
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
File: a1Y13TgCFaA8kwfaViBsVms4o88.mft (raw, json)
Hash identifier: UmfjvF1SnpQi32LdxByWz172RH7WrfwOk+lRihQoP+I=
Subject key identifier: 7E:14:CE:13:76:0C:18:73:CD:1E:09:17:5B:D0:72:80:2F:80:9F:EA
Authority key identifier: 6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF
Certificate issuer: /CN=6b5635dd380215a03c9307da56206c566b38a3cf
Certificate serial: 019849664BB447157684BD6D849D9D0C4141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
Manifest number: 133C
Signing time: Sun 27 Jul 2025 01:01:37 +0000
Manifest this update: Sun 27 Jul 2025 01:01:37 +0000
Manifest next update: Mon 28 Jul 2025 01:01:37 +0000
Files and hashes: 1: a1Y13TgCFaA8kwfaViBsVms4o88.crl (hash: 0tdqE1vW+Fn54VBJ78suajdFrzSg/mKXsxnl2rpzyck=)
2: pXEOVL3s29ntjLGWnEad02SClcY.roa (hash: 5uijVm/LhBI/XgHLC1W0ZRQPeN6iEyHoyVbJwCUVIKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:4b:b4:47:15:76:84:bd:6d:84:9d:9d:0c:41:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5635dd380215a03c9307da56206c566b38a3cf
Validity
Not Before: Jul 27 01:01:37 2025 GMT
Not After : Jul 28 01:01:37 2025 GMT
Subject: CN=7e14ce13760c1873cd1e09175bd072802f809fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:a1:73:c1:3b:21:78:e9:7d:70:a5:05:ea:
54:dd:82:79:c4:f7:d9:9a:1b:8a:9d:5a:1b:97:de:
70:77:53:aa:44:4b:20:70:33:ec:a3:c5:74:4c:cd:
0a:70:13:3a:4d:79:63:d0:6e:e6:82:f3:56:6f:db:
73:ae:8f:d1:6b:00:ec:81:f4:02:6a:4e:34:0f:03:
d2:50:5d:30:e3:ae:d2:ad:51:a6:2c:bb:07:66:81:
40:90:a5:fa:d9:fc:f1:67:cf:9f:43:8e:5c:1c:e5:
d0:d3:ec:c3:de:01:75:fb:97:93:9c:5b:3f:87:93:
6e:01:3c:48:70:fd:f1:a5:1f:d5:87:43:42:4c:5f:
04:04:79:da:c8:f5:d8:7e:1f:e3:6f:2f:17:d5:bf:
11:08:1e:c4:38:a4:49:49:e1:f6:84:a0:c0:50:60:
78:0f:67:5f:e6:2e:0f:6b:63:e9:74:47:b2:42:13:
d3:7c:62:c3:8e:05:1c:6a:54:37:fe:d1:c4:b0:7e:
65:32:26:09:fe:e3:31:36:6e:16:bc:5b:1d:61:00:
6c:f2:59:3d:a9:92:ac:ff:80:c2:60:bb:e6:37:94:
e7:fd:76:75:af:77:9f:a0:21:fb:23:37:6e:a0:44:
58:db:d9:4f:17:23:03:08:8b:c6:2e:b0:d4:a4:ff:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:14:CE:13:76:0C:18:73:CD:1E:09:17:5B:D0:72:80:2F:80:9F:EA
X509v3 Authority Key Identifier:
keyid:6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:69:db:70:1a:03:81:fb:8e:e9:fb:5d:2c:03:3f:cd:42:66:
27:66:93:3f:62:ec:f0:a7:7c:e9:36:f7:86:40:94:57:e3:67:
50:45:72:96:ee:a0:38:2f:a0:ea:e7:c2:b4:61:d5:ee:eb:fa:
18:1c:92:87:85:c0:89:0d:97:1f:26:0e:19:55:17:4e:6b:43:
5c:17:c7:72:3b:c2:f0:24:a2:eb:a6:5e:55:96:dd:09:bf:77:
67:84:5e:e3:0e:45:85:eb:02:ac:7f:da:52:61:d4:e3:b1:25:
23:74:be:95:c8:74:37:ee:d6:c4:97:4c:ad:22:36:37:aa:f8:
b0:70:0a:94:f3:90:0a:48:f2:e1:a5:1f:46:1a:d3:06:c1:5a:
0e:39:f3:c6:e6:23:78:6d:38:09:82:ac:04:43:04:13:a1:2a:
fd:2b:03:59:e0:ab:d0:7e:66:2e:5a:93:6b:7c:bc:ef:ee:d1:
23:63:37:40:36:9b:30:7e:5b:34:e8:61:97:b7:cb:75:39:f9:
48:a6:39:14:1a:6b:54:9f:83:3a:85:66:5e:e7:fe:5f:52:54:
83:b3:e8:50:8d:d0:cd:9f:13:49:48:a6:f7:36:f8:ba:bf:92:
72:6b:55:45:e5:55:df:f0:0c:37:f5:ae:c3:35:0c:35:84:83:
4d:79:4e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:56:22 2025 by rpki-client