Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
File: t7n8UEpNIXiuT3PId8X5B7tHa_g.mft (raw, json)
Hash identifier: ckVar9Ht4Pd/HSFi5/TfBqVBmFpydUInCXdjBxhC3A8=
Subject key identifier: 8C:13:D4:F4:16:C4:E0:75:2D:1C:A1:45:49:D0:96:BC:85:1F:8F:20
Authority key identifier: B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
Certificate issuer: /CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Certificate serial: 0199180A89A51D0D83B01B2ECA37693D9942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
Manifest number: 03CA
Signing time: Fri 05 Sep 2025 04:02:47 +0000
Manifest this update: Fri 05 Sep 2025 04:02:47 +0000
Manifest next update: Sat 06 Sep 2025 04:02:47 +0000
Files and hashes: 1: k9U72mP-Km1xWLf3e9wAtG2m9RI.roa (hash: Pej7Eh2aiqSEO+t6zjd8tEra9H0XG62qu73Vt5mmuqQ=)
2: t7n8UEpNIXiuT3PId8X5B7tHa_g.crl (hash: ouDwY3VZxQSHiwGQPRBRVTs+4dE0CfO7qFmbk5hp2y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:0a:89:a5:1d:0d:83:b0:1b:2e:ca:37:69:3d:99:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Validity
Not Before: Sep 5 04:02:47 2025 GMT
Not After : Sep 6 04:02:47 2025 GMT
Subject: CN=8c13d4f416c4e0752d1ca14549d096bc851f8f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:50:53:c5:85:3f:50:27:53:9c:93:82:f0:04:
bc:09:93:b4:da:c3:36:1f:30:a3:0b:07:d1:e6:a4:
19:99:80:42:89:61:52:91:5d:ec:25:e7:c7:7b:10:
12:c6:1a:dd:b1:7d:23:bd:e4:39:af:ba:bf:c0:f7:
00:41:14:90:1d:1e:8a:2f:a0:51:0c:a3:d2:11:ae:
1f:e6:f1:0f:19:16:64:7a:82:b1:82:63:ae:c3:d5:
a6:14:aa:d6:33:c8:2a:eb:ba:23:94:2f:ff:50:fc:
f6:5d:68:cb:79:2e:fb:20:ed:7e:9c:9f:d6:1b:33:
61:b5:2a:9a:2f:57:06:c1:c6:53:9f:cb:4c:ea:a0:
93:ef:46:e3:37:a6:3f:87:8d:11:13:57:11:53:1b:
ec:80:dd:14:7f:2e:bb:94:ca:ef:fc:47:3d:b0:1f:
6b:d2:93:19:5c:66:3a:b6:7c:1a:2d:a0:82:e0:c5:
8a:02:13:e8:77:a7:58:81:14:58:ce:92:77:bd:9d:
a6:14:62:d5:e4:86:2f:2e:8a:45:e4:1e:19:5b:8f:
53:12:dd:66:b5:1c:61:d6:a6:72:38:d9:9c:19:70:
a3:e9:2c:51:3f:d1:f2:9c:e0:62:df:db:62:a1:96:
d2:08:aa:59:25:14:b8:6f:5c:ce:23:f4:e8:b3:72:
de:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:13:D4:F4:16:C4:E0:75:2D:1C:A1:45:49:D0:96:BC:85:1F:8F:20
X509v3 Authority Key Identifier:
keyid:B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c6:5a:ad:fb:37:c5:1b:35:49:72:c0:f1:4a:5c:1d:c3:66:
16:ec:32:ba:f4:f2:99:88:8e:8f:1e:65:c7:78:d4:43:5d:71:
7f:c8:7e:11:d0:53:47:bb:2a:aa:b7:fb:10:b4:3a:b4:c6:ff:
ae:7c:e1:22:66:9d:d6:04:fc:d0:ac:a9:0b:10:8f:dd:3f:a5:
37:94:7d:cb:27:cb:ed:a8:a1:0b:02:d1:85:2f:a1:94:3c:1f:
e6:93:41:66:69:2b:89:b7:39:02:df:57:7e:29:a6:c7:ff:1a:
dd:7a:df:cd:e6:84:2e:95:bf:89:e6:cf:a9:41:68:0d:d0:47:
7c:8e:59:69:01:75:fa:5a:46:b9:8e:3b:05:95:2e:d0:49:ef:
fb:db:5f:b7:71:ec:79:9c:e7:84:01:7c:25:d8:c2:ea:b3:e3:
7f:33:06:db:51:3d:a0:ef:31:8f:b2:b4:6b:ff:d2:b5:21:b6:
b7:ab:e6:53:5a:b3:75:15:af:13:23:63:f8:77:3f:1e:81:1a:
7e:2a:8e:69:f9:53:c5:55:7e:e7:1b:ee:10:c5:3d:92:e8:c2:
33:d1:6e:0c:0e:88:31:24:73:ec:87:86:b7:66:6a:5e:1b:9d:
ee:81:8a:55:a9:10:74:18:7f:a9:cd:8c:40:d6:39:e6:d3:fe:
22:2c:75:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:24 2025 by rpki-client