Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json)
Hash identifier: aFUCHuFA1dlrEf24eHj/5Wb202Z32eXvhtkT5l/7pCg=
Subject key identifier: 1C:FC:75:C9:33:9C:24:32:B6:44:06:21:1B:18:63:65:3C:A4:CB:C6
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 0198439A2323B5FB2BD29EA76F3905B947F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
Manifest number: 1337
Signing time: Fri 25 Jul 2025 22:00:31 +0000
Manifest this update: Fri 25 Jul 2025 22:00:31 +0000
Manifest next update: Sat 26 Jul 2025 22:00:31 +0000
Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: /pUt0y2bTp5zYdOoGDXi43uW9dHP1csUtL88OfdFrk4=)
2: ughB2qwCJjXq23HnnasoQDdXgE8.roa (hash: LImj3hNpOasXYHWcbm9URdJgBeEySrqqax18nJO4GMo=)
3: v0jeM-EK5U0lFswlXgsyLuIVWWw.roa (hash: M3nsb4FrAgnB7zU3prkNFU+S+Vg3EPSnI0a1Dxv4l5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:23:23:b5:fb:2b:d2:9e:a7:6f:39:05:b9:47:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: Jul 25 22:00:31 2025 GMT
Not After : Jul 26 22:00:31 2025 GMT
Subject: CN=1cfc75c9339c2432b64406211b1863653ca4cbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e8:f2:11:6e:44:60:d7:c1:4e:90:f6:86:82:
c9:a9:1e:7c:30:5a:9f:e8:f3:5d:4e:6b:dc:83:b9:
f5:8f:dc:52:24:a5:25:63:e6:60:cd:b8:10:36:cc:
91:af:5d:8f:ee:93:7a:47:8e:17:b0:d8:5a:f2:b9:
c7:02:9d:35:5f:ec:60:97:12:d1:b7:6f:65:ad:02:
32:59:59:8b:37:fa:3f:0b:4f:2a:dd:50:e6:39:4e:
9e:cc:8c:5a:a5:c3:a5:7c:c7:68:3a:a8:1a:ed:10:
4a:fe:99:c5:8a:53:2f:19:e5:66:20:02:fa:7f:f4:
7f:ae:6f:41:07:9e:2d:a9:3c:2f:c9:a8:d5:67:9c:
07:ab:00:92:1a:01:65:06:7d:fe:f7:93:c7:7b:73:
8a:bf:cd:4a:bc:05:b1:f2:76:d5:8e:35:8a:32:e1:
83:cd:46:a2:83:a5:b1:f3:6e:11:b0:21:0b:4f:8b:
ab:12:d4:4d:41:77:b4:33:a9:36:56:e3:b4:96:f9:
65:3c:89:c0:6f:d8:6e:b4:60:0f:12:d3:53:31:32:
1a:b0:13:04:da:a8:0a:73:c2:88:37:ef:48:2d:7f:
f9:72:08:7a:b4:26:ff:24:77:dd:aa:8d:2d:8d:26:
c6:97:2f:90:7a:91:f2:fd:c1:2e:7b:f1:9d:2d:31:
7c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FC:75:C9:33:9C:24:32:B6:44:06:21:1B:18:63:65:3C:A4:CB:C6
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:fd:36:d3:81:63:8d:cb:45:10:11:a5:b8:18:fb:af:ba:a9:
9f:8e:e2:26:08:32:19:7f:19:3f:b2:08:ef:63:12:a6:8f:df:
9f:19:93:d6:1e:a9:c6:fc:2d:f8:98:7b:9e:a1:fd:d8:71:44:
86:f9:e7:80:c4:d0:37:10:54:b6:60:cf:ad:dd:aa:10:d5:45:
c8:63:1a:e2:df:c9:70:14:9f:34:83:a0:7f:25:33:37:a4:22:
4c:61:39:92:19:17:35:c2:8d:53:d7:73:25:cd:4e:5e:4c:a1:
11:bb:5e:60:8f:73:3c:36:69:a3:85:52:17:00:34:93:a8:07:
cd:59:ad:0e:9c:57:ad:23:e7:99:0a:66:f7:25:35:33:1c:55:
33:86:19:e2:fd:9e:f7:e4:ef:f6:2d:6d:42:36:0f:13:f6:4b:
76:66:a9:c6:76:aa:68:26:38:f1:8e:c3:15:5e:44:23:4b:18:
e4:aa:f9:f7:e7:68:97:23:2e:f5:ce:8e:d3:fe:6f:0b:d4:46:
db:32:66:73:14:4d:f2:1f:38:d4:5f:97:42:69:b1:a1:29:1c:
88:19:9c:1e:ea:3e:57:2c:48:13:7b:d5:4e:66:26:32:66:ce:
2a:2c:1c:ea:28:0e:c5:16:40:c8:61:7a:b9:16:a9:c9:79:5d:
e7:fb:13:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:24:41 2025 by rpki-client