Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
File: t1RlKp6YkUWgWfeIg9U26SxDtT8.mft (raw, json)
Hash identifier: 0/jltMN2CJkr03z+zF1sSkYb4ZqG2BO7XkuhPUuNZ/Q=
Subject key identifier: 83:8B:8A:F7:01:8C:BC:58:CA:0F:8C:AA:29:E6:57:19:69:7A:C4:02
Authority key identifier: B7:54:65:2A:9E:98:91:45:A0:59:F7:88:83:D5:36:E9:2C:43:B5:3F
Certificate issuer: /CN=b754652a9e989145a059f78883d536e92c43b53f
Certificate serial: 019849667DEF85EADAC0DD14E1DE14C35989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
Manifest number: 94
Signing time: Sun 27 Jul 2025 01:01:50 +0000
Manifest this update: Sun 27 Jul 2025 01:01:50 +0000
Manifest next update: Mon 28 Jul 2025 01:01:50 +0000
Files and hashes: 1: 5Dk0AIyQ8366dMD1Y4_Uei8F_xA.roa (hash: zRbpvOB6g3fcUQ2lDKrBbTaTLHRrCOPhGnLFNdn6z9I=)
2: t1RlKp6YkUWgWfeIg9U26SxDtT8.crl (hash: zUqxgstn5ikZcB6L7eFu0PDeg1QgLHn73WLRu2Po0hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:7d:ef:85:ea:da:c0:dd:14:e1:de:14:c3:59:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754652a9e989145a059f78883d536e92c43b53f
Validity
Not Before: Jul 27 01:01:50 2025 GMT
Not After : Jul 28 01:01:50 2025 GMT
Subject: CN=838b8af7018cbc58ca0f8caa29e65719697ac402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0f:b8:b7:af:69:0e:89:6e:a3:13:a8:df:77:
fc:fd:5a:40:a3:20:03:80:b1:ed:23:bb:15:bc:14:
98:b9:17:84:b0:ab:c7:32:49:50:48:3a:c9:6e:c4:
7e:cb:a7:c2:87:c0:06:4f:2d:e7:fb:79:b4:88:43:
65:52:56:9f:c1:63:78:c5:86:c2:0e:dd:6f:e1:71:
00:9f:2f:a4:38:d8:ae:20:fe:ab:46:ce:36:9e:30:
85:d3:b8:3b:a9:31:fb:20:35:7a:89:a9:a6:1a:fc:
f2:01:b3:32:c8:af:5c:43:c3:23:f8:66:67:4a:a5:
ec:9b:d3:25:6f:1f:37:ee:61:04:52:3a:67:6f:3b:
49:4e:62:40:af:c6:65:be:b6:4c:f3:c5:21:b9:a9:
fd:d5:63:a6:eb:30:1e:79:be:ec:5a:03:99:d7:b2:
d6:e0:d6:ef:d9:c3:98:b8:cd:a0:80:fc:f9:7e:f9:
7f:54:28:a7:eb:ba:32:ad:9b:50:cd:d5:ce:45:54:
d1:79:c0:52:52:ce:b0:27:8a:fa:56:33:15:e6:27:
d1:17:f2:fa:72:8f:82:dc:45:7a:78:6f:4f:e5:dd:
7e:42:a3:16:44:58:d8:11:98:c8:e6:64:4f:7d:7d:
21:87:d2:04:d7:01:19:40:e9:f3:c2:61:cd:06:bf:
e5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8B:8A:F7:01:8C:BC:58:CA:0F:8C:AA:29:E6:57:19:69:7A:C4:02
X509v3 Authority Key Identifier:
keyid:B7:54:65:2A:9E:98:91:45:A0:59:F7:88:83:D5:36:E9:2C:43:B5:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8a:8f:ab:a1:73:43:49:13:83:ef:8b:0b:1a:14:e6:bc:4b:
4a:55:af:7d:90:ff:d1:02:91:65:7b:23:5f:f8:ff:bb:e5:02:
80:1a:62:e3:97:0c:b7:65:42:77:f3:2f:0c:e2:68:68:42:2f:
91:34:b2:f8:2f:2c:49:3b:16:16:91:62:91:bd:29:08:cd:b7:
44:a9:1c:cf:32:4a:89:1f:89:fe:10:97:02:2f:8b:52:b5:50:
3c:5e:a8:75:22:f1:4b:be:bf:51:8e:6c:a6:bb:19:f6:b6:06:
3c:85:14:3c:5d:66:4d:32:c8:b1:9f:66:f3:55:88:4b:c4:5a:
f4:8a:fd:60:85:9e:3a:a9:d9:48:88:78:ae:0a:a1:58:79:5f:
41:cc:e8:70:e8:91:b6:b7:e1:cb:6d:47:3f:c8:79:5d:14:95:
9e:e9:9e:58:7a:d9:77:4b:43:00:73:7e:53:e3:b5:b5:ec:e1:
83:9a:1b:7d:86:b7:56:0f:68:e5:c0:06:b5:95:3c:ff:6b:9b:
55:78:20:f6:5a:02:f3:64:5f:d8:fd:d0:e1:cf:51:ed:2e:82:
ed:2d:7b:d8:e2:cf:21:69:40:46:e8:0b:22:10:34:26:b4:bc:
38:64:7b:d4:fe:93:1b:cf:92:ce:98:41:ac:51:a4:46:7a:43:
d0:1b:22:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:45:20 2025 by rpki-client