Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft
File: t3gT9sVnClhoatw9SVV0QpXdFBk.mft (raw, json)
Hash identifier: YanIgu6zv355ETG1h1e3E1CT6qQ7SD5dU2eSn4/+eUE=
Subject key identifier: FD:E0:10:95:15:C5:3D:0B:AC:00:29:5E:88:53:AA:DC:94:53:1A:06
Authority key identifier: B7:78:13:F6:C5:67:0A:58:68:6A:DC:3D:49:55:74:42:95:DD:14:19
Certificate issuer: /CN=b77813f6c5670a58686adc3d4955744295dd1419
Certificate serial: 0199221F4BC72462C5EB66C5DF23191B8D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3gT9sVnClhoatw9SVV0QpXdFBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft
Manifest number: 0F49
Signing time: Sun 07 Sep 2025 03:01:40 +0000
Manifest this update: Sun 07 Sep 2025 03:01:40 +0000
Manifest next update: Mon 08 Sep 2025 03:01:40 +0000
Files and hashes: 1: t3gT9sVnClhoatw9SVV0QpXdFBk.crl (hash: qeg+Cjh8/E9Nk5gZRSgCaHc97FvGIkDXgsegmoto1RI=)
2: xy0ayvCMPxVGUij5mpyeTNFKRNw.roa (hash: tXbOwwPUAQhZJRCjintnYpclKOHIFWoxy2lUX1RBhtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3gT9sVnClhoatw9SVV0QpXdFBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:4b:c7:24:62:c5:eb:66:c5:df:23:19:1b:8d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77813f6c5670a58686adc3d4955744295dd1419
Validity
Not Before: Sep 7 03:01:40 2025 GMT
Not After : Sep 8 03:01:40 2025 GMT
Subject: CN=fde0109515c53d0bac00295e8853aadc94531a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8d:72:b8:0f:e4:76:f8:af:f4:35:78:4c:e3:
18:af:56:f0:fc:aa:cb:51:11:49:fa:b9:7b:80:f6:
49:9b:e4:60:dc:db:5c:a6:73:5f:26:e0:f2:fc:3e:
f1:65:92:89:7c:fa:46:19:11:9b:fc:96:c2:e4:71:
68:98:21:51:2d:2e:28:ce:a5:bb:41:c9:70:2b:c1:
bb:62:55:03:a2:dd:53:b4:12:d4:82:7f:ef:20:69:
c1:7f:b0:b5:59:13:66:86:31:71:66:36:0e:fe:94:
0c:fa:b7:ad:8c:1b:4e:55:bf:b7:32:24:a4:08:cd:
bd:10:26:3f:62:e4:29:55:0a:62:71:56:77:29:c7:
86:a9:dd:1c:00:5c:7a:48:c2:f7:3f:6f:65:1d:a0:
7d:93:6e:71:8e:61:46:2a:34:dd:44:f4:3c:b8:b8:
0e:a4:ff:4f:4d:12:8d:8a:e3:5d:61:dc:fb:15:5a:
ec:36:40:bb:b4:35:95:c2:30:38:6d:ad:8f:af:55:
ee:8f:60:2e:81:ec:9d:69:8f:1c:bf:af:69:f2:3d:
cb:32:91:87:85:4f:1a:af:e4:4d:b6:68:44:fa:da:
d7:64:38:49:c5:6f:65:9f:27:75:34:bb:70:ad:06:
35:8e:18:75:36:2e:c1:f4:02:e2:ca:d5:95:1f:56:
e3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E0:10:95:15:C5:3D:0B:AC:00:29:5E:88:53:AA:DC:94:53:1A:06
X509v3 Authority Key Identifier:
keyid:B7:78:13:F6:C5:67:0A:58:68:6A:DC:3D:49:55:74:42:95:DD:14:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3gT9sVnClhoatw9SVV0QpXdFBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1a:a6:86:2a:79:18:38:9b:00:e5:de:4f:53:f9:68:25:9f:
5a:d0:73:7e:a9:dc:eb:a7:73:11:19:04:3b:25:8f:82:34:28:
76:df:bd:8c:1a:8d:90:f9:95:c0:52:33:ef:c6:e6:fa:82:cc:
f5:2b:ca:fc:74:37:f3:ea:d0:e9:fc:ff:a4:9e:96:2a:e2:4b:
5c:27:a0:b8:20:db:30:fb:ac:d5:e9:c0:23:95:4a:a2:49:7a:
01:82:12:25:8d:e8:ef:fc:a3:d0:32:eb:59:38:53:4c:1a:87:
a1:76:0f:f9:53:2d:11:b6:6e:da:7c:e2:4e:f5:3f:db:d4:65:
19:e5:17:67:f1:a9:7c:bd:a0:30:ca:8a:4f:8c:98:2e:ee:47:
53:3c:9b:e4:12:7c:84:dc:e6:9f:e8:6d:64:01:38:1a:70:84:
9a:c1:fa:18:5c:5c:43:8a:a2:31:e5:35:df:a4:16:4b:0e:0e:
8b:b4:72:13:f8:91:5e:62:7f:eb:e3:00:99:26:e0:0c:93:80:
88:3b:60:08:0a:bd:5d:30:32:11:a4:9d:5e:84:e8:a4:eb:98:
2f:70:69:99:1e:4e:89:8c:b8:c5:ae:83:dc:c6:39:d8:4f:f5:
05:ce:86:5f:10:31:06:05:f1:21:0c:db:b1:8a:b1:63:99:a9:
6b:3e:c9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:00 2025 by rpki-client