Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
File: 18pTroRCI2dXp4Bm5OIXM_dYQHo.mft (raw, json)
Hash identifier: SAvkrLznAQQ+t6B6dSeAYdfemIvP3kbQkw4NlGzYY68=
Subject key identifier: 9A:4C:EC:A3:D9:12:4A:28:2E:51:96:F6:42:8E:F1:5A:A7:20:FA:6A
Authority key identifier: D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
Certificate issuer: /CN=d7ca53ae8442236757a78066e4e21733f758407a
Certificate serial: 019923A03441E6DA9BE5A813B48AFE77BD9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
Manifest number: 11FA
Signing time: Sun 07 Sep 2025 10:02:05 +0000
Manifest this update: Sun 07 Sep 2025 10:02:05 +0000
Manifest next update: Mon 08 Sep 2025 10:02:05 +0000
Files and hashes: 1: 18pTroRCI2dXp4Bm5OIXM_dYQHo.crl (hash: dah5uEXO49aY5dFXI+NV1hjctcG/TKiKwpqIwqgl9Sc=)
2: 38s2EfLKTKzwDnKrug63iitVwN4.roa (hash: e5mS3BLPFSR7Y2uJcSkAUNlVQiD5b7eKpGpMN+urBn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:34:41:e6:da:9b:e5:a8:13:b4:8a:fe:77:bd:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7ca53ae8442236757a78066e4e21733f758407a
Validity
Not Before: Sep 7 10:02:05 2025 GMT
Not After : Sep 8 10:02:05 2025 GMT
Subject: CN=9a4ceca3d9124a282e5196f6428ef15aa720fa6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dc:1b:65:2e:ee:0f:a3:f0:f4:d8:c5:09:c7:
35:40:96:3e:e0:31:a7:f4:0c:4b:6d:14:44:ab:c8:
52:45:f0:02:87:d7:8e:56:ad:46:32:77:66:37:2b:
20:68:74:b4:a9:b7:1b:ce:2c:05:88:12:5f:13:48:
57:36:8f:2e:7b:90:80:79:70:6d:29:40:19:66:91:
3f:62:e6:cc:4c:aa:2b:71:a1:4b:f8:ff:c3:82:11:
54:93:98:a1:b9:cf:cd:e5:65:89:0b:a4:45:36:3d:
8f:c2:da:c0:0b:8e:ea:9a:6e:dd:f0:db:0e:04:7b:
a7:f4:fa:ab:54:79:83:74:7f:01:21:24:fb:c0:bf:
41:c5:24:5c:c9:12:63:67:74:5a:71:f1:6e:7f:b0:
91:c1:a2:28:d3:32:bb:19:9b:3e:c8:1d:b4:4b:f0:
e7:ed:69:73:3e:00:43:c5:4e:b5:23:6e:96:a9:79:
e7:c6:67:96:6b:5e:5d:91:36:2a:f2:53:d1:44:bb:
b5:b8:ca:b4:0d:19:1c:9f:5d:fe:fe:d8:6b:01:e7:
55:f5:2a:1d:0d:aa:1b:14:e9:26:20:6c:6d:7f:8a:
25:f6:36:41:c6:f6:40:ec:07:19:27:70:30:e0:c4:
cc:20:cb:e4:3b:13:8e:23:49:8c:b3:bf:20:c9:0b:
0f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4C:EC:A3:D9:12:4A:28:2E:51:96:F6:42:8E:F1:5A:A7:20:FA:6A
X509v3 Authority Key Identifier:
keyid:D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4c:f5:7d:10:29:79:e6:ba:45:ee:73:52:f7:36:8b:a1:35:
34:bf:8e:9a:41:41:e9:bd:8c:ed:19:95:88:e2:f7:5a:b0:22:
c5:91:6b:28:d0:f3:1a:3f:02:1a:8b:ea:9b:43:87:a7:92:da:
a8:ce:44:00:60:31:7c:a3:94:66:1b:9e:7b:c7:d3:dc:57:ef:
76:f3:69:54:85:52:0c:dd:f6:95:7d:ac:a5:5e:50:70:5b:f4:
63:6e:ef:36:f7:d9:f5:86:74:89:4e:ef:b5:36:c3:2c:97:7b:
61:51:f9:81:96:98:ea:e0:5a:a1:12:54:1e:91:28:c9:47:e8:
d9:23:5f:64:7b:5c:52:81:af:4c:93:50:6d:d1:38:87:53:1a:
fc:27:7d:a3:cf:ce:77:e5:cd:3a:5b:82:01:27:4d:29:31:14:
ed:93:a6:fe:b1:b3:6a:56:30:f2:4e:72:18:9f:56:d6:b4:fc:
ee:7d:5b:2b:a3:1b:ae:66:67:76:a5:a3:c0:52:9b:68:de:42:
43:8f:a0:56:25:c5:14:63:b6:9e:c7:3d:b9:27:c4:f9:7e:a8:
1c:3c:07:a5:f9:16:4e:ab:c8:27:bd:62:eb:35:fa:ec:6c:5f:
81:f6:01:c2:52:60:ff:79:7e:66:aa:7d:53:d8:f4:4c:65:55:
fe:f6:05:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:36:17 2025 by rpki-client