Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
File: drTT6JcTIsZNegRYurdFqJreTeU.mft (raw, json)
Hash identifier: LhzcfMljMbyXqyDxH9FVXJFWYY53X3CVcfHnSfsvX/o=
Subject key identifier: F2:09:0B:F3:65:63:98:7D:47:E6:1C:CD:3E:5B:87:20:71:B7:D7:2B
Authority key identifier: 76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5
Certificate issuer: /CN=76b4d3e8971322c64d7a0458bab745a89ade4de5
Certificate serial: 0198477682ACAD866E2BE7D908446B0CFA9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
Manifest number: 0283
Signing time: Sat 26 Jul 2025 16:00:05 +0000
Manifest this update: Sat 26 Jul 2025 16:00:05 +0000
Manifest next update: Sun 27 Jul 2025 16:00:05 +0000
Files and hashes: 1: ZYX1Qhws2vdCl-u2QXbSsdG6zUs.roa (hash: 1Yas72g5IvT1A6G5CoyKopOr6adZNC8arOgG6BPNF2I=)
2: drTT6JcTIsZNegRYurdFqJreTeU.crl (hash: rSaK97sJJLyZhSGHiJwOIcwJeSql7Tkx2DR3Eg0zXlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:82:ac:ad:86:6e:2b:e7:d9:08:44:6b:0c:fa:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76b4d3e8971322c64d7a0458bab745a89ade4de5
Validity
Not Before: Jul 26 16:00:05 2025 GMT
Not After : Jul 27 16:00:05 2025 GMT
Subject: CN=f2090bf36563987d47e61ccd3e5b872071b7d72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:d1:2b:f1:d0:28:44:ff:57:d4:f5:ef:ae:
bf:69:95:25:3b:4d:7f:da:5c:4b:16:f5:8c:63:37:
7e:31:2b:bc:f3:79:c6:85:2c:67:3d:55:cd:fe:ec:
5c:f6:40:62:a6:bf:f1:db:35:21:76:28:21:a4:2c:
85:1e:94:c8:2a:1b:f5:69:3a:2d:79:27:ff:45:e2:
3a:fe:0e:7e:8b:3b:3d:44:cf:23:98:e3:94:48:f0:
24:9f:5a:31:e5:62:9c:c6:fa:a9:2d:ba:1f:f8:1e:
db:5d:fd:85:b4:4a:13:19:47:2b:8d:37:43:4f:19:
57:44:c9:36:6c:a9:fe:dc:5f:d3:3a:79:4d:84:c6:
9f:1b:8b:57:4b:5e:ea:61:6b:f8:14:5f:12:9d:b3:
ed:f0:38:a9:95:13:26:5f:d5:a2:31:ee:22:13:0c:
0d:e1:d0:62:6d:f8:6a:5e:0a:0e:3d:5b:50:7d:49:
35:10:db:1e:7a:18:09:18:66:e8:0f:ca:c0:15:e3:
90:a2:bc:07:94:e6:15:fe:2f:59:cc:2e:cc:cc:24:
06:d6:c3:cb:67:fb:46:9f:87:f3:c7:14:9f:7b:4a:
b0:96:77:73:08:a1:89:6e:64:cf:2d:56:61:05:df:
e3:66:6b:4d:a8:6d:26:e6:a6:4b:5b:1e:5c:43:12:
da:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:09:0B:F3:65:63:98:7D:47:E6:1C:CD:3E:5B:87:20:71:B7:D7:2B
X509v3 Authority Key Identifier:
keyid:76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:a6:dd:71:25:76:64:1d:f8:a0:ac:03:c2:86:60:cf:49:6a:
cb:cf:d5:24:36:64:f4:1f:f2:1e:0f:69:ff:f2:d8:47:4d:06:
2b:42:10:ef:f3:5c:78:b1:b1:51:7e:f3:da:50:94:27:3b:f6:
d7:32:19:b1:a3:e1:e3:47:fd:aa:f9:71:35:e4:cb:a4:ea:59:
82:4f:65:97:dd:66:e8:f9:0b:27:ff:0f:22:4b:b5:25:74:88:
c4:cb:84:71:f4:82:26:aa:8a:b8:c2:07:91:27:6b:72:0f:41:
12:00:0a:41:99:a4:1b:97:87:bc:f9:9b:7d:10:b9:e7:64:b5:
85:a9:fc:87:53:6b:82:4c:27:63:79:4d:63:7d:02:b9:81:fa:
97:d9:27:f6:7d:76:2f:19:16:9b:12:f0:f8:da:8e:fa:1a:5a:
6f:68:c2:43:41:df:52:d0:4f:f0:8c:b3:da:bd:6d:65:ae:d6:
f2:56:08:2b:62:5e:42:7e:ac:81:fa:95:43:b9:17:ce:b2:3b:
d5:ea:dc:5a:55:27:7e:87:59:5f:ac:f3:7e:12:13:90:4e:3a:
ad:26:4c:42:36:91:9d:cb:4d:8d:6b:87:39:19:b7:8e:7b:4e:
bf:65:ee:eb:69:c1:96:83:56:c4:e6:78:28:6a:9e:9d:2b:d1:
23:8c:91:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:05:59 2025 by rpki-client