Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
File: cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft (raw, json)
Hash identifier: 2Ge5kIVxm9I3dMkW6TDQV5NErQWiLXNQ5TE32CZb2pA=
Subject key identifier: 44:F4:0B:1E:3A:11:8B:43:3C:BD:D6:C8:34:9D:CD:9C:B4:68:80:BC
Authority key identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
Certificate issuer: /CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Certificate serial: 019848C03B103A0BC1FF445C0CC209B1BAC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
Manifest number: 1606
Signing time: Sat 26 Jul 2025 22:00:14 +0000
Manifest this update: Sat 26 Jul 2025 22:00:14 +0000
Manifest next update: Sun 27 Jul 2025 22:00:14 +0000
Files and hashes: 1: 2tI0pPHAMAIk_osuAaaPnbBYiYE.roa (hash: Y+gWUa2jjd6N+7XsleK0WmIL5jH60gWVDj3pYUgybgk=)
2: cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl (hash: +GFzSssdM2lpePwsgu2ALeQNjUMl+31hNaQITyr97b0=)
3: fs0ZmJI91FgrAyS_qaO4SZnCnx4.roa (hash: ycybeagUIzrtezPLqz+FSenm/c5GMC1YyzGUnHiNwd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:3b:10:3a:0b:c1:ff:44:5c:0c:c2:09:b1:ba:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Validity
Not Before: Jul 26 22:00:14 2025 GMT
Not After : Jul 27 22:00:14 2025 GMT
Subject: CN=44f40b1e3a118b433cbdd6c8349dcd9cb46880bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6c:85:61:ff:3f:6b:d6:0c:a0:6d:16:22:5f:
70:d1:04:11:ee:c2:cc:bf:c2:fd:e9:f4:06:60:a0:
89:1c:b2:0c:92:5b:f4:c1:2a:bb:3d:e6:71:45:61:
9a:36:ab:5e:a0:10:eb:01:9b:3b:9c:75:43:1b:35:
b0:38:01:3d:f3:19:b0:c8:6f:60:8e:f8:31:87:de:
5e:db:d5:e2:e6:50:1b:4c:5b:c5:cf:04:71:9c:af:
c7:48:e1:61:ef:c2:4b:c4:8e:32:e9:39:f9:a2:67:
a8:fb:b4:75:db:49:2f:42:1d:60:2a:60:d0:14:76:
90:74:26:51:36:24:1f:63:c5:05:8d:c0:c9:c5:54:
f7:88:a7:51:6a:ae:2e:a7:1a:f1:fe:44:b1:42:28:
2d:c8:ef:8b:b6:6d:d3:24:14:a5:72:f5:d7:7e:07:
4b:82:a8:de:a9:a9:df:f5:bb:48:a3:85:5b:81:87:
27:97:7d:5d:fb:06:4b:f6:7d:50:ae:43:9e:13:5d:
24:a3:51:ec:9f:b3:c3:be:f8:11:00:35:5e:12:18:
85:2d:6f:3c:ee:10:ce:96:05:46:4b:09:b1:fd:12:
50:3a:a0:8e:df:33:19:27:2f:43:26:aa:f2:cc:45:
50:fd:24:2c:86:00:53:e4:21:cd:30:37:9b:60:54:
ba:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F4:0B:1E:3A:11:8B:43:3C:BD:D6:C8:34:9D:CD:9C:B4:68:80:BC
X509v3 Authority Key Identifier:
keyid:71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d4:a0:8d:dd:e3:36:85:4b:fd:ea:6a:00:fa:52:11:b7:da:
ee:dc:26:d3:13:9e:e9:0e:05:ae:ee:49:bf:58:73:27:58:d8:
6f:6b:30:06:de:fe:f6:1d:12:97:d4:18:a9:c2:9d:41:4d:b2:
4d:b9:e8:e9:c0:5a:e9:01:55:6b:bc:9b:91:de:c8:55:ee:c7:
a9:66:99:f3:57:eb:b8:5b:86:96:41:6e:c8:10:a3:57:c5:1e:
1e:ee:23:3b:ad:63:37:72:7b:91:31:2a:73:5b:e9:eb:b7:f9:
4e:49:7a:6d:33:2f:6d:c9:d2:d0:5a:4d:1f:d2:98:7a:0e:64:
e9:26:4f:c5:cf:09:1f:e5:12:06:62:84:af:b5:24:0b:7f:a3:
4e:2f:39:75:f2:86:60:38:51:ac:4b:02:cc:e3:9f:ab:f3:96:
2c:6a:4a:1e:d3:ab:55:82:1e:e0:a4:e1:94:b6:68:0e:86:af:
22:4f:71:2c:c8:de:31:a3:30:2f:7a:cc:a6:fd:39:ec:f6:e6:
21:22:78:82:4a:a3:28:8c:80:2e:cb:ef:fa:fe:68:a7:d8:6e:
4f:27:86:fd:f4:3a:28:e4:07:08:ef:16:03:ef:fa:23:3c:47:
b3:55:d4:1b:21:cf:40:23:3b:49:df:91:29:f4:2c:a6:7c:c2:
f8:fa:0d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:41:44 2025 by rpki-client