Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
File: r-b4yudJLQZOAwcckUc5Lu3UW8c.mft (raw, json)
Hash identifier: C3KxkYryPMWrxtNiubB6Fg0Y9oaeolU3VWnv70wDbmQ=
Subject key identifier: 9F:85:28:79:9E:6A:96:AD:CC:74:9A:2B:CC:56:37:F1:C5:B0:75:C9
Authority key identifier: AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
Certificate issuer: /CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Certificate serial: 0199239ECC90CA33FAA719EE825282B96B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
Manifest number: 1133
Signing time: Sun 07 Sep 2025 10:00:33 +0000
Manifest this update: Sun 07 Sep 2025 10:00:33 +0000
Manifest next update: Mon 08 Sep 2025 10:00:33 +0000
Files and hashes: 1: H4Dt1RaXNjrSuf7dIzKd6HI74Xw.roa (hash: 1FMAIN7AWHSRrarcSi8q0q/CcQ+uq+tcfRyHiGa5Hko=)
2: kemSd2KPq5UUT0EZWa92ek2Cwpc.roa (hash: kh0wd5NltixPwrZZXBgelPgGkebz79/WC48Vz4n628s=)
3: r-b4yudJLQZOAwcckUc5Lu3UW8c.crl (hash: w9locAHDtc1sYx64FUSfyvmI6abuJx3JLz7rXp51/Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:cc:90:ca:33:fa:a7:19:ee:82:52:82:b9:6b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Validity
Not Before: Sep 7 10:00:33 2025 GMT
Not After : Sep 8 10:00:33 2025 GMT
Subject: CN=9f8528799e6a96adcc749a2bcc5637f1c5b075c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8f:0e:2a:48:93:0a:98:9d:43:da:d2:72:3b:
30:a0:31:a6:71:b3:ac:59:fc:ac:51:f7:81:01:92:
1d:16:47:6c:97:b6:da:38:d0:d8:e7:22:e3:ef:4d:
b0:6a:8b:0b:37:67:c5:83:ba:ec:d3:6e:d6:d1:61:
d4:43:ce:27:8a:b8:8c:d8:d3:7e:ce:ce:f3:5f:0f:
49:02:2e:ff:73:a8:41:de:da:33:f3:cd:f0:7e:0e:
3e:33:9d:56:9b:d0:d9:f5:2b:27:c8:8c:17:7e:60:
00:9b:ce:87:9b:f9:7b:ed:d3:cd:a1:c7:30:0b:85:
ba:7f:60:cc:8e:e5:93:18:f8:48:ce:e7:5e:28:a9:
ca:98:5d:0f:67:78:7a:a8:38:4c:6e:8b:da:b2:58:
ee:4b:ab:10:99:98:4d:95:3e:75:8a:e2:b4:d0:d8:
8f:ae:bf:ee:a8:16:99:6d:e3:f3:d1:56:83:d8:31:
9f:82:e4:5c:08:39:8f:f3:7d:e5:ea:cb:8b:61:6e:
3a:28:8d:2a:df:de:ea:eb:e4:34:36:1e:a6:97:ba:
83:93:e3:9a:ab:e9:e2:4b:94:93:9c:b6:7d:ac:87:
4e:94:06:de:33:77:9c:5c:24:dd:48:0f:2d:d0:62:
a4:98:0b:46:82:ab:73:ff:16:0e:54:a1:13:cc:a3:
6e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:85:28:79:9E:6A:96:AD:CC:74:9A:2B:CC:56:37:F1:C5:B0:75:C9
X509v3 Authority Key Identifier:
keyid:AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:46:15:de:ee:f6:77:41:00:2e:c2:1f:12:38:0c:7c:53:8c:
ee:df:18:55:c1:d2:95:ae:be:5b:da:c9:fc:86:9c:41:b0:67:
86:bf:16:87:63:99:41:43:04:d0:1a:38:bf:ce:c3:14:9a:14:
ce:88:6d:f1:46:ab:2b:5a:c1:9e:9a:33:92:42:cf:d5:16:18:
cc:91:8b:70:99:62:c4:1e:5a:0f:7b:fa:69:71:4e:17:70:5d:
25:27:f2:7e:c7:4e:d5:12:52:9d:dd:9a:df:04:f0:e5:6f:1f:
61:ba:ff:c6:b0:c5:4d:83:ef:d4:47:3e:0f:f6:f1:b0:71:2b:
5e:d6:5a:50:39:bb:3e:a6:c6:e6:44:94:90:46:9e:a3:af:fd:
93:8c:31:44:b9:19:cf:2b:02:9d:f6:e7:37:9a:30:02:66:75:
b1:cd:29:54:6c:5b:10:4a:bd:dc:c1:ca:68:ab:50:14:61:f1:
53:ae:45:cb:88:5a:9d:3f:f2:36:22:06:df:f9:be:d4:cc:07:
68:79:e1:c2:3f:fb:a9:00:61:a6:87:41:ab:cc:a0:58:74:7a:
58:5a:99:27:22:7b:0b:d7:80:57:e8:89:87:98:a7:69:02:cf:
99:18:af:49:02:43:4c:fa:f4:cd:72:69:6c:9e:13:cf:75:50:
71:f1:49:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:19:23 2025 by rpki-client