
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
File: d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft (raw, json)
Hash identifier: T19p1Eo3zYwiMmc23HJPzGtyH4iR81tRZvULW+tV+bU=
Subject key identifier: 7C:1C:BF:E0:E9:C1:FE:06:74:E2:0D:81:AB:59:76:9E:14:52:82:4E
Authority key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
Certificate issuer: /CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Certificate serial: 019826A2665F11B0660B9EB53E3E5514A339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
Manifest number: 111D
Signing time: Sun 20 Jul 2025 07:00:33 +0000
Manifest this update: Sun 20 Jul 2025 07:00:33 +0000
Manifest next update: Mon 21 Jul 2025 07:00:33 +0000
Files and hashes: 1: FVyOtMSkw-0Vg62ACMKcfYtFTZg.roa (hash: 19Vo/+e85FEDOozBk9ulyjhvlWCZUEMrSObfkurwei4=)
2: bGBL61Pb5C5jQn9lTt04zeAidWQ.roa (hash: tcI+1ZDPgb0dQJ/mWEWyrYgZXPfZZ/VnqvsqqlmCxEY=)
3: d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl (hash: k9NIcHdXupc496NSouPEH3Kp2ZzVkQHrv0d0uxC45Ms=)
4: kfH4Hfcw2DAA4uCH3S-0NOLLLIE.roa (hash: +ssFltk6eznRSfe1ZkEA/pnveLfuNyk/DPp5U5STMlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:a2:66:5f:11:b0:66:0b:9e:b5:3e:3e:55:14:a3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Validity
Not Before: Jul 20 07:00:33 2025 GMT
Not After : Jul 21 07:00:33 2025 GMT
Subject: CN=7c1cbfe0e9c1fe0674e20d81ab59769e1452824e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:61:77:7b:2f:14:07:e8:01:fd:d6:af:f2:ae:
59:76:1f:3b:ff:39:d7:ae:2b:bf:e3:48:a0:63:41:
37:4d:6d:93:ec:4e:81:a1:30:d2:71:21:03:b6:03:
74:38:67:27:58:5d:2c:4f:9c:3b:7b:b5:a5:b3:ef:
3c:1b:36:8b:2a:79:55:e9:68:66:67:0d:78:9b:2e:
07:56:f7:81:80:d9:38:62:5e:4c:88:2d:e9:e3:e0:
24:ff:24:e7:6d:47:4a:de:fd:ea:6b:49:ab:75:d4:
b2:e6:7c:70:3c:89:b3:77:2f:b5:23:30:d4:11:91:
9a:5f:33:8b:8f:d7:64:06:b8:05:0b:6e:bd:2c:5a:
0f:a5:4a:79:d4:92:da:7a:d8:9e:09:e8:a8:8f:0e:
0f:84:b2:45:79:87:32:1c:aa:fb:96:4b:0c:cd:70:
1e:79:f8:7a:90:0f:0b:6b:d6:df:53:57:e6:7b:e6:
a1:e9:0d:6a:ca:e3:95:d8:fe:90:ee:46:0e:6d:c6:
42:e4:70:b1:94:bb:dc:8d:a1:ec:49:00:f2:21:f3:
e4:fc:82:db:cb:d6:f0:fa:0d:67:69:b0:ab:72:8b:
49:2a:ef:a0:bd:95:64:37:22:40:c2:d8:30:ae:bb:
19:d0:64:6a:f9:01:34:5a:fa:87:32:d0:70:80:dc:
ba:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1C:BF:E0:E9:C1:FE:06:74:E2:0D:81:AB:59:76:9E:14:52:82:4E
X509v3 Authority Key Identifier:
keyid:77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:bb:36:80:52:07:0c:06:32:f1:f7:33:cd:f2:9c:85:ae:96:
16:4e:ea:c0:bd:7d:3d:95:e2:13:19:9f:e9:e8:12:c5:ef:67:
6b:17:03:cf:88:fe:11:5e:10:b0:79:d3:8b:e1:23:97:61:51:
89:69:14:94:7c:28:5c:55:2d:85:6d:2d:85:41:d4:ec:97:70:
ef:ef:cd:a8:50:cf:60:b2:50:1c:b5:f7:30:f6:82:7e:a6:91:
46:e2:17:f6:47:bc:99:0b:cf:0e:bc:3e:e1:f3:da:95:52:c5:
d9:fe:96:cd:e3:59:b4:00:92:b0:29:47:d6:93:24:0e:b1:a8:
76:5b:b5:e3:17:a9:b0:91:c8:b4:89:8f:e1:56:52:98:ba:b5:
a6:b7:69:ae:de:58:01:0d:d9:b8:15:cb:ec:ca:b1:45:ee:d7:
ea:3d:24:21:d4:fd:68:1c:3a:d3:64:11:8c:5d:01:1b:f4:f3:
46:65:91:57:f8:fc:32:b2:b3:c1:b7:10:06:59:5a:0e:66:df:
56:ec:75:1e:f5:a6:17:7f:c3:12:b7:5e:ed:59:86:3e:93:9e:
fc:a0:af:eb:82:f2:99:a1:e8:4e:fc:95:d6:d9:98:58:ce:53:
87:5b:0c:bc:43:77:a1:c2:26:f4:b8:40:c4:d1:70:16:78:48:
7c:a3:a6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:24:52 2025 by rpki-client