Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
File: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft (raw, json)
Hash identifier: 2k3IfJWo8qPnlb30lYcG9MoB1thdzvwVCe0WSRRNs1o=
Subject key identifier: 19:C4:FC:4C:57:67:01:78:C4:C6:11:CE:F7:54:4E:CC:AA:2A:4A:25
Authority key identifier: AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64
Certificate issuer: /CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64
Certificate serial: 019768F2A3B17C781419AE7C2358785050AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
Manifest number: 1152
Signing time: Fri 13 Jun 2025 11:00:21 +0000
Manifest this update: Fri 13 Jun 2025 11:00:21 +0000
Manifest next update: Sat 14 Jun 2025 11:00:21 +0000
Files and hashes: 1: TImGbHFcysH3yKCENp7I2KDKakw.roa (hash: wV738mzWH7BpaMNjeVJLX60iXYrXwr7zU2chvPIlwaE=)
2: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl (hash: iyJ5EVrajV99GPtqxTpv65+5f2I7ILvE7/PJBg79qRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:a3:b1:7c:78:14:19:ae:7c:23:58:78:50:50:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64
Validity
Not Before: Jun 13 11:00:21 2025 GMT
Not After : Jun 14 11:00:21 2025 GMT
Subject: CN=19c4fc4c57670178c4c611cef7544eccaa2a4a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b6:38:ba:80:88:67:12:29:01:c0:b7:36:49:
c3:03:51:0c:e3:5e:10:22:7a:78:9d:51:c7:ad:f0:
67:a9:15:17:96:3f:5d:d4:0b:c6:a5:32:8e:af:86:
1c:3b:55:e2:0c:83:d1:e3:81:88:ea:a4:46:9f:23:
9c:ad:fa:3f:b8:bc:11:4d:e8:e7:c1:c1:a7:0e:69:
8c:49:9d:0f:4d:84:8e:b4:3c:67:a3:a0:91:5f:a8:
b2:c3:e9:26:d4:4d:4b:e0:0a:bf:26:14:b2:96:04:
11:ef:21:c1:09:82:39:42:4e:8e:3d:fd:37:ed:70:
f0:6b:2a:4b:57:39:f1:9c:70:2d:7b:9a:c6:3d:ad:
a0:fb:b2:70:d8:45:cc:6e:26:27:da:a0:8f:cd:ee:
54:99:5c:8a:b6:10:ed:a2:41:62:8d:67:0e:bd:c2:
c4:73:aa:f7:ed:10:54:9c:c4:d7:8c:c9:b6:22:c3:
fc:ba:44:da:f4:fb:f1:c3:f7:54:50:0b:a8:91:c1:
8f:0b:d5:12:97:90:dd:7e:09:da:e7:00:65:d1:b2:
d8:ff:6f:cd:83:6f:74:f9:30:36:38:b7:6e:f2:e2:
43:df:1e:67:00:34:09:7d:a0:e6:0d:52:03:2e:03:
c1:d9:09:01:48:01:36:95:f6:dd:bc:2b:d6:85:6c:
e5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C4:FC:4C:57:67:01:78:C4:C6:11:CE:F7:54:4E:CC:AA:2A:4A:25
X509v3 Authority Key Identifier:
keyid:AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a3:58:aa:1b:84:35:cd:49:22:af:cf:89:38:dc:3b:70:56:
b9:2b:d0:85:71:83:bb:ee:75:72:97:e6:8c:02:87:fb:c8:28:
3b:38:ba:c7:2d:65:72:e9:df:02:c2:e6:61:65:6d:9f:0b:0c:
2d:07:85:17:c7:f2:9a:d8:b0:b8:d5:bd:67:f5:ac:49:5d:a2:
03:31:05:5e:1a:56:1f:c5:e9:ae:58:e1:e0:93:c8:ba:10:db:
1d:9e:50:9e:5e:95:27:cf:15:06:6c:9a:9f:d1:c2:95:5b:1e:
6f:99:ac:3b:8a:52:55:a5:f4:9d:e7:6f:da:5a:85:f8:88:92:
cc:e9:2d:c8:8c:61:3c:01:1f:f8:37:b9:f6:f5:2b:30:73:00:
06:3f:a6:e8:24:10:43:14:4e:4f:2f:9f:18:32:5d:a5:7f:3b:
d8:3e:b4:d2:bc:5c:bf:8b:6c:5e:1a:f3:28:02:19:c1:8c:a3:
95:1f:dc:fc:30:86:09:8d:93:34:f2:80:f8:7b:68:10:87:34:
66:73:4b:d0:18:9c:eb:36:f5:3c:48:80:4e:45:9a:dd:58:06:
cc:dc:f6:2b:bd:e4:26:2b:73:a7:71:4c:d9:9b:98:7e:4d:6b:
6d:b9:65:8e:6b:a6:bb:2f:37:b2:d3:a0:eb:dc:0e:74:6a:d5:
74:74:7d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:01:11 2025 by rpki-client