Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
File: _4C3cQsTmEQnXJ3pyOdk62QuGMM.mft (raw, json)
Hash identifier: hAKwvIBmeQYoL3FZLVyoffAyxUdrEh6bjaL4GDDb9hw=
Subject key identifier: 8C:AA:57:17:BA:F7:AD:79:C5:30:39:23:F0:9F:BC:DD:6A:70:C3:5E
Authority key identifier: FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
Certificate issuer: /CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Certificate serial: 01984A415C1532AB765EF74EBB50296A6CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
Manifest number: 11E8
Signing time: Sun 27 Jul 2025 05:00:54 +0000
Manifest this update: Sun 27 Jul 2025 05:00:54 +0000
Manifest next update: Mon 28 Jul 2025 05:00:54 +0000
Files and hashes: 1: Dx1gAqycGcxk0c3DOzDhmsNycjk.roa (hash: DxcHYS8M2M1yYvT8l/4w2YI9cemThALPivyuAHPlg0M=)
2: _4C3cQsTmEQnXJ3pyOdk62QuGMM.crl (hash: VRxJTJuqu3mtD0ljc6HCGqpCwNi9ZKcAZW0Gox3sb4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:5c:15:32:ab:76:5e:f7:4e:bb:50:29:6a:6c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Validity
Not Before: Jul 27 05:00:54 2025 GMT
Not After : Jul 28 05:00:54 2025 GMT
Subject: CN=8caa5717baf7ad79c5303923f09fbcdd6a70c35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:58:d8:f3:cc:04:39:c5:ba:fc:c1:cf:86:
73:9d:4f:b1:7e:15:99:a9:80:43:eb:27:69:20:6b:
04:3e:95:f4:4e:6e:3a:99:1c:45:9d:2c:30:78:14:
d6:0f:5a:05:07:e1:67:ce:6b:a2:b9:26:57:ef:3c:
0c:59:df:f7:38:fa:74:ad:6f:c1:01:e0:87:6b:09:
4d:20:a9:43:b3:1f:7d:83:2c:46:fc:b7:1f:02:59:
26:5f:52:22:4a:9b:99:e2:c7:fe:9c:9b:05:8e:84:
04:fc:55:d5:d8:f5:4e:75:74:16:d4:92:96:7a:dc:
45:e0:3a:94:36:bf:d0:76:46:52:b4:1d:3a:b3:59:
e8:cb:85:ea:1a:09:d1:a1:8c:ff:83:fc:06:df:f3:
4b:f3:88:cd:06:2f:79:ea:20:30:ba:d7:1d:42:7f:
13:57:fe:54:0b:15:7a:31:a3:9b:6a:1a:c0:00:52:
15:ca:18:20:26:6e:6d:04:20:fe:28:bc:73:34:c9:
e8:53:af:75:71:61:25:20:83:32:c9:e1:43:48:a1:
7f:27:c1:33:ed:fa:f2:7a:39:12:48:ee:66:df:65:
c9:94:14:98:e7:c9:fe:e3:98:91:81:61:22:62:8a:
84:54:62:11:dd:99:fb:89:db:11:8e:55:4b:e5:d5:
fd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AA:57:17:BA:F7:AD:79:C5:30:39:23:F0:9F:BC:DD:6A:70:C3:5E
X509v3 Authority Key Identifier:
keyid:FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2f:7b:ab:3f:80:cb:bc:94:1e:d7:6f:b4:4f:62:32:00:74:
e3:f8:5d:b2:ee:49:57:2a:8f:3f:5c:c8:a5:75:3b:b8:90:ec:
8f:bc:a3:c6:63:6c:1f:db:bb:d0:39:3d:65:ad:95:e2:af:6f:
db:1c:79:cc:fd:1c:e9:8b:20:d8:db:47:d2:4d:79:22:c9:05:
85:fd:95:d4:1b:1a:19:16:b3:3d:c5:78:49:e3:d7:b4:be:6a:
e9:5a:2c:a3:4c:36:0e:a8:83:50:67:7e:92:1f:31:31:02:d2:
59:cb:71:01:67:b5:8f:60:e7:b4:54:e7:11:87:35:93:82:43:
fe:b3:fb:9c:63:77:9c:0b:c4:59:44:9a:1e:4f:39:eb:96:ae:
1a:3d:b5:3f:4d:3a:c9:b2:af:49:19:a2:08:ba:79:3e:2f:79:
56:03:27:ca:06:95:30:9a:e7:f7:d7:13:15:b5:23:cc:71:f5:
c4:bc:0a:ef:8d:5b:8e:51:9c:73:26:d7:36:21:73:8f:4c:ff:
8d:9a:af:ee:9e:23:bf:42:fb:6a:24:ef:a1:fc:76:20:c8:a5:
14:a0:9e:18:8a:5f:cc:56:b0:a8:02:16:cb:53:42:d2:a4:4e:
96:58:0a:b5:aa:d2:8c:87:41:bc:ec:48:71:50:37:c1:1a:76:
ee:6e:8d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:54:43 2025 by rpki-client