Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
File: sHATRrrVXff13IGLu7z7t9sQcKs.mft (raw, json)
Hash identifier: cAsD1Pst2hJ5m4t98unjRdoR2q8T41sZhFRvERDz578=
Subject key identifier: 13:8E:19:DB:EB:6E:38:1D:1B:46:5E:DA:CC:85:F4:F1:C4:7B:22:22
Authority key identifier: B0:70:13:46:BA:D5:5D:F7:F5:DC:81:8B:BB:BC:FB:B7:DB:10:70:AB
Certificate issuer: /CN=b0701346bad55df7f5dc818bbbbcfbb7db1070ab
Certificate serial: 0198499C3A4CF0909B55CC18E47C5EA74CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
Manifest number: 07D5
Signing time: Sun 27 Jul 2025 02:00:32 +0000
Manifest this update: Sun 27 Jul 2025 02:00:32 +0000
Manifest next update: Mon 28 Jul 2025 02:00:32 +0000
Files and hashes: 1: 2vj5B04hPRrl36o4PSEreNmSh7Y.roa (hash: IJqTeCNZ6pF/BafJ55wl0YbKPxsnvPNim6xG4D9/f0M=)
2: sHATRrrVXff13IGLu7z7t9sQcKs.crl (hash: yY8sgkM9MbsWh1CPApH+Y6SPVObQEFBhNvmszY3JMiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:3a:4c:f0:90:9b:55:cc:18:e4:7c:5e:a7:4c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0701346bad55df7f5dc818bbbbcfbb7db1070ab
Validity
Not Before: Jul 27 02:00:32 2025 GMT
Not After : Jul 28 02:00:32 2025 GMT
Subject: CN=138e19dbeb6e381d1b465edacc85f4f1c47b2222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:e9:82:fd:9a:b1:25:61:be:0b:24:74:c8:
97:ef:1f:eb:d5:87:26:6e:74:d2:02:9d:8a:2f:96:
75:0e:bb:03:3b:49:e2:54:66:cb:e1:d5:91:d4:ff:
ee:ff:07:25:9a:46:c9:af:ac:53:fe:51:7c:ea:1b:
63:93:d0:63:35:02:53:97:18:fd:11:17:c8:18:ed:
37:20:4d:03:f2:43:50:e7:d0:c7:d1:8a:9a:ac:9c:
7d:09:c5:04:5e:29:a9:71:e5:a2:af:02:89:75:70:
bf:63:93:07:68:3b:ff:e1:f1:41:77:55:b2:2f:ba:
06:d3:ba:45:e0:be:60:1e:50:d5:bf:e4:f1:07:0e:
6a:21:e4:34:01:6d:66:1a:11:62:b2:85:47:af:da:
4d:15:fa:93:3e:14:01:9d:4d:14:02:dd:6f:4a:e3:
c2:33:81:4b:c9:80:14:f2:1f:b1:48:7d:9f:ff:81:
e7:13:c6:57:22:5b:4a:d0:72:a9:6c:29:ef:17:a7:
51:18:61:cc:e0:52:47:fb:37:97:81:3c:8e:5e:12:
99:4c:88:ca:2d:85:db:bf:e8:be:3c:06:de:44:1a:
ee:a6:2e:6d:13:46:55:41:65:9e:b7:14:43:99:6f:
9a:18:fd:8c:69:17:43:b4:87:b9:5b:d8:75:ae:7f:
3a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8E:19:DB:EB:6E:38:1D:1B:46:5E:DA:CC:85:F4:F1:C4:7B:22:22
X509v3 Authority Key Identifier:
keyid:B0:70:13:46:BA:D5:5D:F7:F5:DC:81:8B:BB:BC:FB:B7:DB:10:70:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:98:f7:06:f1:8c:99:d8:43:a6:ad:b2:db:08:55:b2:36:fa:
34:32:c5:af:cc:82:74:ea:ca:30:ec:f8:88:89:21:43:7e:13:
b5:ef:ce:44:19:64:55:6c:58:dc:26:51:53:be:ab:ac:46:69:
d6:26:92:95:29:c8:c8:60:35:65:6c:3a:7f:42:cb:19:8d:61:
9a:e3:73:70:8b:d2:dc:f3:bd:3f:12:5b:04:1f:c3:23:d2:8b:
6f:94:fa:a1:94:af:25:98:7e:23:e9:eb:c7:5e:28:1b:72:16:
ae:8b:10:cf:9f:86:aa:08:7a:b7:0b:2f:f6:76:2d:25:83:b0:
2c:47:f1:6a:d5:85:6b:29:4e:7f:ed:e2:76:ab:ca:0a:b4:2d:
86:c6:11:46:1d:b0:bf:2e:1d:f0:fb:1e:09:20:d9:76:63:36:
4d:ad:be:bf:29:61:d7:c3:70:a1:74:c9:22:8d:f6:b0:3e:ed:
b2:45:f2:00:a9:d0:2b:52:d0:f3:7c:07:cc:37:fd:36:0b:e9:
eb:8d:8d:5d:1b:cb:22:37:30:ce:33:12:75:2a:bb:df:e4:62:
31:51:ed:72:da:82:f1:68:10:30:6c:bb:0d:1c:3d:c7:12:3f:
ae:a3:c8:fd:7a:d8:17:13:90:a1:94:62:7e:d7:f4:0c:b3:ad:
ae:bc:3e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:28:05 2025 by rpki-client