Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json)
Hash identifier: WhP6MUaPMLfe8jm+RlRiAz0TjsrnGO/JjYLa+e4wn5M=
Subject key identifier: 7E:BF:0F:9F:02:C2:FF:2F:0F:2E:C4:0F:87:63:7A:8A:64:39:16:9A
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 01993123C2E623FD9942DCF6147CAAA2AD02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
Manifest number: 13B2
Signing time: Wed 10 Sep 2025 01:00:51 +0000
Manifest this update: Wed 10 Sep 2025 01:00:51 +0000
Manifest next update: Thu 11 Sep 2025 01:00:51 +0000
Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: S5VQCZkWamvZplWZ8DwBGWCGB6cBNG6oVoABthwPjNM=)
2: ughB2qwCJjXq23HnnasoQDdXgE8.roa (hash: LImj3hNpOasXYHWcbm9URdJgBeEySrqqax18nJO4GMo=)
3: v0jeM-EK5U0lFswlXgsyLuIVWWw.roa (hash: M3nsb4FrAgnB7zU3prkNFU+S+Vg3EPSnI0a1Dxv4l5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:23:c2:e6:23:fd:99:42:dc:f6:14:7c:aa:a2:ad:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: Sep 10 01:00:51 2025 GMT
Not After : Sep 11 01:00:51 2025 GMT
Subject: CN=7ebf0f9f02c2ff2f0f2ec40f87637a8a6439169a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:bd:f9:16:96:44:97:dc:e6:85:54:bb:28:
55:46:2e:93:10:72:58:a4:ba:3a:92:a1:7d:8f:bb:
af:1e:36:64:5b:25:c3:62:b0:64:f7:d3:aa:be:8a:
26:d4:70:17:fd:33:8b:2d:1d:b0:82:80:32:62:b1:
93:af:3d:94:a0:6b:00:b4:d2:06:a5:3c:e0:9b:5e:
c2:d2:cb:84:6c:f1:61:3c:c9:b3:72:37:94:eb:d8:
66:14:07:a2:34:6e:53:29:68:b7:c6:46:9d:dd:7d:
b5:c2:52:e0:86:41:a6:f5:0d:36:e0:2f:52:2f:08:
f7:3c:96:b9:c1:32:8d:5f:19:ce:1f:e6:53:49:7f:
3b:44:cb:a3:82:10:38:d9:7c:e7:67:0e:24:09:0e:
fc:b1:da:64:09:75:c1:10:6b:63:96:78:d5:8a:2f:
d6:26:78:49:68:26:24:a1:72:c2:cd:d4:82:df:e8:
1e:e1:c6:d3:57:62:c2:2e:ce:18:02:1c:ef:a7:59:
cf:69:01:56:b3:f1:0f:2c:8a:47:f0:0c:95:96:ac:
55:dd:66:92:f9:6c:cd:ac:9f:c4:0f:e0:36:23:4b:
94:c8:19:5f:86:e0:53:ec:c7:48:da:4d:ec:18:f2:
75:15:03:e8:47:14:31:27:c2:75:50:bf:b3:43:3a:
98:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BF:0F:9F:02:C2:FF:2F:0F:2E:C4:0F:87:63:7A:8A:64:39:16:9A
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e3:9f:47:2c:c3:b8:bd:26:c0:0b:5b:10:7f:4b:5d:94:9e:
8d:90:bc:c8:3c:77:36:f5:86:2e:a8:a3:5f:b1:90:f4:ab:40:
8d:7b:6f:dc:5c:b4:ba:d6:32:e9:cb:b5:72:0e:67:af:68:dc:
48:b0:0e:54:e3:2f:7a:80:d6:58:b3:1f:ca:04:54:dc:eb:30:
50:56:19:05:f4:8c:67:7d:0a:95:0d:49:d1:c4:a6:d0:e6:6b:
ef:dd:c5:1a:5e:a1:66:d3:3b:67:5b:64:71:00:c5:01:be:a7:
04:71:6e:13:39:4f:2c:a3:0e:e2:0e:03:41:19:5c:22:37:04:
d7:84:21:4f:f5:3d:9b:18:27:5b:c1:51:b2:cf:89:95:89:2d:
55:08:5a:55:8e:d7:04:6a:5d:97:bd:b7:7f:90:85:70:39:49:
f6:b9:33:4a:58:97:b0:93:f3:36:72:a2:52:bc:eb:1c:90:87:
83:b5:c8:b4:7e:2d:c1:1e:d9:35:ac:1e:c0:c6:db:f9:a7:51:
2c:6a:01:23:07:98:d9:33:11:20:ae:92:29:2a:e4:a4:15:54:
7e:ef:0a:ea:1e:e9:cb:a6:09:ca:a3:e3:54:73:a5:35:2e:2a:
1c:6c:88:27:6a:b9:0a:39:5e:5a:53:b3:64:24:a3:77:8c:6c:
5e:4c:31:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:30:42 2025 by rpki-client