Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
File: t8QKdH46wazGEaTEA7YAc5jn158.mft (raw, json)
Hash identifier: dgy5Rajk1tzha8pLUTtJyw+4II7u/uMBb3X6i6Dw0P4=
Subject key identifier: B4:1C:42:A5:8D:7C:01:0C:EF:22:7C:4D:28:DF:48:20:91:4B:68:78
Authority key identifier: B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
Certificate issuer: /CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Certificate serial: 019922C39D5DD5014CCA01B3837EC00525BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
Manifest number: 1680
Signing time: Sun 07 Sep 2025 06:01:09 +0000
Manifest this update: Sun 07 Sep 2025 06:01:09 +0000
Manifest next update: Mon 08 Sep 2025 06:01:09 +0000
Files and hashes: 1: 4k2m6oWhbCxHwu7ZoOs8FYwRSeo.roa (hash: 0X2CSeSS5EmJeG6XWlWGwSVUMGQ8gwE0QRYVBIvMpS0=)
2: t8QKdH46wazGEaTEA7YAc5jn158.crl (hash: 2lEjBwPd3LOg3NORtzfERRtpUQvW9/0M8ZnC16j98/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:9d:5d:d5:01:4c:ca:01:b3:83:7e:c0:05:25:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Validity
Not Before: Sep 7 06:01:09 2025 GMT
Not After : Sep 8 06:01:09 2025 GMT
Subject: CN=b41c42a58d7c010cef227c4d28df4820914b6878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:b6:ef:ae:d1:1e:e6:2c:ae:3e:c2:db:a2:
4c:9d:82:15:14:c6:a7:ad:86:35:66:b8:53:fd:44:
8a:46:e6:54:53:47:f8:f4:c1:aa:fa:cf:06:9a:02:
39:13:8c:4f:f4:a7:50:9d:04:13:6a:ca:87:fe:d2:
6d:39:23:c2:02:ee:f9:4b:10:6d:86:a0:32:6b:a8:
53:cc:79:bf:49:05:32:5d:be:3c:cf:09:3b:59:63:
fa:5c:24:de:82:a5:e6:26:c9:17:56:bb:12:3d:c3:
35:b9:d9:f7:bd:dd:6d:d4:23:cb:89:c1:ef:2e:3b:
6d:c4:63:c2:3e:73:cd:ce:fa:65:aa:f5:82:d3:ad:
87:c5:e0:ba:c1:ea:71:75:c0:7d:ba:c1:d9:bc:90:
a4:bb:96:4a:8a:e8:b9:e4:89:bc:4f:89:86:ef:18:
82:1a:08:d0:99:00:60:de:95:6e:8c:39:b5:69:7b:
02:3b:91:8f:80:fb:45:8e:51:ad:13:f7:09:9c:3d:
78:22:90:d9:3a:73:a5:79:7f:41:32:fa:bb:1b:81:
16:76:8c:26:d4:07:f8:53:b7:a6:b7:a0:c8:cd:08:
a8:f5:d5:10:9d:91:6a:90:2c:08:f3:a2:2f:19:54:
80:ca:59:55:96:4b:e4:88:93:41:df:2a:a4:af:13:
b5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1C:42:A5:8D:7C:01:0C:EF:22:7C:4D:28:DF:48:20:91:4B:68:78
X509v3 Authority Key Identifier:
keyid:B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:70:6e:2e:83:69:95:5b:f7:36:f3:89:20:4e:e5:85:ec:13:
21:54:6c:c6:c6:78:40:c9:01:73:18:40:60:ec:5c:45:60:84:
61:38:5c:0f:13:34:f1:e3:24:e9:2d:e1:ed:d6:e0:f5:92:40:
e3:a6:2c:a2:12:67:75:90:70:e0:31:ea:43:30:17:19:8d:ac:
5a:5a:a5:cc:bc:22:ec:7a:aa:71:d9:dd:a0:fc:10:cf:f8:c3:
9b:ef:f0:d6:0d:e0:b3:d9:8b:82:31:2d:dc:23:02:15:69:da:
33:47:9e:32:e5:aa:56:79:73:b8:25:3f:2a:3c:ec:97:64:67:
ab:4f:3b:86:06:12:4a:eb:a5:c4:37:9a:a7:fd:04:c3:36:43:
40:c2:cb:11:6b:c6:9f:b4:5c:d2:73:dd:36:5e:62:af:41:1d:
cd:b2:a8:f1:25:80:85:9b:54:22:a8:3f:76:0d:0d:f2:49:99:
35:a3:bd:12:c8:63:95:02:75:a2:d0:1b:a8:c6:2e:cd:74:81:
48:ab:c3:2e:07:7d:84:a1:00:6b:e9:a9:6a:f2:fe:f0:aa:93:
5b:d2:68:62:d5:36:8a:83:dc:e7:26:cf:50:22:50:33:a7:1b:
93:30:57:a9:13:65:f0:7f:4b:91:21:a1:64:db:f5:d7:7e:a9:
4e:0f:df:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:01:53 2025 by rpki-client