Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
File: pTi7DCtB76jDsCBk68UvupLCNiY.mft (raw, json)
Hash identifier: vaTkMPLg8pCTJar4JT/Lqu17ScvzlGsADYsedVETXNk=
Subject key identifier: 25:BC:4D:87:15:E7:9A:06:0F:71:84:49:96:47:19:13:0B:74:EA:3F
Authority key identifier: A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
Certificate issuer: /CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Certificate serial: 01993613713E78C33EEB7E3FC93D47F15B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
Manifest number: 1266
Signing time: Thu 11 Sep 2025 00:01:07 +0000
Manifest this update: Thu 11 Sep 2025 00:01:07 +0000
Manifest next update: Fri 12 Sep 2025 00:01:07 +0000
Files and hashes: 1: DSyQL16gVyPuINIFuwqbtqDaLcQ.roa (hash: 4sWGWWc2NQ2B2oMwbMVn1NZgZ93cb0NJnNIgTj1CBqg=)
2: ldlRi9PG7yaWe_OISm5PxetZ-fs.roa (hash: zAtX/bKzY97x7lzgIkaYD8HV9V6BCkypXN+jO7OstUg=)
3: pTi7DCtB76jDsCBk68UvupLCNiY.crl (hash: hJldoH/GrhJePWhlvNLiezY3lUzQ/6LHGRxcYK9PxR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:13:71:3e:78:c3:3e:eb:7e:3f:c9:3d:47:f1:5b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Validity
Not Before: Sep 11 00:01:07 2025 GMT
Not After : Sep 12 00:01:07 2025 GMT
Subject: CN=25bc4d8715e79a060f718449964719130b74ea3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:13:1a:0c:45:48:9d:82:82:b2:a2:bf:ef:
c0:d7:ef:8e:c0:59:76:e3:14:a1:90:51:84:3d:8b:
f1:1c:42:cf:24:c9:13:eb:26:f9:69:73:75:31:ca:
8d:6c:b4:10:df:91:10:8c:ae:2f:d6:78:24:75:b1:
65:e6:90:4a:46:5c:e4:d7:25:ce:10:c9:ea:a4:e3:
67:15:5a:99:29:9c:f5:97:9f:62:a4:d6:f0:38:aa:
bc:94:38:bc:9d:7b:ce:e4:e7:9e:89:c9:a0:07:c2:
82:c6:b0:bc:88:02:be:d5:c9:4e:fc:b3:7a:22:a7:
f5:5e:42:b8:b5:16:c9:ff:0f:e2:4c:aa:f6:a8:75:
eb:f1:50:82:5f:98:e2:3b:de:d0:0b:80:d1:14:86:
65:1e:20:77:cf:a3:a4:b9:8d:f2:21:0c:03:cf:a0:
9f:c3:4e:d1:e0:6f:57:de:04:bf:94:7d:e4:e6:96:
16:1d:c0:7d:d2:50:8f:64:01:8d:98:84:4f:3b:68:
f9:68:1a:22:03:ee:b3:c1:56:d6:82:83:df:05:07:
66:5c:4d:f4:2e:bb:5e:81:f1:29:07:e9:09:66:64:
43:7b:9c:07:bd:4f:12:90:01:0e:fe:f7:d0:a5:66:
fe:11:9f:9f:03:f2:c9:f9:8c:e9:d8:ce:07:55:4a:
16:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BC:4D:87:15:E7:9A:06:0F:71:84:49:96:47:19:13:0B:74:EA:3F
X509v3 Authority Key Identifier:
keyid:A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:af:74:96:9a:23:10:4a:be:07:39:06:8a:10:29:e5:0d:4d:
e8:2c:8b:3f:0e:ce:93:00:02:65:33:2e:79:4c:9c:79:f3:2f:
43:68:2a:0f:9f:06:e9:b7:7d:c8:7b:d6:b6:36:d2:d5:e5:46:
82:2b:d3:13:79:f3:db:7d:f0:e6:b1:8d:90:26:a0:24:11:9e:
f5:a7:5f:32:b1:7c:50:e9:a0:8a:8e:c7:2b:6a:a5:4b:24:1d:
bb:a4:97:29:2e:cb:d3:2c:04:a8:68:23:70:f9:33:70:d3:7b:
88:5e:63:2d:79:02:2b:90:14:5d:90:4f:b6:fa:ba:a5:b8:dc:
58:e2:8f:36:64:6c:e5:e2:73:e4:3a:6f:40:cc:a1:77:fc:49:
e2:df:f8:61:7a:a3:0a:03:8b:0a:ce:80:c2:a1:24:d6:af:7f:
c6:98:37:6e:f1:fc:28:59:0c:7a:67:21:76:cd:24:74:de:3b:
bd:5f:28:6f:cf:eb:01:6d:24:34:60:6a:4b:78:18:22:35:25:
8e:11:70:3e:46:db:1a:94:e9:4e:74:ee:c7:3e:94:d6:a5:b2:
f8:74:fe:8c:c9:64:ca:af:89:b4:6d:7b:f7:90:c1:06:c6:88:
75:82:92:50:43:df:bf:a2:8e:0e:98:02:c1:45:9f:78:05:b6:
70:a5:a7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 06:20:05 2025 by rpki-client