Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
File: t6x4DrIELIxXABtl7xVub1kxI5s.mft (raw, json)
Hash identifier: kdZz0Pu6RznwY8q0rFNItGz7RxvCqo8Hi7ywZG5PDyY=
Subject key identifier: 34:EC:78:D6:C8:9A:5B:22:E2:D0:46:78:CD:E3:09:06:DD:3F:65:AE
Authority key identifier: B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
Certificate issuer: /CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Certificate serial: 0199221E31857A8FE091BCE4D399AD63A0E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
Manifest number: 0F71
Signing time: Sun 07 Sep 2025 03:00:27 +0000
Manifest this update: Sun 07 Sep 2025 03:00:27 +0000
Manifest next update: Mon 08 Sep 2025 03:00:27 +0000
Files and hashes: 1: jop9I76IYZwBELNaT-ZQAcQ49rU.roa (hash: r++agSStViQ3qw07RB4HAaR5ym/8f71PVZva/QwS050=)
2: t6x4DrIELIxXABtl7xVub1kxI5s.crl (hash: YXsDLi+UUa2eesM6gHqnmB2lYOTh//JooPlpDaFu7Uw=)
3: v7txDad3obC4fM89n81NhQg4Yeg.roa (hash: SQrktdz+pjDoi2qLtFhS7eNuomu/ooHtDXvC3qLXy1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:31:85:7a:8f:e0:91:bc:e4:d3:99:ad:63:a0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Validity
Not Before: Sep 7 03:00:27 2025 GMT
Not After : Sep 8 03:00:27 2025 GMT
Subject: CN=34ec78d6c89a5b22e2d04678cde30906dd3f65ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:57:f2:d9:85:99:92:75:2d:59:86:7c:08:f4:
1a:c7:60:8c:9e:7d:8f:0a:d2:7b:ca:f8:d2:a9:a1:
2a:a7:e6:1b:0e:ee:99:54:63:72:62:03:d8:14:ef:
04:5f:ce:80:e0:be:db:13:f5:9c:5a:29:81:2a:d3:
31:54:a7:b7:2b:4a:e3:f2:00:00:81:cd:f6:5c:0b:
8e:ef:92:a4:0e:67:31:61:95:c7:9e:9c:0c:b6:2f:
2a:ed:14:2c:56:5b:d5:50:05:ad:2a:86:6d:6d:28:
55:ba:66:b2:1f:57:9b:88:60:74:92:e8:94:60:46:
53:83:94:4e:48:61:bc:d2:14:70:85:f5:6d:51:a1:
c0:0f:69:b4:69:5c:50:32:f8:7f:d4:db:b7:fa:40:
91:66:ef:52:ac:e5:cb:70:82:b5:b9:5e:ec:cd:86:
dd:35:13:9a:43:3b:fd:b3:a6:22:0b:c8:9f:08:3c:
87:16:0a:0f:4c:a7:29:df:a4:ea:aa:b3:b9:6a:ca:
eb:de:85:c1:cb:22:06:c0:96:6f:13:d0:67:db:98:
be:ca:05:70:0f:7a:21:1d:b0:6e:bf:ba:6c:71:ab:
3b:d4:a6:07:bd:1e:a2:94:c8:7c:b6:df:ee:e5:b1:
1b:c0:b4:1e:63:b8:57:53:17:69:1f:e6:14:5b:14:
89:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EC:78:D6:C8:9A:5B:22:E2:D0:46:78:CD:E3:09:06:DD:3F:65:AE
X509v3 Authority Key Identifier:
keyid:B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b1:bb:77:a6:4c:dd:60:2a:89:4c:9e:ac:b4:a5:79:d3:f1:
6e:87:ce:16:ea:f4:ed:f3:0c:d2:80:9d:d3:3d:06:50:48:49:
f0:f2:6d:37:6a:cc:88:80:5d:3d:71:a0:b5:27:69:ee:e9:fd:
e1:a8:6c:fc:58:0b:8a:38:ec:24:22:fe:5c:7b:6a:fb:f6:4e:
fd:01:3a:39:c9:c3:a0:5a:30:52:c3:03:55:f1:e7:9a:81:a8:
10:25:ae:0a:17:ae:a6:40:a8:4b:db:76:20:02:33:d0:5e:f3:
19:d8:3e:bc:d0:1e:6e:74:07:09:2b:5d:b3:0d:01:6c:7c:df:
c1:13:3c:9a:d2:8c:1a:2e:15:dc:2f:00:03:17:74:4d:e8:fd:
58:20:d8:0b:0e:79:86:78:78:6a:75:95:98:12:18:d1:19:b0:
88:ed:ec:22:c0:a3:52:07:d5:ea:69:a5:01:8d:96:33:8c:e8:
29:92:aa:90:4d:24:19:b3:2f:32:dd:a2:91:e3:6e:c1:89:ec:
26:db:ff:ab:11:7a:40:17:2f:ad:24:ec:f2:ce:26:2d:63:c2:
62:31:2e:2f:9e:72:b6:62:1e:d5:0d:26:15:86:7b:7f:5f:b1:
38:6c:93:7e:f1:46:76:15:3c:dc:9c:b3:33:1c:19:12:26:82:
33:dc:c9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:28 2025 by rpki-client