
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
File: 08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json)
Hash identifier: RqG3WczVU5glRmjAa+R2M/NXQOcJvflEQzJyR7pDUrA=
Subject key identifier: C9:4D:F9:04:13:43:F9:F5:4C:1F:5C:A4:71:C4:8E:6C:90:B5:9A:5B
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 0198466428BE1423DFAA18FD9B3865263A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
Manifest number: 11E7
Signing time: Sat 26 Jul 2025 11:00:25 +0000
Manifest this update: Sat 26 Jul 2025 11:00:25 +0000
Manifest next update: Sun 27 Jul 2025 11:00:25 +0000
Files and hashes: 1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: Esisul2ziyUUJ91rIy11K5ZNp89sMCjAoa5VbJ4w4MU=)
2: 0H1Z8N5wGt3dSjqDG8bowD-Ttng.roa (hash: oPSp0ubsi2iqvVhAG7FKsfv+UH3h4fdTyPyVMxry6Iw=)
3: 7cGpErFojxZQKCSeJeJ8U-ucjfw.roa (hash: u8HNSCh1+MNiLey93QoDDaHwFmVThoOReQEndhAwPeo=)
4: JR5xcAQWVgTPGyjPg7XJgFbWGnU.roa (hash: 4C25vRmgSuVzjJ8c0h/sdLRJbeJ7vJx3vVEJHRg1ZU8=)
5: YQaxTK7FAj_2FFDFWnq-j0TF5R8.roa (hash: J+sfrqDRaIaNCnrB/qidc2XHG3Pcd1LgS59q0souwmY=)
6: lJFoGwOfjYG7bpWJkltu5e79TPY.roa (hash: a/JvmbooIi2RUBJmFiHrsUi1IesqwE85tvSq7Xkrm58=)
7: nAU_2VpM5SccaGQsl0YkIDwDC1w.roa (hash: LkSzGNi0v1t7wdhC/pLyKhtEY4pQXgh7tGdjsi4l0Ig=)
8: t-vvyyJncvAAfAa96YEzMwSH7gE.roa (hash: +EAIODGI0gSrFAD6b3Gzh1imFWAdsumE5Q8Vo1ZApM4=)
9: w_kbWva8bPy_BJIaV4ykob78GrA.roa (hash: E/+pwYk30W429Hx1ACBcwVtYRPMkzzJrjllRBSavTZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:28:be:14:23:df:aa:18:fd:9b:38:65:26:3a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Jul 26 11:00:25 2025 GMT
Not After : Jul 27 11:00:25 2025 GMT
Subject: CN=c94df9041343f9f54c1f5ca471c48e6c90b59a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:31:8e:1f:b4:07:b7:0c:27:0f:2c:73:35:ec:
d1:83:e3:31:fb:43:ad:de:54:37:24:aa:1c:fe:0e:
e5:c3:5e:53:6e:a8:ec:4b:11:49:fe:cd:6c:49:25:
50:1c:54:48:3d:5f:64:00:1d:78:d4:49:66:3e:72:
39:08:b7:c3:da:a6:a0:9a:df:97:bc:c5:c8:57:43:
eb:44:cf:f4:71:de:01:c9:b0:e8:09:52:b6:b9:55:
36:cb:95:42:f1:65:04:5d:a2:fe:f1:9e:45:a4:7f:
d2:e1:8a:6e:dd:e3:1d:82:43:55:51:ab:bd:82:e9:
b9:74:8c:a2:51:8b:58:70:17:a1:68:b4:f7:9b:cb:
0e:94:b3:14:2c:0a:ee:6c:62:85:12:c9:85:3c:ed:
f6:43:6f:1a:ee:5c:cb:69:49:e4:81:ba:f9:88:49:
de:1f:58:cc:60:31:e1:26:d3:34:6c:0a:ea:d5:9c:
ca:5e:f4:5d:ea:da:25:97:79:e8:83:a6:40:50:71:
1e:ad:99:51:25:d4:5e:dd:f2:d8:e6:8d:dc:94:e1:
ef:72:93:e6:c1:fa:87:a3:1f:75:2f:d7:29:a3:bf:
8f:cc:54:5e:5f:e2:07:80:8f:77:af:99:92:62:07:
3d:bc:7f:97:b8:d4:97:e8:77:9e:76:00:9d:62:b2:
a4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4D:F9:04:13:43:F9:F5:4C:1F:5C:A4:71:C4:8E:6C:90:B5:9A:5B
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:82:47:16:bc:ad:e5:b9:db:75:0e:d2:0e:f3:b4:3f:81:3c:
85:4e:86:82:21:e1:d2:57:b6:5a:74:c5:64:0e:d3:5b:ca:4d:
12:90:75:a3:ca:bd:eb:0e:fc:23:e7:57:1e:5d:94:92:a1:1b:
76:14:79:50:59:a1:3d:7f:1b:08:80:4a:79:78:f6:83:7b:e0:
58:66:44:ca:ad:05:76:60:1b:a8:2c:41:71:be:7b:97:82:d3:
3b:22:f0:43:77:79:6d:73:10:67:dc:ed:6b:3c:10:89:a5:dd:
20:fc:6a:7e:c7:86:79:6e:34:46:bd:d5:32:83:d2:a7:54:3a:
8d:58:96:15:fe:2f:4b:76:02:96:6c:a6:e3:20:59:71:df:ad:
03:e9:80:8d:5e:50:b4:06:a4:8c:75:60:52:d5:e9:ff:e1:be:
cc:de:6d:5a:80:ae:5d:bb:91:ed:06:70:07:51:1d:f8:6a:e3:
d3:b2:f3:1a:2a:f6:7e:32:d0:b3:66:03:c6:26:52:e3:ed:72:
59:e7:f7:cd:ec:7a:18:5c:de:b1:fd:8d:b1:4f:ae:84:0f:4d:
ec:b5:1b:83:63:ce:4f:d9:2f:3b:15:e4:53:25:80:49:30:2f:
89:7c:14:77:86:f4:52:61:52:09:90:d5:da:bb:6b:6f:4d:56:
d4:37:d5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:14:45 2025 by rpki-client