Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.mft
File: t1ELZRv73wnISGqBNiAABb77SX0.mft (raw, json)
Hash identifier: PWs9Q876/DOEwnT2en4DeMdaSyYc/G2rsfDj+1tDEIg=
Subject key identifier: 90:8D:60:A1:1E:2A:6B:1C:48:68:41:5A:5B:0B:18:11:68:89:CD:7E
Authority key identifier: B7:51:0B:65:1B:FB:DF:09:C8:48:6A:81:36:20:00:05:BE:FB:49:7D
Certificate issuer: /CN=b7510b651bfbdf09c8486a8136200005befb497d
Certificate serial: 019846D238C0BDE2ADD961367764B54631FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1ELZRv73wnISGqBNiAABb77SX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.mft
Manifest number: 0C7F
Signing time: Sat 26 Jul 2025 13:00:38 +0000
Manifest this update: Sat 26 Jul 2025 13:00:38 +0000
Manifest next update: Sun 27 Jul 2025 13:00:38 +0000
Files and hashes: 1: Jiow1t-Pk1ZOtI6Aqeh1RaSW3p4.roa (hash: DYR6jlP51Fl43ZL0B6qnJrGHJROyqbTA9KSRORts0Uo=)
2: t1ELZRv73wnISGqBNiAABb77SX0.crl (hash: skUJM+qiaSf8BTxma9IYcv4SJWKsUq8bJPPRQXpxWsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1ELZRv73wnISGqBNiAABb77SX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:38:c0:bd:e2:ad:d9:61:36:77:64:b5:46:31:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7510b651bfbdf09c8486a8136200005befb497d
Validity
Not Before: Jul 26 13:00:38 2025 GMT
Not After : Jul 27 13:00:38 2025 GMT
Subject: CN=908d60a11e2a6b1c4868415a5b0b18116889cd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8f:10:96:2b:da:3c:a5:85:eb:80:d8:52:ba:
69:af:4d:3e:22:b5:09:d7:9f:83:65:e9:e7:b9:7b:
ed:99:10:65:de:91:72:1b:dd:3e:fa:6d:c3:ce:72:
94:8d:84:95:29:2e:15:ef:2d:d5:8d:67:98:0b:ce:
5f:bd:ce:d9:6a:83:f7:f9:85:f6:3d:ea:c1:11:42:
ae:be:fd:fd:69:32:b5:4e:dc:56:e1:00:6c:b2:4f:
8f:50:49:c0:53:fe:35:88:70:43:88:c8:b6:ec:4f:
65:9f:0d:2c:81:bf:f4:bf:a4:ed:21:dd:7e:f6:83:
9f:9a:1c:49:ff:0c:11:18:e4:81:7e:64:14:98:c3:
8b:ba:e6:e5:ae:4c:6b:13:13:a7:28:31:dd:93:23:
0c:fc:16:66:6d:b7:80:50:0a:80:7f:61:71:b9:7c:
91:21:8a:6c:6a:7c:3c:58:a4:74:59:18:ca:4e:e7:
99:6c:4b:50:08:75:5f:96:da:f2:8b:4e:85:d6:88:
22:f6:44:54:47:3b:40:03:01:f2:f5:a2:89:fa:e8:
1b:0c:d3:f5:17:cc:5d:fa:c4:5a:f3:8e:5b:49:95:
ff:75:25:db:cb:46:7a:5c:d5:e5:69:86:e1:97:be:
f8:0b:b8:64:ff:ef:59:40:71:40:a8:b9:0a:1f:a1:
4b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8D:60:A1:1E:2A:6B:1C:48:68:41:5A:5B:0B:18:11:68:89:CD:7E
X509v3 Authority Key Identifier:
keyid:B7:51:0B:65:1B:FB:DF:09:C8:48:6A:81:36:20:00:05:BE:FB:49:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1ELZRv73wnISGqBNiAABb77SX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ce:69:e5:44:ca:b9:dc:a1:3f:4f:64:30:26:53:26:41:74:
8b:3a:a4:80:df:2d:31:86:fc:15:4a:d7:10:46:c4:eb:50:1a:
4d:fb:15:79:75:55:df:4d:2d:66:bb:d4:d5:a6:ac:75:a6:6b:
2d:80:34:1d:e9:a7:e2:61:53:19:98:de:31:d6:e9:8d:54:c6:
a3:59:d4:30:0f:72:d5:47:d6:1a:08:d3:7c:09:1e:30:d0:5c:
f9:95:fb:06:56:38:46:3d:7e:be:8f:f3:c6:ea:4f:aa:27:e8:
97:ac:84:c3:b5:d6:9d:ce:96:59:5a:4e:97:90:25:86:cf:ab:
43:5a:6a:97:74:e7:5b:34:ee:aa:45:78:46:e0:b4:c2:c4:33:
bf:e9:58:f8:85:5c:2d:be:b7:5a:a1:ac:b0:8a:00:24:2d:c3:
83:9c:1a:86:8f:24:68:dd:80:84:8a:13:bf:f8:a0:37:d4:60:
be:68:81:d5:49:a4:99:f4:54:19:bc:2a:65:b2:fa:53:3d:e9:
89:a3:71:aa:86:6c:d1:82:67:8e:d4:71:fa:b5:b1:74:6b:1a:
37:8f:a5:cb:c5:f7:9b:11:01:4d:16:37:d6:36:d9:47:d6:30:
c7:0c:69:cb:5a:33:f8:b7:b1:f1:7c:15:06:a1:cd:c0:a2:2c:
2f:42:cc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:24:45 2025 by rpki-client