Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
File: p_0_iTNdz4KGZrKPrYrpk71EiHg.mft (raw, json)
Hash identifier: 3GJVcj/Y5Y8BI5gs5Pq4i4NaY7q/4ViTZwLGGDshCP4=
Subject key identifier: 25:A9:C8:F4:C2:1C:5E:E7:FE:AA:E3:1B:F0:8C:4E:8F:EC:59:28:E1
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 01993191931C1FBBAEFCC2D9785C0164DC09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
Manifest number: 0E03
Signing time: Wed 10 Sep 2025 03:00:47 +0000
Manifest this update: Wed 10 Sep 2025 03:00:47 +0000
Manifest next update: Thu 11 Sep 2025 03:00:47 +0000
Files and hashes: 1: 3DUEt-aAns-v1SVe6cG9Jeqaah4.roa (hash: 80+E6/cb26cmgMWADgR9cowpvlm1kb/qW3Qt9g0U5L8=)
2: Ap5URXBO93O7jJtjlLZVH2pw48c.roa (hash: p0iYaq767KbYvMNrK5KRomzTD5nBTVSwaVmB+7Atf7Y=)
3: JEudm5eaXMbpcorZfF2mGZr0koE.roa (hash: XbkPUoxJZnY0l62UTU5OlIMUIwc1e7/u/vIUsrvTLYY=)
4: gJZeDk4rmX44E5axtXtFWO80NO0.roa (hash: pUiSGUoY8i4KMd2N+BSEOVvNbEKEOnmR+nGAVe0LW6E=)
5: lejfRms_8jcNpkPTbPyQIBJyGvk.roa (hash: tyCtAQGeo8obwJOw9cT2nm1EzzLsrcw7uVb2b4sZkgw=)
6: p_0_iTNdz4KGZrKPrYrpk71EiHg.crl (hash: JFPUihM9AQnOc0jfSjOqQ06QD+CxxsejjTIRhvnqEv0=)
7: saa_0VvgXSNx1kkjSqyVEbVnkCY.roa (hash: v+RU7IsAtr1sKZAICZ44u+iiQ3vM7YjRtrxROuRMlCQ=)
8: x0T3yvJpLXpG0yBkBOlH0qchh3U.roa (hash: Lt2tpn0tH6x5Kf9HXc8LFADRTohAK1wE2pgpgUDlEXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:93:1c:1f:bb:ae:fc:c2:d9:78:5c:01:64:dc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Sep 10 03:00:47 2025 GMT
Not After : Sep 11 03:00:47 2025 GMT
Subject: CN=25a9c8f4c21c5ee7feaae31bf08c4e8fec5928e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a1:04:32:3a:8b:64:77:b2:9d:e0:cf:b3:eb:
d8:77:24:74:ca:a3:50:3f:11:fc:89:54:38:b2:c2:
8e:60:8e:88:e3:fb:32:bf:ee:5e:b9:60:5e:8b:c8:
7c:37:ce:fe:ff:a5:eb:5a:4e:85:2f:a2:e5:45:d9:
5d:63:dc:f1:b3:bc:7a:bf:b7:3a:f8:09:51:29:a2:
1b:b4:2e:61:e0:bb:13:a2:01:7e:75:52:2c:32:c6:
0d:df:81:72:6c:72:f1:79:d6:ee:b2:ed:3d:65:13:
79:23:bc:cb:2a:ac:e0:fa:28:ef:7c:33:83:87:29:
03:bb:ea:5c:9e:d9:b1:1a:6b:70:04:4d:77:81:45:
bf:25:bc:e7:91:10:90:dd:fa:78:63:d7:05:36:8b:
51:8b:ea:3b:75:75:83:54:ab:01:11:e9:0b:95:60:
c6:5b:cb:60:51:a9:8f:d0:27:f5:5a:29:70:ec:19:
6a:9f:e1:62:b4:ee:68:cf:e0:ba:1f:86:52:a3:8a:
bf:33:53:26:d9:d8:53:a1:f5:87:d0:07:86:5b:c5:
27:be:02:5c:79:1b:60:6d:49:3c:66:f6:f7:04:e5:
f3:80:70:90:8b:77:13:05:6c:8f:74:9f:6a:0e:f2:
a7:b6:50:f8:c3:15:cd:c3:fb:7d:cc:8e:e7:58:a4:
3e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A9:C8:F4:C2:1C:5E:E7:FE:AA:E3:1B:F0:8C:4E:8F:EC:59:28:E1
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:84:3d:b7:e3:28:87:dc:3e:b6:e9:0f:5d:cb:16:13:b9:0f:
e5:96:0a:85:3f:06:00:f0:cb:cb:3f:31:db:4a:77:c5:bf:b9:
95:cb:92:49:0c:e6:21:4c:a0:f3:e3:70:ac:3f:71:d4:0a:65:
4e:7a:c9:56:a3:13:3a:16:90:b5:2e:ff:0c:ba:e2:01:08:2b:
01:c8:61:f9:d8:2a:96:83:dc:15:ef:f8:b9:95:67:f9:ec:54:
44:c5:c3:4d:ae:65:48:de:76:de:1b:fd:6d:79:90:30:d2:85:
45:c7:c3:a2:26:65:56:db:17:13:b2:e4:ed:d3:c6:42:02:2d:
b8:09:60:f5:15:af:d8:b2:7c:74:a8:d6:dd:4d:47:b5:51:3f:
b3:fb:1a:2a:be:4b:6f:92:3f:25:89:d7:1b:6e:0e:68:ff:38:
f5:11:ab:a7:ee:73:08:e0:9e:d3:e5:2a:14:e6:70:12:54:e7:
9f:d0:bb:9b:c1:11:90:4c:74:a5:7b:d3:99:d0:86:d2:cf:89:
97:c5:85:fa:de:33:79:fa:85:ad:be:39:0d:26:52:14:25:25:
8c:1e:1e:a4:8c:81:9a:e7:37:a6:0f:36:dc:99:37:5d:3e:19:
bf:4e:03:42:81:d6:c6:b1:ef:f6:c6:a5:9c:cb:f2:e5:6e:52:
72:d9:b4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:58:08 2025 by rpki-client