Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
File: cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft (raw, json)
Hash identifier: 1o75sGqhlPrrhLAnWumIMuIJj1F0zfvz2Y/aqYl1r6M=
Subject key identifier: 3A:48:4D:7E:D9:0C:88:DC:30:ED:E4:2F:4F:50:3C:E4:1C:2B:2A:7A
Authority key identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
Certificate issuer: /CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Certificate serial: 0199326D8C6CEC4CF4443FF454469B1220E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
Manifest number: 167F
Signing time: Wed 10 Sep 2025 07:01:03 +0000
Manifest this update: Wed 10 Sep 2025 07:01:03 +0000
Manifest next update: Thu 11 Sep 2025 07:01:03 +0000
Files and hashes: 1: 2tI0pPHAMAIk_osuAaaPnbBYiYE.roa (hash: Y+gWUa2jjd6N+7XsleK0WmIL5jH60gWVDj3pYUgybgk=)
2: cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl (hash: m0/7xXvrcgcPjQ+9ZA34qYWQjEnfXAVz3BO2Qk4tTuQ=)
3: fs0ZmJI91FgrAyS_qaO4SZnCnx4.roa (hash: ycybeagUIzrtezPLqz+FSenm/c5GMC1YyzGUnHiNwd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:8c:6c:ec:4c:f4:44:3f:f4:54:46:9b:12:20:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Validity
Not Before: Sep 10 07:01:03 2025 GMT
Not After : Sep 11 07:01:03 2025 GMT
Subject: CN=3a484d7ed90c88dc30ede42f4f503ce41c2b2a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:87:52:e1:05:12:ff:81:b8:30:a1:b7:ce:
13:73:11:ee:3b:e5:96:8d:f0:36:f0:a1:94:8b:9e:
dd:bf:10:90:12:62:33:25:42:f2:b7:cf:52:29:04:
fc:b2:2e:76:db:38:f1:0b:56:20:3b:0e:c9:79:81:
bf:fb:ca:1f:a1:d4:34:46:de:24:8b:85:96:50:d8:
bc:ed:2d:e9:97:91:99:23:8e:6c:ce:74:86:37:a6:
d1:63:8e:b8:23:5b:76:3d:e9:6e:51:05:13:7a:fc:
50:23:5f:1a:69:0c:d8:33:7c:c2:e6:e6:41:38:8c:
35:7b:48:da:e1:15:44:d6:cd:73:ec:23:13:13:25:
ea:1d:f3:fd:1b:f2:99:aa:6d:d8:19:ad:9c:f3:fd:
fd:77:57:24:65:fc:7f:20:e7:3e:cf:a7:7d:87:70:
ed:10:fa:39:c8:f3:ff:8f:33:af:b7:f7:b9:ae:2b:
b7:fe:7b:06:fa:6d:aa:f7:1d:d7:57:0b:65:39:5a:
ad:ae:0c:74:c0:d5:48:8e:65:f2:70:11:2e:14:27:
89:e7:67:be:69:65:44:7c:bc:c7:c1:7f:68:41:3b:
66:12:94:fd:3e:af:dd:4f:3c:e0:79:02:0b:3b:b3:
8a:28:76:25:19:c7:3c:16:73:9d:4b:d5:82:3b:13:
9f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:48:4D:7E:D9:0C:88:DC:30:ED:E4:2F:4F:50:3C:E4:1C:2B:2A:7A
X509v3 Authority Key Identifier:
keyid:71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:db:5b:2a:56:ca:15:33:d7:b9:b0:df:67:46:47:94:a5:4e:
e5:1d:8b:a3:4d:d8:4d:d3:93:ef:7e:08:aa:3d:56:37:20:7c:
04:55:f6:00:98:22:8f:57:21:18:01:d4:1b:80:bc:25:d8:87:
f6:09:d5:e2:b9:34:6f:03:92:0b:d6:c9:05:e3:51:88:c9:86:
2c:26:ec:fd:64:e3:fc:68:ee:b5:67:fc:ef:92:74:14:21:5d:
31:49:45:f4:cc:59:76:c1:f5:32:e8:7a:78:07:40:f9:1a:b9:
a6:06:9c:32:e1:e8:0d:06:8a:fb:95:84:e8:35:e3:70:19:56:
b7:9d:75:95:61:df:ec:c2:46:60:3b:92:7f:78:b5:76:70:ab:
c2:50:36:12:59:6b:12:ec:55:98:aa:01:7c:40:70:d2:8e:76:
e3:a4:21:39:93:09:b0:51:bc:c4:23:82:3f:e2:0a:bd:2b:e6:
99:c8:a0:e5:36:00:f8:8a:fc:6c:16:29:4c:54:ec:ac:47:5c:
31:a5:be:38:b5:f7:5f:48:a2:41:b8:fc:7f:c8:51:12:58:15:
56:c3:03:f8:c9:06:54:6c:92:67:fd:90:5d:7f:e4:4c:38:7d:
45:53:ce:49:48:ba:50:1f:d2:d0:55:f5:3f:68:7b:7d:7c:a5:
75:fa:d0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:15:52 2025 by rpki-client