Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
File: sA4l9V67rLBp8QOssIZnA4Nc_M0.mft (raw, json)
Hash identifier: AEPdSd46NvMX1sQw0tIMEQJzyRUzVxYRlMnznEAqVq4=
Subject key identifier: 94:AF:32:F1:33:25:9D:92:B6:4A:59:40:22:FE:F1:71:6D:D9:32:3C
Authority key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
Certificate issuer: /CN=b00e25f55ebbacb069f103acb0866703835cfccd
Certificate serial: 019923D5DB71D1127A39FF61C2B58FB2C2FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
Manifest number: 127E
Signing time: Sun 07 Sep 2025 11:00:41 +0000
Manifest this update: Sun 07 Sep 2025 11:00:41 +0000
Manifest next update: Mon 08 Sep 2025 11:00:41 +0000
Files and hashes: 1: IQVuYRD39w1eDGvQI5n6qd53zJ0.roa (hash: YMuLKblQhuUFH21p6Ke9CEB5Y7GrJ0BpmU+txXFqoC4=)
2: sA4l9V67rLBp8QOssIZnA4Nc_M0.crl (hash: jpkH2L2cD147XHvg/uyaEdshLUV8GHSq3KfDUCf9ut0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:db:71:d1:12:7a:39:ff:61:c2:b5:8f:b2:c2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00e25f55ebbacb069f103acb0866703835cfccd
Validity
Not Before: Sep 7 11:00:41 2025 GMT
Not After : Sep 8 11:00:41 2025 GMT
Subject: CN=94af32f133259d92b64a594022fef1716dd9323c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d0:48:b5:7a:0e:3f:52:58:77:28:be:75:3d:
26:90:e6:95:a0:55:12:9e:15:c9:7f:7d:ab:0b:f2:
51:50:d7:6d:62:1d:b8:56:6e:fd:45:87:67:26:d9:
65:58:e9:eb:5d:fd:69:95:2b:e3:65:bd:87:3b:a0:
c9:1a:5a:db:88:7c:50:63:50:14:ba:61:4b:44:e6:
e2:68:ad:58:a9:79:13:f4:51:13:ec:1a:ca:61:39:
78:08:17:68:0e:a0:a7:f3:bd:d4:0b:c8:c6:e9:cf:
08:3b:ab:c4:75:a9:5b:78:4f:2b:ce:65:1a:65:22:
51:90:c7:75:98:86:89:ea:38:5e:70:1b:14:90:f0:
6c:2b:99:43:10:1d:86:22:ce:09:bd:46:70:31:6d:
0b:60:2c:1b:17:c7:e7:89:7f:83:b9:0a:25:52:40:
35:26:42:2a:1e:05:ba:c1:9d:39:cd:df:5b:b7:3b:
5a:3d:f1:e1:f4:9c:f5:8e:c5:85:b8:bf:23:a7:47:
75:85:8f:46:26:0c:e4:b9:9f:76:0e:3e:b6:da:3c:
4c:60:31:b7:1d:50:ad:98:f0:75:38:f6:77:a4:44:
d3:1a:20:15:be:ca:b2:d5:e5:14:7b:7f:36:49:b7:
d6:8c:7d:c9:a2:60:a9:58:4e:6e:44:ef:e4:94:29:
f3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AF:32:F1:33:25:9D:92:B6:4A:59:40:22:FE:F1:71:6D:D9:32:3C
X509v3 Authority Key Identifier:
keyid:B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:29:b5:00:6d:95:d7:41:48:a2:9b:42:0e:29:80:62:db:38:
fb:21:e7:de:34:c9:83:11:b1:e7:c2:80:6c:87:71:85:fe:ea:
48:8d:61:f9:e8:c2:85:19:bf:55:a5:d3:89:7e:c2:8d:54:0e:
ed:23:7a:54:14:9b:e4:66:9f:cd:02:d7:79:4b:66:11:29:e5:
ce:6f:e9:d7:4e:86:e1:9f:22:03:82:84:06:70:be:42:f4:72:
7f:57:93:d7:f0:4e:7a:9a:0d:bc:21:9f:cf:ab:5b:e2:86:80:
92:02:50:82:53:0a:eb:b2:20:01:9f:cb:55:87:9d:10:03:31:
97:e8:d4:6a:87:5a:28:91:04:7a:39:57:b6:78:22:fd:c1:dd:
b4:e3:1d:e4:ce:7c:5f:b9:40:de:2d:75:2a:cc:31:fd:fa:97:
61:ff:51:94:78:35:62:ac:22:77:a8:3b:54:50:8b:5a:0d:09:
7d:ce:1b:97:ba:20:da:05:f4:e1:5e:4c:b0:b2:98:58:d5:24:
fc:33:ee:25:45:bb:03:24:d0:bf:ba:0c:d6:f8:dd:2f:16:2c:
5b:6b:df:09:d2:79:53:24:18:26:da:f3:7d:62:e4:d5:ce:76:
8b:17:06:8d:50:02:20:34:c1:71:42:d1:cb:2c:a0:48:f3:0c:
37:47:f4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:40:13 2025 by rpki-client