Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
File: _ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft (raw, json)
Hash identifier: CW22j2I/RTpS+BGWah3BzpNo+nPOfbID3tIwQwS0AaE=
Subject key identifier: 7C:4F:50:2C:2A:05:46:9C:6B:FA:42:6A:6C:0C:8F:13:9B:B3:04:F0
Authority key identifier: FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6
Certificate issuer: /CN=fde72d43f4c82b1146737b116197231830bf65d6
Certificate serial: 01984776B01A087F9C395BDFC177B366BAB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 16:00:17 +0000
Manifest this update: Sat 26 Jul 2025 16:00:17 +0000
Manifest next update: Sun 27 Jul 2025 16:00:17 +0000
Files and hashes: 1: NEbsKu77gYfpibY3_TC8dQH80XA.roa (hash: aeVQJbng3C7RHWncwne+AehQ3FDANQdssqp/Bjc9vag=)
2: _ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl (hash: reH917cJRZ7GVrobp4gwr1PwV9KlVvYrndmTyIPaBRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:b0:1a:08:7f:9c:39:5b:df:c1:77:b3:66:ba:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde72d43f4c82b1146737b116197231830bf65d6
Validity
Not Before: Jul 26 16:00:17 2025 GMT
Not After : Jul 27 16:00:17 2025 GMT
Subject: CN=7c4f502c2a05469c6bfa426a6c0c8f139bb304f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:ab:2a:dd:50:a2:b0:3e:74:a3:5c:f5:5a:
b5:2a:9e:e0:38:ac:20:c4:c4:8f:9d:ea:92:e2:1d:
e2:7b:6d:6a:9a:89:48:bd:94:c6:6e:be:31:d7:9e:
29:67:12:b4:57:ee:a6:74:4e:80:e4:c1:bd:12:be:
b3:e0:0c:c8:88:fc:dc:a0:c1:bc:5d:55:d9:bb:93:
6b:96:e3:2f:a7:c6:f5:3c:08:31:0a:9e:56:20:d5:
ee:e2:45:11:bb:83:17:ba:3c:3e:35:17:6f:e7:41:
b4:a0:a0:65:5c:06:a2:82:b3:e1:a6:3a:43:18:c7:
fa:d0:ff:51:b3:68:71:b3:e7:e8:cc:8b:77:d2:a0:
17:28:04:de:c1:eb:11:8c:70:a5:bd:e9:3a:dd:ff:
45:8a:74:69:c4:bd:a6:04:f0:a0:d0:f4:64:57:75:
02:ba:1d:12:84:28:92:47:ca:94:9a:fe:44:ba:f0:
a9:e8:fe:e6:a3:c9:a2:7a:fa:e6:97:f6:40:50:0d:
23:f1:32:a4:5a:3d:3d:75:e9:78:51:df:09:0e:58:
2d:2d:a7:ac:53:2d:4f:f7:af:5c:d9:cf:f4:22:df:
12:2f:2d:e9:25:db:2b:1c:9f:f0:80:2b:e9:e3:c1:
51:90:6d:e6:ad:8c:37:a3:d3:a3:46:70:d1:6e:5f:
c7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4F:50:2C:2A:05:46:9C:6B:FA:42:6A:6C:0C:8F:13:9B:B3:04:F0
X509v3 Authority Key Identifier:
keyid:FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f4:90:69:d4:62:c9:94:b2:d6:f1:4e:a8:75:26:65:dc:78:
cc:ab:7c:76:45:c2:7f:5c:9a:db:0a:b7:ab:01:2c:c9:f0:91:
65:4c:96:d0:d2:b6:34:a9:ea:a3:b6:de:f8:7d:59:ee:79:be:
e7:71:49:cf:f3:15:32:ab:c8:68:55:18:39:64:d1:37:a9:fe:
9e:70:2c:41:47:2c:5d:5d:2e:b8:7f:da:be:bb:7a:1a:22:4f:
ad:56:d2:b1:7f:79:21:27:70:97:c0:7d:a1:b5:ce:6d:c1:93:
27:71:8f:b8:fc:36:ba:c5:ac:3d:f3:75:e3:d8:14:6f:c3:a0:
c1:18:24:88:10:82:ed:42:cd:67:e7:3e:2a:89:bc:15:1c:0c:
98:ee:e4:d0:2e:f4:bc:82:77:ad:f2:ff:27:d2:b3:51:81:bb:
90:fe:26:c0:49:68:60:a8:c6:7c:98:34:e5:57:1d:01:ba:12:
e3:ec:15:eb:cc:ab:07:ed:29:22:61:2d:54:62:16:cb:41:da:
72:51:90:1c:3d:26:7c:10:20:c4:33:4f:7a:e1:41:22:a2:8d:
57:6f:83:2a:5d:6e:a4:f1:2c:66:ef:1f:45:51:fa:64:fe:42:
cd:e0:b8:27:16:59:ae:c3:b4:b9:31:ed:30:b8:c9:1c:4d:87:
43:0f:9a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:10:25 2025 by rpki-client