Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
File: 0b77TZQENocaJKhyLzydZNbIQBA.mft (raw, json)
Hash identifier: pgTquso2+Q5T6gohHu3igVZp9p0HWhpYlKqVFDtebTU=
Subject key identifier: DB:14:3F:30:FA:73:8D:C2:5B:25:F0:88:7B:55:A6:DB:32:D5:AF:BF
Authority key identifier: D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
Certificate issuer: /CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Certificate serial: 019922FA265501F49137CBFA45957045FCA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
Manifest number: 57
Signing time: Sun 07 Sep 2025 07:00:43 +0000
Manifest this update: Sun 07 Sep 2025 07:00:43 +0000
Manifest next update: Mon 08 Sep 2025 07:00:43 +0000
Files and hashes: 1: 0b77TZQENocaJKhyLzydZNbIQBA.crl (hash: 84YHoj4s3ZnvPKUAN6np7oiP1uCpV9cEtrUIMcu8SnY=)
2: 1-7rqPeApfWB5OeXme1R2dxaURkI.roa (hash: G1AfCo2TRIj0s8Iv4o94YSbEJ+sCCm2M5yCwI2QU6Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:26:55:01:f4:91:37:cb:fa:45:95:70:45:fc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Validity
Not Before: Sep 7 07:00:43 2025 GMT
Not After : Sep 8 07:00:43 2025 GMT
Subject: CN=db143f30fa738dc25b25f0887b55a6db32d5afbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cc:0d:5b:76:f0:36:cc:06:b0:f2:70:6c:ad:
22:7a:b5:92:47:85:81:16:a8:08:6c:82:f2:52:95:
e7:80:c2:d5:11:86:6f:b9:ae:bb:cc:2d:65:ad:2e:
89:e9:48:e4:db:1a:f1:3f:8e:83:cc:bb:bc:e8:b4:
f9:1f:bf:bf:6b:70:2e:30:66:3e:48:47:8c:6f:2f:
49:9e:da:27:db:d5:32:fb:3e:4a:4c:d1:a8:58:66:
6b:f7:e8:de:91:1f:c8:63:f5:e8:35:78:03:2a:49:
19:95:71:52:23:d6:e7:48:a0:95:ce:fd:d1:a1:48:
ac:2f:12:61:de:30:c2:d4:e5:eb:8c:a1:d5:df:c5:
a8:34:6f:42:dc:52:42:59:5d:bb:2c:0d:1f:9b:50:
3f:37:4d:8a:7d:cc:e4:cf:bb:c4:db:7e:c4:fe:05:
1a:b2:8f:89:9c:f6:c1:eb:d6:bf:6e:44:61:59:ed:
07:00:5c:bd:b5:fe:fc:b5:a1:87:2c:42:2e:0f:27:
68:ff:e4:61:e2:40:c4:cc:c9:55:eb:68:97:d0:25:
9b:c3:1d:44:35:15:9c:b5:e1:ca:ee:cc:62:7c:d6:
29:8e:f2:16:45:71:ab:01:4b:43:74:5a:34:6b:e6:
df:01:96:c0:e1:52:15:37:b6:d7:d8:ad:22:ac:80:
13:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:14:3F:30:FA:73:8D:C2:5B:25:F0:88:7B:55:A6:DB:32:D5:AF:BF
X509v3 Authority Key Identifier:
keyid:D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0a:f7:cc:28:42:06:3c:41:aa:80:ea:13:e8:73:b2:cb:ca:
3f:7a:26:af:92:33:a2:5d:e6:ab:24:80:fd:c3:a3:2c:c7:ad:
17:01:16:01:bf:6c:cb:d4:9a:82:77:64:44:16:76:a8:3b:62:
dc:17:be:f2:e6:4b:d6:78:4e:f4:09:87:89:31:cc:e0:d0:37:
0f:8e:96:9c:3b:e3:fa:29:86:9f:9d:e9:41:ff:58:c4:95:f9:
c1:7d:c1:a3:fd:61:9e:7b:47:38:31:89:15:cf:7c:a9:cd:37:
57:81:e8:66:b4:bb:5d:5d:d5:5c:9a:9f:77:1c:9b:b8:4e:91:
b3:bb:eb:78:4c:f9:9d:59:e4:2b:1a:5b:27:c2:19:66:cd:8a:
86:8a:d2:70:0e:86:13:a6:83:a9:52:e3:b9:af:45:58:8f:ce:
93:c9:4a:01:6b:45:46:20:6d:e0:6a:17:66:d3:c2:57:6b:ee:
fa:c7:67:af:94:a3:4c:88:ff:50:94:a0:bd:55:3c:a2:aa:2b:
4b:c9:2c:92:f7:3d:31:91:bb:28:39:c8:b0:09:b9:bb:56:ce:
7b:da:21:00:74:60:9a:16:6f:97:7a:a2:79:64:35:0b:5b:e7:
c9:52:77:6f:70:d8:41:da:a9:9a:40:81:dc:e3:1c:2d:1d:93:
a8:a2:45:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:37 2025 by rpki-client