Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
File: c271cwBQxyD4x5BGbri4pI7750k.mft (raw, json)
Hash identifier: dkPaRpxUGfkfFovigCBa21HvTtF5OJvrQLPB+DWZunk=
Subject key identifier: 7B:4A:B8:17:C2:3B:AF:5A:89:B5:14:BA:28:69:64:9E:4F:5E:93:08
Authority key identifier: 73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
Certificate issuer: /CN=736ef5730050c720f8c790466eb8b8a48efbe749
Certificate serial: 0199228C7B407B9A3E289882F5CCF6A213C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 05:00:55 +0000
Manifest this update: Sun 07 Sep 2025 05:00:55 +0000
Manifest next update: Mon 08 Sep 2025 05:00:55 +0000
Files and hashes: 1: U_EXFi0_K3LJzzOGjdd59sx5hhk.roa (hash: InLExGG/VRrfIxx+5P3BkdCZ9LeR0AfhLMm27/EtRM8=)
2: c271cwBQxyD4x5BGbri4pI7750k.crl (hash: fARsIjLItat9NwdHagVWmNmW9DbRJtEOBTC6WzHNlH0=)
3: fpEtFF5tn_F6AS7ORtQk_79zOLM.roa (hash: ecIVoFs7h4RkV6LSwkMSO/FMl9ZMbuW6Wd5+RjOOYhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:7b:40:7b:9a:3e:28:98:82:f5:cc:f6:a2:13:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736ef5730050c720f8c790466eb8b8a48efbe749
Validity
Not Before: Sep 7 05:00:55 2025 GMT
Not After : Sep 8 05:00:55 2025 GMT
Subject: CN=7b4ab817c23baf5a89b514ba2869649e4f5e9308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:cb:40:93:14:f5:fd:0c:cc:98:aa:a3:e3:
9d:6e:43:23:c2:8b:59:be:50:a3:4c:db:75:6f:b1:
a1:86:39:d7:78:e7:65:96:07:32:fc:67:27:00:6a:
7c:e8:5a:60:75:29:ac:df:b8:56:60:0d:65:61:8a:
4d:47:a1:06:91:f5:36:36:96:a2:bd:48:fc:4f:56:
6c:f0:79:15:c4:04:c8:87:e5:38:b3:2e:3f:69:37:
13:31:85:e9:bb:8f:5b:30:1a:52:71:8b:52:3b:b9:
63:f2:d6:dd:84:64:62:e2:49:c0:35:d6:a3:79:ca:
04:af:b6:f0:86:e6:86:df:b4:de:6b:92:95:e5:8b:
15:9b:b1:70:cd:9b:16:74:22:6c:6a:5d:6a:c5:57:
a9:45:38:9e:14:b8:1f:48:33:f8:df:2e:67:8e:7f:
9a:8d:26:ff:a0:ea:22:25:4b:aa:04:7d:7b:62:d2:
8d:61:f5:6d:86:e6:db:6d:b1:e2:85:61:b1:36:4b:
00:8c:03:a2:46:cf:b3:3d:bc:33:c2:b3:b0:c1:76:
96:cb:c9:ae:5c:1e:6c:04:d5:a4:76:d1:3a:ac:4b:
3d:cf:05:e9:d4:24:c4:18:24:c2:60:98:3c:03:ab:
08:6b:0f:61:68:0c:35:48:c4:b7:b9:ab:9a:55:c0:
ba:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4A:B8:17:C2:3B:AF:5A:89:B5:14:BA:28:69:64:9E:4F:5E:93:08
X509v3 Authority Key Identifier:
keyid:73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:26:35:0b:09:d6:4b:23:7d:7b:b2:8f:9c:e1:d9:11:02:10:
25:b2:9b:ed:9e:7b:0c:be:1a:71:69:fe:a7:24:0f:eb:37:19:
c8:18:78:08:56:68:a2:a2:7e:b9:18:03:45:89:5d:cd:cc:5b:
c6:07:60:a4:2a:89:b6:50:8d:62:b7:c7:03:43:76:95:dd:95:
e9:0e:e4:a4:1b:d1:94:7b:48:68:2d:2f:f4:ae:a5:aa:f4:e7:
7b:a0:a1:2e:6c:26:ae:a2:11:32:22:33:11:97:58:12:15:c8:
22:9f:8c:bd:d4:ec:bf:c4:a7:a3:3b:68:2f:5e:1f:34:b6:b8:
e7:3b:2f:a4:cf:94:aa:e2:a6:ea:ee:89:da:df:e4:25:ce:c6:
09:37:64:9b:04:2e:0d:44:40:be:9d:fa:21:47:72:5b:c4:3f:
5d:2e:19:9c:2a:2e:81:50:bd:c3:b4:b8:e3:2f:31:fe:bb:88:
55:df:88:46:70:5d:66:e4:99:ad:a4:ca:99:aa:e0:bd:14:ae:
e2:49:a9:77:3c:fe:77:8c:8a:b7:fa:b6:67:84:65:c6:bd:5c:
6f:7b:74:ad:77:f5:35:92:48:71:aa:4d:aa:96:53:5c:c9:8a:
28:bc:3d:6e:7a:dc:d5:d1:ad:db:20:d4:ec:16:be:44:84:67:
e8:8c:0a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:48:38 2025 by rpki-client