Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
File: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft (raw, json)
Hash identifier: Hhiv2HQYtaEFY3FzLa9JF3d5NwHN51bjkTuRP3QvKYA=
Subject key identifier: 82:C7:6C:38:3B:C6:30:F5:EA:75:AB:DF:A6:CD:2E:8C:16:00:11:37
Authority key identifier: D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
Certificate issuer: /CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Certificate serial: 0198548DCD8F23AC1435AB972044461F184A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
Manifest number: 07F0
Signing time: Tue 29 Jul 2025 05:00:36 +0000
Manifest this update: Tue 29 Jul 2025 05:00:36 +0000
Manifest next update: Wed 30 Jul 2025 05:00:36 +0000
Files and hashes: 1: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl (hash: PHjUitAMWQ0zLeBdr8XHdSVakcc5eAExzQxTCFbmDqQ=)
2: 1Ae_yfQHDKRNnQDwOPRaMQCngyQ.roa (hash: +NTp7Q1pqxAx2whls9B3Uy3bHdVw5DZ30CWN9JliAkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:cd:8f:23:ac:14:35:ab:97:20:44:46:1f:18:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Validity
Not Before: Jul 29 05:00:36 2025 GMT
Not After : Jul 30 05:00:36 2025 GMT
Subject: CN=82c76c383bc630f5ea75abdfa6cd2e8c16001137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3c:54:07:84:7d:77:4f:a6:b9:13:5c:5a:d5:
82:e0:7a:38:cf:36:e4:ab:d3:a3:55:0c:b0:f3:73:
ff:45:f7:eb:f4:5b:11:c2:2d:0f:92:59:a5:f4:0c:
29:fe:3a:3d:8a:34:9d:b9:78:dd:2a:67:ad:7e:bf:
13:9f:97:24:fd:ab:3b:66:0a:76:7d:bc:e1:1d:3d:
4a:37:b6:1e:d7:78:74:ae:a4:b3:74:8e:f9:58:aa:
d9:df:f2:3e:81:51:90:98:70:3a:02:7f:7e:f9:eb:
14:a0:88:a6:9c:d5:35:1e:0f:10:61:83:cc:fb:fa:
94:40:66:d1:e8:98:31:dd:40:2f:15:8e:6f:ca:0b:
9f:4c:88:20:32:34:6b:47:b1:c7:56:a2:37:8e:1a:
94:53:a5:d7:66:b7:75:9a:ec:9d:b2:3b:70:5e:f4:
25:5e:e6:43:fe:a5:ac:ad:2c:c2:7e:08:2e:cb:25:
46:82:e7:3b:71:50:56:49:16:c8:97:2d:af:68:02:
b6:5d:b2:9a:3f:1f:51:14:5d:b2:63:17:e1:af:8d:
c5:91:17:ec:41:e2:37:4e:71:4f:b8:04:eb:4c:32:
a3:3c:4a:82:f7:a6:cc:77:5f:a6:76:4e:a9:eb:e0:
d0:a8:87:ed:b5:b0:65:d3:34:d9:c6:8a:b5:6b:ba:
58:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C7:6C:38:3B:C6:30:F5:EA:75:AB:DF:A6:CD:2E:8C:16:00:11:37
X509v3 Authority Key Identifier:
keyid:D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:45:9c:03:34:d7:e0:20:c0:ec:37:32:45:b0:e8:6e:55:dd:
c0:f2:b8:b0:55:ad:f5:d4:37:71:d6:e9:90:6b:6d:e5:a9:31:
f2:e0:5c:45:20:1f:d2:7d:d4:a0:d4:c5:d3:e9:df:18:6d:c1:
25:67:5b:c0:12:bc:c1:25:c1:bc:e3:9f:b4:92:e9:64:da:8d:
1d:79:8c:a8:8e:c5:48:02:98:74:65:35:3b:a3:eb:37:fb:9e:
dd:3f:13:f4:8f:66:0b:b8:ef:e5:82:1b:63:97:73:6d:db:9c:
6f:97:c6:bc:6e:a4:1f:82:0e:06:81:e7:4b:4d:bd:83:0a:b5:
22:61:ba:33:70:d7:7b:9a:60:66:5d:e5:1b:18:e1:0f:d6:3f:
a2:74:34:a4:41:8b:d7:56:61:92:78:4f:de:e9:6e:c5:bd:35:
58:35:b0:45:93:27:40:17:19:cd:9b:04:85:bd:9a:75:32:0a:
73:88:65:61:4e:74:25:7d:8c:f7:bf:8f:1f:3f:1e:50:d0:ec:
e0:53:80:23:08:0c:61:3c:6e:9a:6a:f8:36:da:da:ea:d5:bc:
9b:b3:20:61:63:04:c9:fe:cc:84:03:96:e7:bc:0e:13:39:b0:
e2:89:ca:02:1e:e7:06:d9:e4:81:af:dc:84:43:12:c5:20:37:
77:2d:f3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:37:03 2025 by rpki-client