Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
File: Te9bj_uvfVavXTny-UyUbXL3cPM.mft (raw, json)
Hash identifier: 704Qd2dehLTbN+Sr1CqW8VjonoD2e0E2FXuuKE//yoI=
Subject key identifier: 89:08:07:C8:29:34:7F:3E:10:1E:DA:4E:F7:B2:74:53:F7:9C:5B:7F
Authority key identifier: 4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
Certificate issuer: /CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Certificate serial: 01984A09F900613AAF421969E3B7648768D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
Manifest number: 1279
Signing time: Sun 27 Jul 2025 04:00:24 +0000
Manifest this update: Sun 27 Jul 2025 04:00:24 +0000
Manifest next update: Mon 28 Jul 2025 04:00:24 +0000
Files and hashes: 1: C0P7fdeMbUq_SUkoUNzucceRO_o.roa (hash: IOK/1252dBZyKN3aeAn78pq+rzDgEYZNrHyoRwRIUaA=)
2: Te9bj_uvfVavXTny-UyUbXL3cPM.crl (hash: /L0cLmiszxp2JGAEegkHC8zx2w7RxpeO/W2LGPJCh6M=)
3: a1f2RcCwBt9bPHww1QitG1PQubM.roa (hash: SAUWVRAb+b0RAh7fSmAkBAsYks5uXo8G20Pv9xs5FYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:f9:00:61:3a:af:42:19:69:e3:b7:64:87:68:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Validity
Not Before: Jul 27 04:00:24 2025 GMT
Not After : Jul 28 04:00:24 2025 GMT
Subject: CN=890807c829347f3e101eda4ef7b27453f79c5b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:b1:78:58:cc:e1:96:91:4b:91:98:3b:6e:
2b:09:e2:c9:8a:64:c5:f1:6a:02:d4:ae:95:eb:9f:
50:18:0a:71:7e:68:ba:78:c3:f0:13:7e:a2:61:e1:
a8:4c:e4:a1:73:9c:97:d5:d9:d8:41:13:74:5e:1f:
eb:63:31:fd:d2:ce:a2:11:35:e7:6f:6d:03:5d:9d:
db:6c:e3:00:aa:5d:4f:87:01:4d:16:14:44:df:08:
4a:8e:6c:0f:d2:da:b6:44:23:72:bd:4f:a1:bb:10:
61:52:87:17:d5:e2:45:a8:e9:94:4e:88:b9:54:57:
7d:44:3c:2e:47:46:a9:6b:01:54:fa:1b:4c:8d:1e:
4a:b3:81:1e:c6:71:1f:14:a9:10:51:d5:1b:94:95:
ee:39:2f:53:86:ac:2d:c4:33:3c:4f:1a:c0:f5:b9:
15:41:7a:c1:60:f2:77:80:fe:b8:69:09:2f:b6:08:
7d:9a:38:29:51:e0:0f:ae:25:b4:e5:d5:ac:19:d9:
a5:4d:21:58:a3:a5:aa:78:ea:9d:25:8c:32:dc:ca:
d1:bf:b1:cd:d0:c4:34:c0:09:6b:85:97:f4:53:d6:
d4:ec:c5:c0:44:1d:c6:8e:6a:a7:45:a2:b0:bc:78:
1b:a2:11:51:13:ee:e0:6b:f8:1d:6a:a2:9e:78:69:
35:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:08:07:C8:29:34:7F:3E:10:1E:DA:4E:F7:B2:74:53:F7:9C:5B:7F
X509v3 Authority Key Identifier:
keyid:4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:58:16:ce:41:2c:6e:92:fc:bc:81:42:db:f4:32:61:d3:e3:
83:22:4b:5a:b4:a2:67:b0:cc:3a:71:b9:5b:da:0a:94:3d:f1:
64:dc:c5:c5:84:d2:e4:63:2e:83:8d:55:d6:74:9e:2b:b7:fd:
bf:d2:03:80:2b:da:b5:72:de:5d:32:b2:54:b4:00:13:b4:8b:
4c:ad:96:0f:5d:cc:fd:0e:74:b8:a2:c5:a6:cc:76:4e:c7:62:
f0:73:8f:d0:0c:57:4c:53:bb:37:53:de:3c:77:78:dd:4f:c6:
ba:65:94:7a:36:f0:8b:fe:94:0b:e1:ca:72:51:df:47:c4:56:
6d:1f:bd:f7:04:3b:80:61:c4:05:5a:a5:a1:16:93:56:aa:ab:
3f:ae:e1:e1:cf:47:60:01:c9:be:03:58:14:de:6c:a7:3e:90:
2c:82:a2:43:d7:34:b2:47:fd:da:6d:39:1a:64:c9:e2:24:96:
17:c8:2e:9f:9b:e0:11:ba:bd:5c:35:de:f1:1f:ba:5a:fb:01:
90:9d:b1:c7:51:c5:d3:26:e3:3a:9c:4b:08:a1:5a:58:2d:6f:
d6:34:5b:f2:be:ac:bd:92:0c:16:a1:d9:18:ee:28:d9:8c:31:
1d:24:cd:65:b8:65:cd:ee:f2:42:12:5c:df:8f:ec:1f:2f:29:
6e:99:8f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:15:36 2025 by rpki-client