Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
File: cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft (raw, json)
Hash identifier: d+RJk2gt6G2srryw+z0TB189zq8KyzSe6GrqKxyLhUQ=
Subject key identifier: 06:16:82:AC:7C:E1:62:3D:8C:C4:C3:2A:37:16:AE:61:69:E2:A5:19
Authority key identifier: 71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
Certificate issuer: /CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Certificate serial: 019857FD018C4F81A160EFAE1898E1EFB84E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
Manifest number: 0E8F
Signing time: Tue 29 Jul 2025 21:00:55 +0000
Manifest this update: Tue 29 Jul 2025 21:00:55 +0000
Manifest next update: Wed 30 Jul 2025 21:00:55 +0000
Files and hashes: 1: Y4BycvpgIPFrj5lhsii_AUvYAWw.roa (hash: brKO8LRrExe011Bv/UP5eEIq/IhdQ+O1vYEiLB6elCE=)
2: cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl (hash: vdB8G13a5C6Wgw6cXfonO+esHI5Vs0HHEnLofmLnB2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:fd:01:8c:4f:81:a1:60:ef:ae:18:98:e1:ef:b8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Validity
Not Before: Jul 29 21:00:55 2025 GMT
Not After : Jul 30 21:00:55 2025 GMT
Subject: CN=061682ac7ce1623d8cc4c32a3716ae6169e2a519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:9e:23:e7:4e:93:46:50:6a:2e:f6:70:ec:
df:4e:bd:bf:a0:37:6d:9f:34:66:94:86:ef:f1:35:
50:b1:aa:97:0f:99:46:55:b6:4d:94:8d:15:10:35:
50:f6:2a:a7:8c:4b:99:d8:36:66:d2:40:98:e1:f1:
d5:d8:59:75:51:e3:4c:28:84:cd:00:b3:48:04:d5:
33:eb:d5:c8:c1:1b:90:22:95:e0:42:f7:88:da:bb:
6b:49:88:1f:c5:6b:a8:26:15:33:a2:c9:54:56:82:
4e:6b:56:e8:45:88:d9:d9:ed:3f:e6:86:68:33:bc:
aa:8f:b3:b7:4d:96:69:8b:97:9d:d8:09:93:f6:33:
9d:9a:a2:00:77:16:d9:37:c7:be:1f:ad:25:55:3d:
a5:84:3f:4a:10:8b:b0:87:03:59:19:5b:97:9e:f0:
2b:ac:ef:9b:12:20:81:3f:01:e4:1a:1b:00:0c:fb:
bc:ca:e0:e0:ea:4d:81:c8:6c:60:cb:8f:dd:47:08:
42:d9:fe:46:5d:74:96:2b:ce:2d:a9:b1:ee:b4:fc:
d8:2d:c4:a1:6e:58:96:bd:99:13:62:3a:cf:45:9a:
0e:b4:92:c0:cf:d9:2b:04:78:37:a7:fe:4e:67:cb:
18:a1:10:46:76:f3:b6:19:73:9e:c3:ed:3e:08:c5:
53:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:16:82:AC:7C:E1:62:3D:8C:C4:C3:2A:37:16:AE:61:69:E2:A5:19
X509v3 Authority Key Identifier:
keyid:71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ca:a3:f8:7f:be:80:7a:c7:5e:73:6d:b9:94:99:63:ab:69:
dc:4d:37:de:e3:37:00:77:a1:79:16:83:9b:26:40:81:02:4a:
b5:bb:82:3c:38:2d:6a:8d:e9:1b:45:f9:46:30:08:75:c1:cb:
0b:b0:14:d7:a5:69:49:cb:b8:8c:54:eb:df:d7:a0:6e:74:23:
49:5d:56:3d:94:07:c3:86:e2:4a:23:d5:22:8f:40:88:b0:31:
dd:39:7d:a0:1a:9e:61:ca:b6:cc:04:23:cf:a1:e2:b1:cf:31:
03:51:84:55:04:21:87:26:bc:35:5b:7b:6f:1e:9c:9a:7b:01:
05:05:79:1e:ee:d1:c2:f2:43:b8:34:3d:a1:de:c5:be:99:70:
2e:c6:83:6b:e7:71:56:45:3c:97:32:f0:86:80:f8:93:f7:89:
8f:ad:b3:f5:07:50:9f:19:11:05:fe:35:fc:e4:12:32:c9:46:
12:80:97:2d:89:df:8a:5a:14:e7:23:ab:18:56:ff:56:61:08:
f9:79:cd:f6:fc:1b:92:31:4b:bb:44:1b:45:7e:5b:ac:31:07:
cd:57:c6:05:24:d6:98:87:5c:1a:d1:ab:3e:ae:4f:1a:36:2f:
8d:3c:ed:39:32:e8:b2:ad:ab:f2:39:e9:69:ff:2b:00:0b:19:
64:ec:86:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:29:02 2025 by rpki-client