Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
File: rjrbWMEIuLsT5DwV7qPHiZtko6o.mft (raw, json)
Hash identifier: JzxMrnqEukgolA9qvfPbw03+NCQNqPMjQVyfdrxgCtU=
Subject key identifier: 10:7F:A2:3F:98:B8:AF:B2:B4:EA:BE:7E:D7:A5:F0:33:57:BD:7A:7C
Authority key identifier: AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
Certificate issuer: /CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Certificate serial: 01984664ABB69E2487DEA70644B73B0D744B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
Manifest number: 0AF1
Signing time: Sat 26 Jul 2025 11:00:59 +0000
Manifest this update: Sat 26 Jul 2025 11:00:59 +0000
Manifest next update: Sun 27 Jul 2025 11:00:59 +0000
Files and hashes: 1: RW_H_ESDaZiZhgwMqK0qV1tKkxQ.roa (hash: 8rlM5Gf4dfcpQSnuob8gpQKJA3IonaJYfplAZEgt4uw=)
2: rjrbWMEIuLsT5DwV7qPHiZtko6o.crl (hash: HTbk5W/zDuAAWSl7l5Ijzl6AmtcHx6i6N8yg8TtJGV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:ab:b6:9e:24:87:de:a7:06:44:b7:3b:0d:74:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Validity
Not Before: Jul 26 11:00:59 2025 GMT
Not After : Jul 27 11:00:59 2025 GMT
Subject: CN=107fa23f98b8afb2b4eabe7ed7a5f03357bd7a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:26:b2:16:72:0e:ee:c2:e4:5f:7a:07:a9:8a:
86:9c:1f:fb:ce:eb:86:f8:df:c7:f9:9e:91:ab:be:
9d:b1:a2:23:07:9e:2d:77:fd:5f:2f:44:16:28:0c:
5e:96:db:53:5a:95:33:bc:97:aa:d1:05:a4:52:d8:
ab:1e:4c:0b:35:53:ec:cc:17:42:01:20:8f:d7:fc:
bd:3c:99:08:d4:0b:7a:61:12:a9:2a:0a:5f:73:12:
7a:b9:f5:16:67:c7:62:78:01:44:8b:57:a7:18:90:
96:12:bc:e5:82:7d:94:32:9e:50:f1:24:65:a6:7c:
bd:c3:04:f0:6c:20:49:da:94:d1:71:d8:05:eb:52:
c3:22:8b:e1:9d:43:81:8d:f9:c4:59:dc:61:86:ef:
07:38:b8:b6:35:0f:04:32:df:ac:b7:a3:2e:c2:87:
4f:02:33:41:05:60:37:47:6b:e9:eb:ef:b8:27:ff:
06:86:95:fd:8c:c4:12:7a:07:fa:78:d4:1b:ed:e6:
74:78:6f:20:c4:df:27:cd:2f:67:63:06:ee:f5:78:
6a:59:dc:97:4d:f9:5f:52:56:9a:40:1e:04:11:df:
26:32:8c:37:37:fa:a2:df:52:59:65:70:a4:56:58:
ff:8d:dc:e4:2f:6f:20:b0:8a:1b:af:4c:0c:b4:ec:
5c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7F:A2:3F:98:B8:AF:B2:B4:EA:BE:7E:D7:A5:F0:33:57:BD:7A:7C
X509v3 Authority Key Identifier:
keyid:AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d0:6e:59:6f:d0:05:94:99:4c:e8:cc:1a:94:20:d5:d9:d2:
62:de:4c:60:dc:b0:8e:74:50:9e:2c:e0:cc:24:fd:15:e5:25:
f3:16:2d:f1:82:ef:16:b8:2e:a5:d9:e1:39:8e:70:a4:24:ba:
85:b9:95:79:05:9a:f6:d0:5a:4e:1e:13:79:6e:63:5c:da:c3:
4b:10:d7:e6:57:14:4a:49:e0:03:5e:45:09:aa:a0:55:cb:cb:
c9:36:24:16:af:f7:75:43:9c:49:cc:7d:09:43:ba:74:70:24:
94:24:12:53:1d:f6:13:29:03:21:ed:cc:a8:4d:96:25:0f:f8:
9e:07:f7:d6:de:80:16:cd:38:fa:89:31:54:dd:75:53:c0:d4:
02:b4:3a:97:69:f2:d5:1e:60:80:63:d9:c5:60:95:a3:8d:83:
b2:36:2b:a9:cd:95:7e:fd:e7:62:c2:ac:7d:72:91:90:de:27:
63:e4:de:0b:a3:fa:1e:95:b9:e5:c1:26:0e:fb:0b:0a:5f:f4:
65:a5:43:b6:99:f7:1d:b2:3d:7f:82:0c:ef:77:50:29:93:e1:
6e:05:29:cd:12:cc:be:4a:f7:57:64:c3:3b:2a:d8:56:93:6f:
fa:9f:7e:42:40:ac:ca:e4:19:35:5f:6c:28:bd:7d:02:3e:c5:
ed:82:e3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:23:04 2025 by rpki-client