
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier: IcI5rPFKL+KSaYxd9BvOo+BwqEcomYX1wvaTRRD0VbI=
Subject key identifier: F6:F3:ED:58:9B:87:D3:FA:50:0D:E9:02:88:80:D4:20:48:1B:C6:59
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial: 01984AAE8D6E21A12876B10F895CD940B8D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 07:00:10 +0000
Manifest this update: Sun 27 Jul 2025 07:00:10 +0000
Manifest next update: Mon 28 Jul 2025 07:00:10 +0000
Files and hashes: 1: HdvygVOruYbTXwlr1NLClydlYqo.roa (hash: sMi8mYGDSncYX0REgUe1LpnyiMZD3xdRzWB6T1gaSas=)
2: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: 3Ay0F3Ss5M4uOwOYzdXh4Y/fI/0Hx5G2EPBmk+MshTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:8d:6e:21:a1:28:76:b1:0f:89:5c:d9:40:b8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Validity
Not Before: Jul 27 07:00:10 2025 GMT
Not After : Jul 28 07:00:10 2025 GMT
Subject: CN=f6f3ed589b87d3fa500de9028880d420481bc659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e2:8c:3b:a9:af:90:df:2a:7a:09:f7:a7:f8:
bd:36:a8:1a:bb:ec:b5:67:04:21:f7:73:21:2e:62:
9e:84:b2:51:a1:9a:cf:dd:8f:0a:f7:f2:38:be:aa:
f9:1d:52:33:1b:30:ba:e5:7c:c0:70:10:c6:4c:3d:
aa:f5:e8:b0:a5:c7:b8:ef:b3:47:48:1f:8c:e3:da:
72:43:c4:41:6f:73:b5:31:35:15:03:1f:47:8b:46:
ba:ca:5a:a9:68:81:ff:df:2f:c8:fb:1d:ed:67:c6:
e5:ee:c9:2b:b9:32:d1:a6:13:47:e7:ad:15:dd:7c:
50:8a:a0:cb:b8:49:42:f6:6c:be:8c:2f:10:c7:a2:
9e:70:35:b7:1f:cc:81:3d:6c:87:7d:a5:f2:bf:d5:
f1:b9:fc:94:6e:99:6e:8f:dd:6a:80:2b:2b:ff:ad:
8d:83:34:5f:7b:36:de:fa:50:22:c2:8d:3e:67:68:
de:f9:07:37:9b:10:fb:ce:ab:5f:1c:a2:e9:48:5c:
dc:b6:89:2c:90:8a:d0:f8:58:27:a4:2b:f6:13:a5:
05:60:72:b6:ff:28:d4:39:5c:c8:26:e5:46:7e:ad:
ed:02:40:91:21:16:3e:29:49:9a:be:60:59:8a:56:
01:05:5e:41:8d:b6:b3:42:26:25:98:bc:5a:24:f8:
fe:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F3:ED:58:9B:87:D3:FA:50:0D:E9:02:88:80:D4:20:48:1B:C6:59
X509v3 Authority Key Identifier:
keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:3c:aa:44:ce:26:54:49:c0:d5:b8:4c:79:f8:24:a0:12:2e:
3f:b6:ce:61:9a:3f:bb:66:a3:1a:00:9c:ba:2c:69:48:fa:89:
3d:61:0f:ca:bd:d1:50:3f:ae:95:e3:22:2c:75:81:18:1d:ab:
07:52:63:84:d8:7e:64:a5:e5:05:99:6f:89:22:31:68:c4:7e:
de:d1:27:b0:c3:79:14:83:4c:68:b5:8f:23:e0:4f:2f:bd:da:
43:ac:6e:14:28:cf:04:2e:15:f5:de:7e:fc:6b:08:b0:08:90:
19:7f:62:b0:fe:54:95:00:97:ab:c5:ef:91:0e:8b:52:44:69:
b3:3d:b8:c5:ac:0a:74:78:7b:75:a6:d3:27:c4:a6:e5:d6:04:
ac:8f:1b:fb:eb:82:84:4b:a8:2e:07:dd:99:39:9b:32:8d:37:
17:2b:6d:40:6c:0a:f6:ba:5c:3c:91:65:d8:2b:9a:8d:fd:7b:
d4:b3:fc:d4:45:ba:4a:59:48:51:05:96:58:a7:d7:7b:65:0b:
10:92:6d:9a:52:00:38:62:df:7c:f2:9d:3c:6e:a7:b2:1b:ee:
8a:20:47:bf:66:84:e6:d3:76:57:41:9e:ca:29:65:75:d7:b3:
1e:22:31:34:58:6e:99:61:98:cf:12:35:49:96:e5:07:07:a5:
78:1f:f9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:44:02 2025 by rpki-client