Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
File: t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft (raw, json)
Hash identifier: /Sshbv1EzlZaTNjOCs7lVSwLYs9A+uYcJHTNh5/TmD8=
Subject key identifier: 72:B5:5C:1F:4B:2B:DF:60:75:50:6A:89:9E:B1:56:A1:95:79:3F:31
Authority key identifier: B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
Certificate issuer: /CN=b754b22c5540508d9629a311ef1e83543657c4ee
Certificate serial: 0198499C301FA87A5AD9A4CDEE53137B8A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
Manifest number: 0111
Signing time: Sun 27 Jul 2025 02:00:29 +0000
Manifest this update: Sun 27 Jul 2025 02:00:29 +0000
Manifest next update: Mon 28 Jul 2025 02:00:29 +0000
Files and hashes: 1: gOfoa2pPlaad7aZSKOqxTDZnDnw.roa (hash: zWq54+d7Qdr/RiwPHS0cYGrr+8mtcUBj3tD3UQ2c23s=)
2: t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl (hash: XSjo8xAR5LrU9f6/waA7BoQ+P6Yh/pibGj+fQBlbg2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:30:1f:a8:7a:5a:d9:a4:cd:ee:53:13:7b:8a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754b22c5540508d9629a311ef1e83543657c4ee
Validity
Not Before: Jul 27 02:00:29 2025 GMT
Not After : Jul 28 02:00:29 2025 GMT
Subject: CN=72b55c1f4b2bdf6075506a899eb156a195793f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:34:a4:7a:8b:b5:5c:53:18:50:44:50:47:a0:
11:81:ff:48:3c:b5:69:40:59:a8:d4:f8:4f:4d:2a:
d0:4c:bf:84:0b:4d:e8:cd:26:22:c0:24:c4:3f:f0:
ee:54:80:0b:eb:d8:38:9f:88:b2:db:47:73:a8:13:
8b:d7:cc:13:45:b4:be:4a:d9:2b:88:a4:e1:6e:a5:
21:31:ca:04:f2:7a:c2:2b:77:df:1b:16:59:a8:8d:
b7:4e:53:50:29:14:86:9d:2e:70:20:c5:fe:51:62:
37:65:07:47:8f:49:0a:2e:df:db:5f:1d:e1:da:1a:
86:b2:a2:2f:78:98:e0:ea:14:8e:60:b5:1e:80:87:
4e:bd:45:20:58:30:ea:c9:f9:ed:16:5a:95:f2:f7:
66:01:15:e7:33:af:d3:16:47:0f:68:a7:7c:bd:5b:
d3:a5:20:c6:8a:3b:d0:42:db:74:cd:7b:53:43:15:
81:48:31:8b:1a:66:35:fe:d9:9d:dd:3f:5c:c3:07:
ad:db:c8:df:b8:48:da:26:7a:29:77:df:18:0b:87:
25:d0:e4:5b:31:42:9e:7d:4b:0b:4f:10:19:45:2a:
2b:73:28:68:4c:8c:4c:7c:de:65:c0:ec:53:6b:0b:
93:e1:e5:3e:8f:d3:1f:75:8a:05:a7:fe:92:83:65:
ec:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B5:5C:1F:4B:2B:DF:60:75:50:6A:89:9E:B1:56:A1:95:79:3F:31
X509v3 Authority Key Identifier:
keyid:B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:41:09:8e:6a:db:e4:55:78:b0:ad:e1:8f:63:17:c9:b9:4a:
c3:92:3e:ef:f0:2a:88:55:ba:6b:e5:b1:ac:04:9e:8e:b2:e8:
98:d9:03:e1:6f:2b:21:3d:7e:6d:e7:f4:88:75:e3:1a:8c:a7:
12:cf:ce:75:41:01:72:3b:24:48:8a:8e:9c:03:22:80:ce:84:
e4:47:9b:d2:74:4f:b0:87:a6:ed:29:b9:51:ea:56:e1:3a:3e:
46:34:3b:c5:f1:f8:49:5e:fa:b9:32:ed:d8:a8:90:a1:48:86:
5a:a9:b1:d1:d7:47:48:26:1e:51:af:10:32:51:77:89:fa:4d:
3e:dc:e9:3b:d5:9b:1b:28:6a:7f:0d:8a:0f:2f:32:35:b2:56:
22:82:83:9a:ea:d6:4d:f0:3c:e6:1f:a7:0d:fc:d0:70:ef:6d:
2a:c5:f5:db:17:45:4a:8e:2f:db:4d:1f:34:98:50:5e:72:cf:
aa:f6:96:33:c8:21:7b:6f:0c:61:f4:23:3d:fc:f9:10:68:99:
e8:78:8e:88:58:a0:70:24:82:a9:0b:6b:0d:51:e9:73:49:76:
3c:88:46:92:cc:cd:10:43:95:22:5a:7b:a8:e8:2c:5c:3f:be:
8d:db:fc:85:c7:10:0b:8a:c7:ee:a0:95:3a:8a:5f:b0:ec:a4:
1e:c1:f9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:28:47 2025 by rpki-client