Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
File: 12b8bxuOK2BPf7c8Kf1daJoOqB0.mft (raw, json)
Hash identifier: nSfYS/T1QqDgp1eV/B1f4u8xPW4tn5FhPmGwIIfhqHU=
Subject key identifier: EA:EA:93:CD:DE:8C:02:60:B1:8F:5A:F1:A5:0F:3F:5E:2B:49:2E:75
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 01984C2F5DDEE53414BD089A232B623ACEB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
Manifest number: 1611
Signing time: Sun 27 Jul 2025 14:00:29 +0000
Manifest this update: Sun 27 Jul 2025 14:00:29 +0000
Manifest next update: Mon 28 Jul 2025 14:00:29 +0000
Files and hashes: 1: 12b8bxuOK2BPf7c8Kf1daJoOqB0.crl (hash: H1LcTwtpPa4ShRJRpyuVNoryaOFrzkFGXbdtO2A5ajI=)
2: qGuTXxX3KPPGE7gornZUmtCgXus.roa (hash: hoxbUVU+eahUxnAmZd8qLyauIUnjncf8aJqcwbWkeXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:5d:de:e5:34:14:bd:08:9a:23:2b:62:3a:ce:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Jul 27 14:00:29 2025 GMT
Not After : Jul 28 14:00:29 2025 GMT
Subject: CN=eaea93cdde8c0260b18f5af1a50f3f5e2b492e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bf:05:fa:72:b6:8a:39:f3:16:d6:aa:52:60:
2f:c0:82:37:75:66:09:fd:d8:4e:1f:e6:29:d7:70:
da:c7:53:6b:97:c4:a1:7d:96:61:48:d6:db:6d:9a:
7c:47:af:7d:3d:a3:fe:6c:4c:e4:a1:49:fe:56:ea:
95:19:51:bb:a7:2b:64:cf:97:30:30:fb:c1:5d:35:
34:df:ed:f1:70:9b:ae:b2:ef:e8:12:c5:fd:98:6f:
44:70:38:96:56:12:bf:af:3c:f4:6f:f9:74:05:41:
cf:db:bd:e3:6c:f0:53:af:0f:f4:6b:9b:d7:15:68:
27:fa:33:b8:f6:46:4f:69:27:41:e1:23:45:be:98:
fd:58:52:2e:2d:96:d6:c1:81:3c:c3:cf:14:ab:90:
7c:53:3d:ed:68:70:e1:70:b0:73:82:14:8b:22:a5:
16:cb:d9:3b:9f:a0:89:20:73:de:c4:fd:05:d1:e8:
36:17:7e:3d:83:9f:81:fe:9a:28:23:4e:36:c0:9f:
10:82:b3:ea:a7:68:83:51:8c:d4:51:a9:e3:08:3a:
db:45:1e:25:87:f1:0b:e0:c6:d5:c7:b4:6a:8c:b1:
f7:e2:4b:a2:74:a4:40:22:ac:74:57:a2:7c:c4:0f:
e0:16:81:28:04:90:19:98:79:6f:a0:10:42:f3:d8:
01:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EA:93:CD:DE:8C:02:60:B1:8F:5A:F1:A5:0F:3F:5E:2B:49:2E:75
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b3:d2:7c:f0:31:17:1b:2c:32:73:10:3d:a7:0e:88:7d:00:
d3:71:c7:2e:72:58:1a:32:1d:1e:89:f2:7a:aa:97:80:2d:08:
b3:b4:f4:3f:d0:ab:23:0d:01:e7:67:d6:8a:4f:58:13:cc:cd:
bd:2f:f5:af:ec:85:88:1d:92:9d:9e:91:e5:8d:c9:8f:3f:67:
05:6c:44:8e:e7:53:29:3d:d0:6d:83:c7:a8:25:65:01:fc:b0:
a1:cc:73:39:15:32:7e:35:07:00:8b:77:dc:ce:ff:04:e6:b0:
9e:4c:b8:0c:90:ae:82:bb:be:c1:7e:a3:b9:aa:ac:db:07:f9:
00:ae:4f:1e:25:75:f3:0c:bb:83:bd:da:ea:ff:11:53:31:fc:
31:09:ac:81:50:cc:2c:4a:94:f2:de:79:89:12:69:3f:08:61:
f4:4d:de:ab:74:e3:15:dc:44:c1:22:e6:42:f7:2d:2c:32:94:
ec:07:42:3e:80:b4:05:66:ab:88:75:db:69:e0:e6:70:2a:09:
c6:5c:b8:8b:f8:63:79:19:a9:e7:81:9d:dd:f6:1f:a5:e0:3b:
3c:01:79:3b:98:ed:d4:d5:e7:e6:37:fc:7a:ed:d1:d7:29:65:
7b:dc:8c:6c:48:6a:e6:cb:ef:1b:4a:8d:5b:ab:de:ef:d2:b3:
4a:31:e0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:03:09 2025 by rpki-client