Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
File: t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft (raw, json)
Hash identifier: gAHcNlJnwXemE87Zbdza9LZssaIXc+xvEB1QYEOc/+U=
Subject key identifier: C9:FF:3E:B1:40:E3:7F:BF:AB:43:B4:02:B4:CC:F1:20:77:7E:23:E3
Authority key identifier: B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5
Certificate issuer: /CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5
Certificate serial: 019829DA7D8C259684A84227110783000767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
Manifest number: 25
Signing time: Sun 20 Jul 2025 22:00:41 +0000
Manifest this update: Sun 20 Jul 2025 22:00:41 +0000
Manifest next update: Mon 21 Jul 2025 22:00:41 +0000
Files and hashes: 1: t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl (hash: 3cjaHynS8EXX1EitKyCpcmPeh2e6F62M8r9SeG4DSl8=)
2: vfts5VO11Lf49yWawFf1T10X7IA.roa (hash: o5JhQxo9WfUPfoKsbz0ZkfnOyZ6HVJldiK9KySDHufY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:29:da:7d:8c:25:96:84:a8:42:27:11:07:83:00:07:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5
Validity
Not Before: Jul 20 22:00:41 2025 GMT
Not After : Jul 21 22:00:41 2025 GMT
Subject: CN=c9ff3eb140e37fbfab43b402b4ccf120777e23e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c1:2f:3d:e2:df:b7:3a:7a:7e:fb:ac:88:78:
86:56:00:f3:02:56:25:9e:65:30:4e:39:98:49:fc:
e3:4d:0d:7c:3e:c3:cd:2b:42:f2:c2:f9:27:5e:30:
af:f4:d6:39:aa:3f:b9:83:f3:45:4b:29:6b:9e:5c:
9b:90:ee:41:4b:14:b7:77:b2:11:01:8d:18:3f:cd:
bf:af:e4:73:e9:a1:3c:a1:bd:ee:15:87:30:2c:20:
91:3f:e7:24:f7:ec:9a:99:ac:fa:17:87:0c:54:34:
77:13:fe:0d:da:b7:5c:8e:21:7c:2a:da:a4:60:9f:
08:cd:ce:73:0c:05:22:36:41:f3:ba:5a:a1:05:7a:
98:35:ef:bc:4e:f8:4c:4f:6e:55:4b:ec:3f:5a:ec:
53:1d:9f:72:db:a9:ce:ec:0c:a8:c5:97:0b:53:5c:
2e:56:9a:3f:51:45:39:21:af:98:fc:5d:ed:30:d2:
34:ff:e5:9d:52:f1:35:56:07:61:26:2c:ed:90:20:
4a:5d:da:db:47:9a:b5:e1:26:26:4f:a7:81:ac:b5:
db:be:7b:1b:3e:39:99:ba:f7:55:c0:08:76:83:6f:
e8:57:c3:40:9e:76:87:0d:24:a3:1c:e0:ea:b6:7a:
59:a9:ea:47:9d:8c:58:17:67:3d:69:e8:5b:f7:7e:
58:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FF:3E:B1:40:E3:7F:BF:AB:43:B4:02:B4:CC:F1:20:77:7E:23:E3
X509v3 Authority Key Identifier:
keyid:B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6b:9c:b5:e2:b8:19:c4:76:47:9d:53:dc:30:16:8e:81:d4:
22:19:a3:ca:f3:f6:a7:8a:51:11:a2:b3:33:79:b9:38:9d:db:
73:52:c3:ee:c9:88:57:10:7b:05:f8:71:83:04:eb:c6:7d:7d:
f3:8e:b8:ac:aa:4c:46:b9:28:80:27:1c:a5:9a:8c:6c:c6:e1:
18:d0:73:3e:80:f2:13:20:b4:b5:29:cc:8c:73:c7:86:7b:fc:
24:10:98:2b:0a:51:1c:26:5d:0b:4c:2f:8c:81:e7:fc:ff:e6:
a6:81:48:4b:92:62:05:16:d6:b8:9e:91:18:6d:69:82:16:73:
90:d1:90:c2:94:22:59:4f:64:05:51:30:55:2a:8e:05:a7:e9:
db:2a:ba:10:47:14:9f:74:44:a9:7a:64:1d:6a:9c:14:93:70:
ae:e9:f4:0d:97:2e:14:b1:57:5c:9b:56:d3:70:fd:21:fd:f6:
91:6a:a6:73:19:66:ee:9c:0b:85:ed:97:ad:b9:71:ed:7d:35:
13:62:fa:b3:49:88:8f:ed:15:a2:6c:e1:46:ec:37:d7:08:f7:
03:01:83:d5:1b:24:e1:ed:07:e6:7a:9a:5e:17:f0:b6:4e:55:
0e:cd:b1:b4:80:b7:ae:18:60:ac:c7:ea:cb:e5:68:2c:97:16:
5e:a7:30:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgp2n2MJZaEqEInEQeDAAdnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NzRjN2I4YmFhMWQ5ZDQ3YzNhZjU1ZjNlOTdkZDZlNWQ2
ZTI3ZDUwHhcNMjUwNzIwMjIwMDQxWhcNMjUwNzIxMjIwMDQxWjAzMTEwLwYDVQQD
EyhjOWZmM2ViMTQwZTM3ZmJmYWI0M2I0MDJiNGNjZjEyMDc3N2UyM2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sEvPeLftzp6fvusiHiGVgDzAlYl
nmUwTjmYSfzjTQ18PsPNK0LywvknXjCv9NY5qj+5g/NFSylrnlybkO5BSxS3d7IR
AY0YP82/r+Rz6aE8ob3uFYcwLCCRP+ck9+yamaz6F4cMVDR3E/4N2rdcjiF8Ktqk
YJ8Izc5zDAUiNkHzulqhBXqYNe+8TvhMT25VS+w/WuxTHZ9y26nO7AyoxZcLU1wu
Vpo/UUU5Ia+Y/F3tMNI0/+WdUvE1VgdhJiztkCBKXdrbR5q14SYmT6eBrLXbvnsb
PjmZuvdVwAh2g2/oV8NAnnaHDSSjHODqtnpZqepHnYxYF2c9aehb935YtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMn/PrFA43+/q0O0ArTM8SB3fiPjMB8GA1UdIwQY
MBaAFLd0x7i6odnUfDr1Xz6X3W5dbifVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDNUSHVMcWgyZFI4T3ZWZlBwZmRibDF1SjlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9lMDg3OTQtMDA5NS00NzFiLWEzMDEt
ZjAzODdlMGU2MjFiLzEvdDNUSHVMcWgyZFI4T3ZWZlBwZmRibDF1SjlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9lMDg3OTQtMDA5NS00NzFiLWEzMDEtZjAzODdlMGU2MjFi
LzEvdDNUSHVMcWgyZFI4T3ZWZlBwZmRibDF1SjlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2ucteK4
GcR2R51T3DAWjoHUIhmjyvP2p4pREaKzM3m5OJ3bc1LD7smIVxB7BfhxgwTrxn19
8464rKpMRrkogCccpZqMbMbhGNBzPoDyEyC0tSnMjHPHhnv8JBCYKwpRHCZdC0wv
jIHn/P/mpoFIS5JiBRbWuJ6RGG1pghZzkNGQwpQiWU9kBVEwVSqOBafp2yq6EEcU
n3REqXpkHWqcFJNwrun0DZcuFLFXXJtW03D9If32kWqmcxlm7pwLhe2Xrblx7X01
E2L6s0mIj+0VomzhRuw31wj3AwGD1Rsk4e0H5nqaXhfwtk5VDs2xtIC3rhhgrMfq
y+VoLJcWXqcwAw==
-----END CERTIFICATE-----
Generated at Mon Jul 21 07:31:44 2025 by rpki-client