Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
File: 23uiovC_o6dvXJkaR82YaMbR674.mft (raw, json)
Hash identifier: pTtnKaIpo6QbTEyJLUqwyjKjU3VrTpTh+RwuuEInFQQ=
Subject key identifier: BF:8E:36:8C:84:A5:14:23:97:D5:F1:7A:F4:71:C8:DE:68:D1:D9:DA
Authority key identifier: DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
Certificate issuer: /CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Certificate serial: 01984664CB63BB8E876F43646205D9D438D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
Manifest number: 12B1
Signing time: Sat 26 Jul 2025 11:01:07 +0000
Manifest this update: Sat 26 Jul 2025 11:01:07 +0000
Manifest next update: Sun 27 Jul 2025 11:01:07 +0000
Files and hashes: 1: 23uiovC_o6dvXJkaR82YaMbR674.crl (hash: Yqx7AW620HBdx9h7dajUUs/8U5nzqtbeMyHUEJ46PIk=)
2: J8hzJTM2uz7yXJSlk16QOqdb0iI.roa (hash: sPVr5eHmre5tC1ZjjWRY6ekKAEsqs3UiVYcFX3QHcj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:cb:63:bb:8e:87:6f:43:64:62:05:d9:d4:38:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Validity
Not Before: Jul 26 11:01:07 2025 GMT
Not After : Jul 27 11:01:07 2025 GMT
Subject: CN=bf8e368c84a5142397d5f17af471c8de68d1d9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5d:de:c1:c5:36:8c:82:be:a9:fb:ea:ae:b4:
00:3b:78:a7:db:5b:6d:48:45:73:22:0f:98:ad:46:
92:87:93:46:7b:51:2b:64:68:05:6c:93:93:93:a0:
24:2a:0b:55:04:df:6c:02:32:73:b3:97:f9:52:70:
d8:e8:ba:43:2c:f9:98:98:2c:bb:62:03:79:cd:92:
1b:43:9f:02:b9:ec:5d:a9:d8:2b:9a:37:4a:f2:4e:
1d:e4:4b:6b:7f:c6:f8:64:bc:62:2a:be:e7:f8:29:
c8:11:c2:25:64:22:6b:94:ba:4e:26:8a:fe:88:f1:
ba:d7:d8:5d:ac:dc:b5:bc:ce:9a:74:e5:ef:03:e1:
d8:3c:22:63:f6:fd:7a:8b:ba:aa:f9:6a:e5:b8:91:
74:f3:3a:3f:f2:f9:9d:18:be:45:99:fd:4f:9a:b2:
77:44:39:f2:ae:0d:87:7f:3c:41:8d:4d:6c:85:3e:
f6:ca:c3:88:93:13:a9:61:c9:95:22:c2:12:d6:b6:
1b:30:9d:56:c9:c4:d2:04:96:61:84:c7:ca:b4:ba:
1d:72:6f:a7:5a:fd:73:6f:30:89:5a:1f:a5:3c:16:
e4:38:5f:2c:87:34:e1:73:22:cd:2c:01:80:d4:95:
09:fd:50:d4:16:6f:ac:54:40:18:c4:81:64:7d:95:
c7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8E:36:8C:84:A5:14:23:97:D5:F1:7A:F4:71:C8:DE:68:D1:D9:DA
X509v3 Authority Key Identifier:
keyid:DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c8:43:42:27:68:b6:82:5a:6a:4b:77:a6:ea:85:75:0c:44:
f9:6c:1c:dc:02:e8:80:9b:0a:69:76:86:aa:dc:10:91:5f:f5:
2b:5d:ce:04:ce:8e:33:7a:07:0f:88:53:8f:97:d6:df:f8:53:
81:17:74:66:b1:b3:f9:2d:c4:1d:ec:c9:65:7b:9c:d0:d3:bb:
17:5f:24:00:f4:3a:79:0c:52:85:61:14:40:25:fc:f5:f1:bc:
0a:13:6d:36:e6:db:e1:7c:8c:ac:56:08:a9:67:c1:52:a9:73:
81:5b:77:dc:b8:7d:05:21:d6:cb:03:19:02:d6:a1:86:f7:12:
d0:26:f7:84:ae:c2:be:0b:cd:79:dc:5e:a7:d7:40:ce:4c:fa:
4e:c7:16:db:65:ac:0a:50:9f:3b:06:c0:45:a6:93:9e:fc:48:
e5:54:f9:89:01:0b:98:32:bb:08:50:1e:ab:df:37:73:2d:a3:
20:7e:cc:85:27:4b:bb:dc:36:5f:47:a1:1a:b1:7b:ba:f0:4e:
00:71:fe:43:10:1c:e6:f9:e9:5b:bb:3a:f4:0a:e8:2b:a4:c4:
60:f9:d3:0f:c0:4c:7b:ad:8d:d8:10:64:bb:89:57:a4:f1:7f:
44:a8:a6:73:dc:32:a9:65:b2:7d:df:e5:5c:d9:10:cf:fc:10:
a4:40:89:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:51:18 2025 by rpki-client