Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json)
Hash identifier: vHo/UZCs1Hermn1IZ/sWZXO8iiQGOVydIIL42ajZDao=
Subject key identifier: 42:51:9D:43:38:6B:A6:F4:B0:4D:69:4E:5B:8E:BE:95:A2:64:6A:72
Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Certificate serial: 0199239FA770C3175879D6295812BD7CBC06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
Manifest number: E7
Signing time: Sun 07 Sep 2025 10:01:29 +0000
Manifest this update: Sun 07 Sep 2025 10:01:29 +0000
Manifest next update: Mon 08 Sep 2025 10:01:29 +0000
Files and hashes: 1: dlXIk7WimVWVHc3ungqiNoZMusw.roa (hash: RfuMfcHrLbRg0Y3xsz3a1+VdHPSrzNKZ40aYKpVDn2E=)
2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: eV/89nsfzVISDT4Y3VkN9CQLDMYAh+/HY9AkjU2Xlvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:a7:70:c3:17:58:79:d6:29:58:12:bd:7c:bc:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Validity
Not Before: Sep 7 10:01:29 2025 GMT
Not After : Sep 8 10:01:29 2025 GMT
Subject: CN=42519d43386ba6f4b04d694e5b8ebe95a2646a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:eb:bd:0c:e5:59:53:77:0c:14:12:80:74:24:
d1:eb:b7:d7:1f:4f:f1:5b:07:10:70:93:8f:15:62:
c3:ab:ae:be:e3:ef:e8:c1:02:80:5a:48:9a:5c:78:
82:47:25:a4:e4:1a:34:e5:67:c0:23:4e:63:da:ef:
0f:b5:0c:68:fa:5e:94:eb:47:92:dc:eb:b7:7e:73:
26:46:ff:f0:08:c7:9f:36:d3:e3:79:3c:fe:f5:51:
71:b2:f4:d6:05:11:6d:63:b1:50:0e:fc:15:48:07:
d1:db:37:b5:7f:58:61:45:1a:85:57:f4:f9:62:9d:
f5:83:de:bc:4e:9d:ce:87:48:cd:38:41:19:c9:4f:
a7:b8:ba:ba:9e:91:12:e3:f0:c6:6a:c6:81:7c:ab:
9c:89:d6:27:ed:55:61:ba:13:e3:fb:df:86:dc:74:
3b:c8:06:61:14:28:5c:84:82:e5:ae:9b:f0:b4:69:
85:da:49:2c:74:fc:ba:76:5d:38:b4:95:c5:1e:fb:
02:85:1e:47:10:3c:11:50:3d:b6:c4:8b:b2:a1:16:
10:5c:a4:02:18:e3:5d:8d:20:8f:4b:9d:a7:7e:01:
01:b5:d3:ab:ba:52:6b:fa:81:74:df:88:1d:ab:a0:
03:98:4b:d4:a7:d0:a7:0c:d0:d0:e1:77:34:37:47:
c7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:51:9D:43:38:6B:A6:F4:B0:4D:69:4E:5B:8E:BE:95:A2:64:6A:72
X509v3 Authority Key Identifier:
keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d3:7f:4a:97:07:f9:29:30:4a:48:22:38:a9:26:43:76:b0:
9e:be:e7:e8:83:64:71:b7:a0:04:0a:38:ff:b4:e8:d8:4a:3a:
05:bb:6d:0b:12:c9:76:f0:cd:40:b6:1a:c3:96:0f:3f:15:7b:
2e:d3:29:36:f9:24:22:e4:20:b9:63:25:0f:ce:3f:be:06:5b:
b7:44:24:85:56:7a:9e:0e:17:d6:bc:8e:d5:24:91:b1:f4:48:
0a:83:61:6d:7f:98:f3:0f:d5:bb:43:0a:3d:0f:22:86:be:af:
a7:fb:0c:3c:93:6f:bb:03:1c:b6:a8:89:c4:4b:ea:f3:46:31:
a6:90:2d:4d:67:a8:5a:7f:55:93:07:4a:e0:84:77:2c:33:0b:
e9:e3:fe:6d:af:fc:3b:56:55:5d:52:00:16:08:38:8c:5e:d3:
0f:8a:49:0f:f4:95:bc:f4:5f:9d:99:c4:8d:fb:ff:7f:68:c8:
10:bb:7e:22:cf:98:7d:0a:fb:47:9e:aa:59:49:32:0a:0d:fc:
3a:bd:02:a3:4e:a4:12:76:62:c8:0f:45:08:82:9b:cc:48:39:
21:01:66:7f:90:43:00:23:1a:30:9b:1a:8f:71:0e:ab:cb:95:
b0:c8:00:5b:96:08:0c:56:1d:d7:69:8b:d8:03:f3:f7:85:a5:
61:af:a2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:49:37 2025 by rpki-client