Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json)
Hash identifier: BmuabJKa6CLOyUsVZHfbrbp0P6Fcv2shbv9tW57WNd0=
Subject key identifier: DB:24:8D:25:F5:C3:51:1C:94:B4:D6:4B:46:DC:2B:6B:76:98:4F:CC
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial: 0198451A5A15B673CF89D01BA4EB411B754E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
Manifest number: 1035
Signing time: Sat 26 Jul 2025 05:00:11 +0000
Manifest this update: Sat 26 Jul 2025 05:00:11 +0000
Manifest next update: Sun 27 Jul 2025 05:00:11 +0000
Files and hashes: 1: 3vMVhDVuSakGpKEegLzmX9CZn_0.roa (hash: 0WA7LBg+VlA+MYR6g5nbmdux2cCvdzgMgFAqrxmL/5k=)
2: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: hqQZrmdDvYjqJeaPnoiCHbmbPetv4Sqf6QjGyZnILzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:5a:15:b6:73:cf:89:d0:1b:a4:eb:41:1b:75:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
Validity
Not Before: Jul 26 05:00:11 2025 GMT
Not After : Jul 27 05:00:11 2025 GMT
Subject: CN=db248d25f5c3511c94b4d64b46dc2b6b76984fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9e:de:ea:f5:68:43:5b:db:71:3b:d0:51:a2:
bc:41:4b:92:79:d2:e5:70:38:c5:d9:ed:ba:7f:ce:
9c:cc:b3:b4:79:e2:c5:40:c4:1c:36:4e:ef:16:66:
44:e0:06:ca:4e:e3:10:a5:22:d8:e3:48:f0:ad:3c:
3b:d6:77:74:71:b2:b2:f2:21:8d:e5:f7:0e:6d:54:
53:87:cb:7b:48:b4:4e:4b:23:af:af:05:cc:30:08:
3f:57:c9:51:73:52:21:72:66:e6:47:59:59:81:d7:
41:09:88:4f:69:e1:30:6d:87:bb:17:ec:54:2a:6c:
f1:b1:c9:73:e0:46:37:d5:ba:20:0b:d3:24:26:86:
72:09:93:34:c1:55:28:34:60:ce:54:ee:cc:01:46:
8f:44:85:59:52:36:d5:5f:88:c5:19:2d:17:af:78:
55:be:6e:f4:cc:81:a7:d2:70:5b:43:58:9d:fb:14:
5f:24:e5:aa:38:44:40:56:0f:a0:ed:04:38:44:eb:
ce:26:ab:ec:17:35:9f:f5:a4:3d:b5:e1:4c:51:86:
a2:9a:94:85:2b:73:b8:e3:5a:04:2c:06:c8:48:52:
25:ed:17:87:70:18:0f:fd:fe:d3:f2:27:f6:12:05:
8f:c3:61:d4:60:41:b7:a8:6b:df:9a:b1:d3:6c:3d:
76:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:24:8D:25:F5:C3:51:1C:94:B4:D6:4B:46:DC:2B:6B:76:98:4F:CC
X509v3 Authority Key Identifier:
keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:01:5f:f8:1b:3c:76:b1:6a:58:87:b9:ad:bd:8a:1a:80:21:
56:6b:b0:64:56:53:ed:ed:db:9d:8e:40:fd:a4:da:28:bb:91:
56:f2:fd:4a:8d:44:17:0d:e3:91:ec:5b:cf:37:08:06:54:f7:
03:42:ea:04:14:af:47:37:fc:c4:fa:7b:64:60:3d:c2:e2:f8:
e6:d2:5c:d5:ca:96:0b:09:e6:17:d0:8a:17:33:1f:fa:e3:3b:
77:ab:e5:8b:8a:0f:c6:70:47:18:b9:d2:bd:96:b4:fb:e6:11:
65:48:ab:fd:d2:7e:55:54:90:2d:08:e6:70:11:90:7e:f0:d0:
81:99:09:ad:75:33:df:46:31:e5:e7:1c:d5:75:69:9a:13:b0:
da:07:95:97:0b:88:7f:c0:39:d0:d6:3b:9b:03:26:4c:f1:0a:
37:d9:b7:0c:7c:9d:69:22:2b:31:4f:4e:59:1c:83:b5:24:77:
56:9c:8b:bd:7f:bf:9f:d5:d9:88:7b:6b:4c:1e:bf:a8:d0:d8:
02:2d:cd:b5:f2:e4:fe:62:f8:85:b4:ed:fc:e6:b4:50:bc:38:
1b:75:3f:8c:b3:fe:dd:69:d5:02:de:2c:a3:80:33:2d:71:ed:
61:31:9a:ac:7a:19:15:e9:2a:72:04:10:c6:7c:09:92:d3:0b:
f8:02:b0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:28:43 2025 by rpki-client