Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
File: d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft (raw, json)
Hash identifier: uTR89iKAD79K5rIcsaBJnkw98JhAC0HysJwoRQD/KDM=
Subject key identifier: CC:38:87:7F:9E:64:D1:AA:6B:AA:1D:ED:A6:3E:4C:33:EC:A0:18:6E
Authority key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
Certificate issuer: /CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Certificate serial: 019923A04EFF6707C458C3632894B5EE6D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
Manifest number: 11A0
Signing time: Sun 07 Sep 2025 10:02:12 +0000
Manifest this update: Sun 07 Sep 2025 10:02:12 +0000
Manifest next update: Mon 08 Sep 2025 10:02:12 +0000
Files and hashes: 1: FVyOtMSkw-0Vg62ACMKcfYtFTZg.roa (hash: 19Vo/+e85FEDOozBk9ulyjhvlWCZUEMrSObfkurwei4=)
2: bGBL61Pb5C5jQn9lTt04zeAidWQ.roa (hash: tcI+1ZDPgb0dQJ/mWEWyrYgZXPfZZ/VnqvsqqlmCxEY=)
3: d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl (hash: ilZhzikUFyUkFaZeOVvrweIiBjzTzwQ5UYA3X++4ZIU=)
4: kfH4Hfcw2DAA4uCH3S-0NOLLLIE.roa (hash: +ssFltk6eznRSfe1ZkEA/pnveLfuNyk/DPp5U5STMlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:4e:ff:67:07:c4:58:c3:63:28:94:b5:ee:6d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Validity
Not Before: Sep 7 10:02:12 2025 GMT
Not After : Sep 8 10:02:12 2025 GMT
Subject: CN=cc38877f9e64d1aa6baa1deda63e4c33eca0186e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3e:71:41:7c:4a:51:df:f2:0b:b1:ca:6b:29:
ac:08:8a:47:d3:4c:4f:6f:65:60:b5:78:01:84:ca:
e8:5b:52:ba:b5:4e:eb:fb:ac:8c:86:f6:b4:bc:fb:
5f:8b:cf:bd:44:f1:9a:97:d8:b7:0b:dd:21:72:cb:
3c:73:e1:e3:4a:8f:dd:32:87:88:f3:78:6c:66:f3:
59:9f:77:b0:98:86:eb:d9:90:28:47:85:de:7e:7b:
9e:f7:36:62:e7:f1:90:a7:15:ed:b6:98:45:00:70:
b1:49:86:a5:23:ff:a4:0d:23:31:87:55:d5:c3:8e:
18:2e:4e:05:78:ea:a6:7c:7c:60:08:e2:1f:27:1f:
34:99:22:e7:35:87:81:ed:3b:0b:4c:ed:48:3c:fb:
74:c8:0e:47:97:08:7d:a7:17:51:92:1a:63:e6:b5:
6d:7f:0e:1e:3c:11:95:86:d2:86:ef:5a:9c:20:35:
2c:a9:3f:8c:b5:ab:ef:58:0a:19:07:41:f7:a2:37:
47:89:2f:a5:58:26:72:fa:d1:12:a4:f2:9b:ac:e9:
9b:17:8f:e5:e8:fa:c3:0b:bb:58:c3:2c:7d:80:43:
7c:1e:02:33:50:0f:63:4a:62:8c:d9:01:97:87:d6:
e1:1a:b3:ed:c5:ed:c6:4e:c9:d9:76:47:84:82:f6:
43:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:38:87:7F:9E:64:D1:AA:6B:AA:1D:ED:A6:3E:4C:33:EC:A0:18:6E
X509v3 Authority Key Identifier:
keyid:77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ea:63:bb:b7:d6:ae:2b:44:ae:45:b7:0a:55:73:00:14:53:
b9:e8:c7:c4:5a:65:28:77:65:a2:d3:34:2b:c8:f4:9e:e7:fb:
a5:9d:7a:c0:5c:cc:73:12:2d:f5:63:18:9e:52:fe:98:a1:e5:
34:5e:7d:04:cc:47:ac:96:e7:50:fb:6a:c9:b0:d0:11:d0:39:
ed:cd:90:32:8f:4c:e1:ff:7d:0c:52:bd:96:61:08:b0:4b:16:
68:a0:ef:e1:1d:24:cb:e8:73:c6:fa:13:08:7e:68:84:22:e0:
3d:b0:5f:4e:40:22:fb:c5:ae:7a:7a:b1:22:dd:79:12:a4:64:
7c:ce:d8:98:c1:ba:a5:b2:cf:3d:d7:ef:b5:41:e9:72:fb:68:
26:02:99:74:25:ca:49:3b:44:b1:ce:04:9f:ae:5a:df:b9:6a:
d4:98:b6:b4:93:6c:b7:8a:5b:38:32:7b:0e:9d:12:1a:f6:eb:
a8:00:4b:65:b9:23:ba:ef:03:57:6e:d2:33:e2:51:87:79:00:
13:d3:49:e7:23:c5:8d:5a:61:3b:c4:37:d6:90:77:4e:51:3d:
56:d5:5d:9d:c9:ee:5a:fb:52:8e:00:c9:7e:2e:f4:6a:99:ae:
98:8f:df:66:95:6f:97:53:24:c6:91:0e:14:ef:36:7b:3d:da:
96:12:4e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:06 2025 by rpki-client