Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
File: 77RcySOXjBokve6WzHs683OG0qg.mft (raw, json)
Hash identifier: WuGg87Ce7DIEK71CvotB/LSE0Mljn2D4EqwXkT8vdsA=
Subject key identifier: F1:17:4F:AC:03:EE:74:1D:2F:55:34:1F:B1:85:FE:3A:8B:E0:CD:34
Authority key identifier: EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
Certificate issuer: /CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Certificate serial: 019849D31D8D5BA9F61EBAD6C96D62BCB22F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
Manifest number: 0DA3
Signing time: Sun 27 Jul 2025 03:00:29 +0000
Manifest this update: Sun 27 Jul 2025 03:00:29 +0000
Manifest next update: Mon 28 Jul 2025 03:00:29 +0000
Files and hashes: 1: 77RcySOXjBokve6WzHs683OG0qg.crl (hash: 5F/aFTtOB+feH36ezXleFVDh3TyxAwbfbTmff3f5cG0=)
2: ONW_HHb2ZjsySF4n5zNLufP_Ugo.roa (hash: Fs9suOzCDzlX3MVkt67omPbuhLWfHekY4xcrsMfgW7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:1d:8d:5b:a9:f6:1e:ba:d6:c9:6d:62:bc:b2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Validity
Not Before: Jul 27 03:00:29 2025 GMT
Not After : Jul 28 03:00:29 2025 GMT
Subject: CN=f1174fac03ee741d2f55341fb185fe3a8be0cd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:73:be:39:3b:59:f3:f7:5d:73:8f:3d:9b:
22:a6:2a:13:ed:2c:70:91:08:5e:7a:ff:37:ff:8b:
ab:82:c9:d8:b5:1c:d5:7b:c3:7a:88:a2:13:49:a9:
f6:0c:bb:a1:f6:c9:07:71:b4:86:d4:ff:4f:05:bf:
44:02:d0:18:52:20:56:cb:39:df:19:76:00:01:c6:
70:d8:3a:ea:b5:89:d7:73:49:1c:ea:41:2b:c7:18:
cb:8f:94:0e:35:f6:be:6e:ef:03:bd:4e:54:7d:ff:
a0:3c:37:50:6f:f8:82:03:32:80:c3:02:ab:ac:fa:
eb:d4:a1:b0:05:c3:06:f5:87:a3:f5:95:bd:95:93:
99:a0:23:a9:18:74:0e:34:bf:42:8e:be:77:31:43:
e2:a0:5f:a8:62:3b:3f:96:62:1e:e9:b5:bf:17:f7:
70:ce:3f:52:5a:b5:de:8b:14:4a:a9:df:d9:f5:9c:
75:dd:ba:67:5d:55:04:f1:89:93:32:2d:e9:42:53:
1e:c5:9e:6d:f9:e2:7e:6b:ab:fd:b4:01:f7:17:bc:
4d:a7:b9:35:a0:40:a8:ff:7d:21:5f:35:b2:9f:59:
53:71:63:fd:ed:91:b2:46:f2:ee:63:e2:6c:e7:3e:
65:79:c0:04:9b:40:c4:b4:19:13:e1:b5:82:5f:a1:
a5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:17:4F:AC:03:EE:74:1D:2F:55:34:1F:B1:85:FE:3A:8B:E0:CD:34
X509v3 Authority Key Identifier:
keyid:EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6c:8f:d9:4d:60:0f:bc:ee:c0:b6:31:a5:6a:78:e8:1e:34:
33:19:5e:d0:08:0b:43:1e:21:b3:1a:a4:f9:ae:0e:aa:c5:b8:
12:09:95:fb:ba:d5:1d:63:18:d0:ed:23:17:c8:7e:47:d7:54:
2b:20:40:5d:8d:3f:e7:1f:db:dc:93:c0:ec:1b:73:ae:40:3c:
de:c1:0e:fe:b3:5e:a9:51:a8:50:a5:44:82:8a:de:32:ff:7b:
20:33:d7:a9:2c:0c:0b:0b:e9:f6:43:4e:5b:5c:ee:42:9e:54:
dd:08:84:f6:12:3c:bb:65:d7:25:b2:fd:dc:74:51:5d:14:5a:
06:72:d9:74:ef:be:f0:b1:85:d2:fd:49:ae:7d:1b:a9:93:ae:
b5:49:7e:ca:ec:f0:04:c0:06:4a:99:79:e8:c8:9a:19:bc:3e:
55:f4:51:11:6b:ed:51:36:de:e8:dc:17:0f:f2:43:53:59:a4:
41:60:52:2f:59:b5:d1:41:cc:15:f9:3f:f3:85:2a:6a:0c:36:
06:df:69:1b:34:f2:71:a5:2a:e8:55:18:74:ac:e6:bf:38:64:
29:b8:0e:e2:4c:f1:0c:fa:c9:af:58:82:d6:f6:b6:e4:94:b6:
7c:43:cb:ac:12:b1:99:22:56:51:19:8b:61:c8:17:e1:8a:49:
db:59:91:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:26:24 2025 by rpki-client