Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
File: dT1Hbblt4eWGIxGacLnXsAtnbaA.mft (raw, json)
Hash identifier: 0SO6ZymrBHpyKnJdLSXg1CcUyQMdW1QEtYwR1or6p7c=
Subject key identifier: 41:40:CA:6B:15:A8:E1:28:63:F2:AD:86:72:71:8D:DA:8E:71:F2:D3
Authority key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
Certificate issuer: /CN=753d476db96de1e58623119a70b9d7b00b676da0
Certificate serial: 019853444E4485B16D1B786E740A3ECC2A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
Manifest number: 1604
Signing time: Mon 28 Jul 2025 23:00:41 +0000
Manifest this update: Mon 28 Jul 2025 23:00:41 +0000
Manifest next update: Tue 29 Jul 2025 23:00:41 +0000
Files and hashes: 1: 46jADdHLKU7NIyeYvDkR9sakzHU.roa (hash: byWqvbSSzcE1Xc0qEaXyUWnOp7q2hSYPDvEBq1c3RLI=)
2: ZzBmvMdXYMiQ9bwVHMIzO7s9SmM.roa (hash: sLT+c6scYZ8+Q07xIyxSqYkUzEuyYwiK9vh89QW6tS8=)
3: dT1Hbblt4eWGIxGacLnXsAtnbaA.crl (hash: kwMtZtJTG+qnrgznNfiqe0FaUTrsBJo7srkQ5cXjiqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:4e:44:85:b1:6d:1b:78:6e:74:0a:3e:cc:2a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=753d476db96de1e58623119a70b9d7b00b676da0
Validity
Not Before: Jul 28 23:00:41 2025 GMT
Not After : Jul 29 23:00:41 2025 GMT
Subject: CN=4140ca6b15a8e12863f2ad8672718dda8e71f2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:67:dd:a3:3e:67:2b:58:dd:58:a3:47:72:
7e:5c:b3:10:24:73:a0:8b:af:9e:d4:80:ed:b2:61:
94:13:7b:be:fe:27:a1:8a:47:40:a7:40:77:fa:7d:
b7:78:d1:0f:35:3e:47:da:af:be:5f:63:6f:17:e5:
32:d8:6d:23:a1:d2:2c:7f:36:4d:4f:69:2c:92:4e:
08:aa:5f:f4:16:05:d6:5e:de:7e:cd:b1:15:93:d7:
1f:7c:f8:cb:62:cc:eb:5a:12:ee:42:0d:36:4b:bf:
d7:16:50:26:4c:44:6f:8b:29:4f:e2:bc:56:d8:03:
53:36:37:90:0b:08:bd:c2:29:8f:b6:1d:f1:b1:b9:
26:29:25:87:42:35:c8:70:fd:84:c6:35:1c:bb:1a:
7c:e9:0c:b2:77:ad:3e:9f:db:4a:d3:ec:41:6c:0f:
93:34:e5:29:f9:c9:44:fa:3e:98:e6:06:97:b9:92:
45:1f:9a:51:f7:1b:36:cb:7f:9a:3f:ce:30:4d:66:
2c:ad:b4:e5:7e:4c:01:b7:a8:95:02:9c:a3:2f:0b:
58:76:05:ce:d2:9a:2c:8d:95:de:19:ab:f7:da:c6:
52:3a:0b:07:05:fe:25:fb:89:9c:d0:e3:5d:15:08:
69:af:44:19:bf:15:1d:0b:b9:79:52:c6:cb:b1:bf:
ad:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:40:CA:6B:15:A8:E1:28:63:F2:AD:86:72:71:8D:DA:8E:71:F2:D3
X509v3 Authority Key Identifier:
keyid:75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:cb:27:5d:74:01:c1:37:85:8c:b2:38:78:da:06:32:5a:dc:
38:b1:21:04:a0:ac:05:72:19:37:8c:7c:9d:c0:02:26:84:d2:
3e:99:09:41:b4:0d:43:68:ce:b6:75:5b:64:20:7d:52:9d:f0:
67:2c:5c:f8:b7:23:48:84:20:de:ef:0d:fa:b5:1c:52:f7:94:
fd:8b:a9:bc:fc:65:f7:58:b5:5b:dc:0f:60:91:d9:7d:f0:bb:
04:ec:a7:0a:55:f2:3d:6c:69:25:54:1d:88:a7:08:ff:82:fa:
dc:59:57:18:d0:18:17:88:d5:1b:36:9d:d9:50:d7:b8:ed:a9:
78:18:25:b4:6e:be:0a:11:93:7c:73:68:72:db:ae:f0:7f:6e:
df:52:3f:71:c4:c1:d5:c8:48:45:9f:b3:52:3f:05:c1:36:e6:
4b:e5:e1:c1:1e:c1:e4:d0:19:d9:eb:d3:28:93:60:e4:39:ef:
43:4b:7d:84:b6:eb:b6:97:dc:18:46:d5:ca:37:31:0e:53:aa:
7d:95:b3:bf:a0:ec:42:a1:c5:39:e2:65:02:1d:da:46:01:b1:
8b:12:3f:12:37:b2:08:34:8a:ba:cf:9f:d5:c6:bf:c5:9d:87:
e9:e9:da:c7:3b:0e:cd:25:2d:27:17:7e:81:e9:02:61:e3:b7:
75:bc:63:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:51:25 2025 by rpki-client