82:19:31:1b:27:eb:b6:02:
65:e9:15:3c:67:3a:44:0a:3d:76:0a:6a:2e:2a:ee:
86:bb:e7:5c:38:b7:9d:fd:62:fb:78:c8:f0:54:26:
37:0e:b2:09:17:40:93:7e:c1:6b:ed:77:11:0d:b7:
ad:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DC:CE:5D:B5:0D:E4:0D:87:D9:C7:6E:FA:11:A0:21:9B:1B:DD:F5
X509v3 Authority Key Identifier:
keyid:46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:da:09:b2:31:74:a1:58:e0:26:8f:92:0f:ba:f1:f1:59:d2:
e3:bd:f9:37:1b:42:a2:db:8f:5a:b3:81:73:9d:01:aa:ee:c2:
0b:21:2c:16:49:34:f8:fd:73:2f:d1:10:bd:5f:ee:8c:62:bb:
36:59:17:ff:d5:33:59:a1:81:0d:7f:ee:49:82:f6:39:08:6d:
6e:0a:9b:f1:5c:3b:15:30:ac:88:94:ca:bc:83:3e:ab:de:28:
db:12:a4:21:4b:64:7e:08:b1:94:0f:2a:12:c5:25:76:2f:3e:
00:8d:06:cf:62:b2:d1:ec:b1:54:49:5e:d4:ac:94:ab:61:cb:
e1:5e:16:38:d1:99:ba:52:d5:ce:e7:b4:cc:f1:0f:6d:36:30:
e7:f4:f5:d5:6c:94:0e:88:79:51:a6:a4:4f:ef:90:d5:96:c4:
85:82:1d:f1:96:11:de:71:cc:4d:8b:b1:80:d9:97:d4:38:33:
a0:1b:f7:05:44:6a:9c:7b:65:6d:cd:09:98:ae:a8:a2:0e:7b:
ca:45:43:96:13:d5:aa:27:45:16:f4:49:dd:32:e9:ce:c5:9f:
e2:6b:d5:15:9f:1d:9f:b2:dc:64:5c:ff:e9:10:81:b1:70:1f:
c6:e9:86:1b:b3:6b:49:29:39:31:a0:2f:64:0f:36:e3:84:e2:
f7:56:94:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 05:40:07 2025 by rpki-client