Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
File: e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft (raw, json)
Hash identifier: CID8NnIAEl4zyj8butDqcx74QzYiCGHqWvFdVEbDfRk=
Subject key identifier: F3:9A:4C:9E:D0:6F:EA:AC:60:F3:1C:61:DA:DE:29:D7:95:27:26:DB
Authority key identifier: 7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
Certificate issuer: /CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Certificate serial: 0199326D5B45174FCF6ADC3AE81BCEA250CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
Manifest number: 142D
Signing time: Wed 10 Sep 2025 07:00:51 +0000
Manifest this update: Wed 10 Sep 2025 07:00:51 +0000
Manifest next update: Thu 11 Sep 2025 07:00:51 +0000
Files and hashes: 1: 1coqSPvIzRCZ1S6Z5EWORCEy_NY.roa (hash: HDpNqOrJZAq1XJhPSThcDVAo56N193hVEjKsFT9RCtc=)
2: e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl (hash: FfpbfVsPV3BlXccIFzVqBwGtf0bUAszVBeLjYBmve+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:5b:45:17:4f:cf:6a:dc:3a:e8:1b:ce:a2:50:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Validity
Not Before: Sep 10 07:00:51 2025 GMT
Not After : Sep 11 07:00:51 2025 GMT
Subject: CN=f39a4c9ed06feaac60f31c61dade29d7952726db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:27:76:d2:a3:bb:5e:1d:21:4d:0c:64:92:ac:
0d:32:2c:c3:bf:6f:55:7a:ff:a6:33:21:c3:3f:ab:
c5:91:14:03:4d:b5:6e:74:71:07:38:dd:78:70:df:
6e:33:02:98:be:55:83:54:8e:17:d9:de:8d:3f:d9:
05:df:15:b5:da:6b:bb:b5:7d:ed:66:24:56:94:36:
7b:44:84:22:c6:a6:47:e4:9a:18:1b:4f:eb:70:8b:
0e:05:7b:b9:49:4f:ad:4e:1f:e8:08:9b:21:f8:86:
3b:d8:c8:85:85:c4:32:07:04:2d:51:9a:1b:46:08:
54:a7:24:5f:b7:3d:d4:a5:de:17:c4:f6:f6:da:52:
d7:32:a8:35:70:9c:1a:da:1f:6b:d7:22:4c:a1:59:
c1:ac:d9:6a:aa:6e:c7:88:76:2b:97:1c:f2:1c:c5:
2b:74:14:56:1e:ab:99:95:4e:36:f3:5f:68:c9:c2:
b2:e4:11:6b:0e:02:3d:fb:f3:37:5a:1a:3d:47:ec:
e6:ee:d4:7b:cc:00:12:96:8b:15:c7:dc:f9:64:f9:
73:ad:c9:bc:6e:eb:6f:4e:49:6a:d3:8e:53:46:b2:
2d:72:b3:2a:58:b0:ce:3e:bd:2b:4c:90:20:43:86:
24:df:26:9d:87:80:5b:4a:3c:de:97:c2:f3:4f:ed:
c5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9A:4C:9E:D0:6F:EA:AC:60:F3:1C:61:DA:DE:29:D7:95:27:26:DB
X509v3 Authority Key Identifier:
keyid:7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:cc:9a:99:9a:0b:2e:fe:aa:97:6c:0f:80:4e:fb:c8:9e:9b:
9d:39:1a:2f:1a:43:c3:f1:1e:bf:d9:bf:42:24:93:1c:51:d9:
e8:42:0a:a1:25:ef:45:29:09:af:e3:9a:23:cc:39:52:89:41:
3c:40:fe:df:27:2d:48:c0:96:56:29:20:27:4a:70:a9:8a:14:
86:d3:ea:c0:2a:1f:b6:6e:f6:0d:95:36:ea:c1:45:e5:fe:45:
39:b4:39:51:57:0c:50:0d:66:e0:eb:26:73:a9:ca:b3:66:74:
88:cf:68:b1:42:62:f5:4c:1a:75:10:47:64:63:8b:42:6a:1c:
8a:45:6d:62:11:ef:4d:1c:6e:94:12:b5:f5:21:ad:97:3c:28:
9a:24:aa:62:4c:c6:3a:42:28:81:04:ae:38:50:9f:28:84:80:
fa:22:d0:98:9e:44:72:dd:96:03:aa:d9:41:d4:58:64:06:fc:
50:80:b2:f2:94:43:47:a2:35:a4:06:dd:44:a2:24:6b:9b:57:
5c:da:0d:61:18:b4:64:00:a2:be:8e:9e:ea:75:da:80:10:a6:
c0:8a:ee:4e:f3:20:55:05:53:86:d0:8e:e2:e9:8c:9d:fe:e0:
fb:d3:6c:8b:cb:7a:fc:56:7f:a5:50:4e:53:22:d4:3c:3a:0e:
0d:32:da:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:27:38 2025 by rpki-client