Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
File: pTi7DCtB76jDsCBk68UvupLCNiY.mft (raw, json)
Hash identifier: DuKaKG2AnMf4imRJtk/XB8naiZrFcI4xD0/5qgWAerI=
Subject key identifier: B6:75:8C:72:40:12:BE:28:24:0E:BF:F6:57:36:06:F0:7A:AF:94:0B
Authority key identifier: A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
Certificate issuer: /CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Certificate serial: 019848895A8AAFCEB60C4183023B169EAD3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
Manifest number: 11EB
Signing time: Sat 26 Jul 2025 21:00:17 +0000
Manifest this update: Sat 26 Jul 2025 21:00:17 +0000
Manifest next update: Sun 27 Jul 2025 21:00:17 +0000
Files and hashes: 1: DSyQL16gVyPuINIFuwqbtqDaLcQ.roa (hash: 4sWGWWc2NQ2B2oMwbMVn1NZgZ93cb0NJnNIgTj1CBqg=)
2: ldlRi9PG7yaWe_OISm5PxetZ-fs.roa (hash: zAtX/bKzY97x7lzgIkaYD8HV9V6BCkypXN+jO7OstUg=)
3: pTi7DCtB76jDsCBk68UvupLCNiY.crl (hash: +0Ujg+lC4POgFOIoeX4AkO8lWNuVjvMhbhPR78r7UnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:5a:8a:af:ce:b6:0c:41:83:02:3b:16:9e:ad:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Validity
Not Before: Jul 26 21:00:17 2025 GMT
Not After : Jul 27 21:00:17 2025 GMT
Subject: CN=b6758c724012be28240ebff6573606f07aaf940b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:de:e5:73:c0:34:81:85:05:1a:f7:1c:d9:
e8:8c:ee:73:5a:32:d3:5a:34:31:37:ca:9c:0c:55:
b8:e2:67:42:fc:6c:92:11:e8:26:06:8d:da:b6:82:
c8:f5:c4:f8:ee:dd:36:a6:16:b9:52:58:12:6d:02:
72:62:8a:11:31:3d:aa:2e:fa:e0:73:b6:77:b6:6b:
41:12:3c:7b:5d:01:e7:6f:d9:d9:78:77:53:11:81:
06:c1:03:84:ca:32:a0:b6:1a:5c:a7:1b:2a:09:ed:
c4:8a:3c:0d:f8:dd:26:51:20:c9:08:0c:d6:b1:07:
3a:d1:83:52:7e:a3:c4:2e:d7:86:47:ae:56:4e:f0:
15:3e:19:1a:3a:80:ce:c2:b7:8e:62:33:77:d1:a1:
a0:7e:38:2c:be:69:d0:15:c3:bf:03:a9:17:21:8b:
61:c4:e7:11:d9:52:17:15:52:26:74:ac:0a:01:5c:
aa:ee:d0:e9:fd:29:4a:5d:33:d5:81:07:8e:4f:37:
e6:c6:31:26:84:b6:5e:66:b1:b5:af:14:5f:7a:04:
f0:07:1d:f4:c8:2f:ee:de:34:78:27:05:3e:9d:53:
fc:93:7b:a7:06:a2:ce:17:36:91:1c:20:30:c6:ec:
ab:b3:f0:14:07:1d:eb:b4:2e:fc:91:dd:f5:07:a0:
2d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:75:8C:72:40:12:BE:28:24:0E:BF:F6:57:36:06:F0:7A:AF:94:0B
X509v3 Authority Key Identifier:
keyid:A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c2:b1:ca:ba:d5:f4:ad:4c:40:02:3f:05:9f:ef:e1:bd:25:
c5:5f:9d:3b:35:eb:70:b0:a7:ca:bf:78:c5:fe:0e:49:a4:28:
6f:bc:bd:c7:55:d3:11:5c:aa:c7:69:a5:d1:52:c4:7f:cc:7b:
dc:cb:ef:b5:58:7e:84:e5:6c:2d:38:f4:0f:ae:d3:e2:ae:9c:
cb:eb:6f:2f:27:99:1f:0f:62:3d:10:d9:e0:a8:be:ca:42:15:
66:52:f3:bd:d1:7f:44:32:d8:71:48:f7:4d:66:b5:08:80:88:
18:8c:66:fd:be:0d:16:fa:8f:94:06:f6:e3:a1:c4:37:7b:68:
bb:8f:a1:7b:f0:48:44:19:7e:12:7a:1b:aa:73:93:cc:95:ae:
d2:10:e9:d8:89:e4:bf:8b:fa:5b:2d:47:1f:a8:8d:28:dc:d5:
79:a2:7d:82:f0:a6:4a:0a:82:5c:90:0c:b7:94:eb:f4:65:08:
6c:7c:72:92:89:78:f9:6b:69:01:aa:1b:50:41:0d:e3:7e:7d:
ba:31:b7:ce:cb:d1:ac:e9:ce:bf:76:72:93:76:33:0b:18:9c:
e8:ce:7b:c9:36:7d:a0:d0:e4:59:70:53:79:a9:eb:c3:54:0d:
c1:e6:9d:e6:e2:be:f8:9f:ce:ec:48:9b:3a:30:e0:e7:ca:44:
fc:e0:d9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:24:48 2025 by rpki-client