Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
File: cTm2kHj5bKuvcYo5u1hniurBzMI.mft (raw, json)
Hash identifier: iiba7NAaDyM3TTLJ+nFgppCaVWvlfEeRxoQkYGZaSLk=
Subject key identifier: 36:76:31:33:30:A6:B7:48:89:2C:57:3C:19:80:26:6A:CA:EE:62:B5
Authority key identifier: 71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2
Certificate issuer: /CN=7139b69078f96cabaf718a39bb58678aeac1ccc2
Certificate serial: 0199228CB57C873865DB4147C24CDF554F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
Manifest number: 106C
Signing time: Sun 07 Sep 2025 05:01:10 +0000
Manifest this update: Sun 07 Sep 2025 05:01:10 +0000
Manifest next update: Mon 08 Sep 2025 05:01:10 +0000
Files and hashes: 1: PYsPgn9EIHR5AYha-d_1rxDJZs0.roa (hash: QRdgsHwd+qGrv8yp41/SIFOyI0EFbmqDBRqqwNJuLIY=)
2: cTm2kHj5bKuvcYo5u1hniurBzMI.crl (hash: c3as8q6hAO6MEiW4g1miSx2UjW9peOwb2Nb6LRm3XhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:b5:7c:87:38:65:db:41:47:c2:4c:df:55:4f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139b69078f96cabaf718a39bb58678aeac1ccc2
Validity
Not Before: Sep 7 05:01:10 2025 GMT
Not After : Sep 8 05:01:10 2025 GMT
Subject: CN=3676313330a6b748892c573c1980266acaee62b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:a2:57:28:9e:17:b9:ff:a2:54:ae:b9:13:
8b:aa:0c:ee:76:bc:99:95:a2:5a:fe:05:c7:57:92:
76:69:49:2f:58:47:b0:ba:d2:28:32:cd:80:f9:c7:
a4:1d:65:9c:41:e3:7e:dd:01:4f:b9:9c:74:be:4e:
9a:41:f2:ff:13:48:40:5b:24:7b:ed:6b:aa:02:63:
28:53:61:d6:d9:87:f2:d7:89:37:99:3f:e4:3e:aa:
da:a2:eb:bb:c4:b5:8e:52:1b:75:df:82:25:f6:4b:
2b:b3:03:5a:06:6e:68:f6:96:a5:62:ae:a8:92:f2:
c7:42:74:04:59:c7:59:3e:6f:b4:da:bd:8c:e4:e2:
50:7d:92:9c:af:1b:4a:12:35:00:21:94:4a:ed:dd:
24:16:34:f3:58:8f:26:c9:d6:de:83:39:38:85:62:
6b:3b:8d:9c:69:50:e3:c9:d1:1f:45:50:9e:c7:6b:
d1:85:a4:c0:53:81:e4:25:9d:95:5b:8e:14:7f:29:
7f:8f:ed:a9:bb:b0:b8:71:cc:c6:eb:bd:0a:2b:76:
03:77:d5:9f:60:79:25:45:e6:40:f5:f2:02:88:57:
aa:3f:28:01:7b:50:2c:e8:15:87:cd:7c:6e:0b:85:
51:f2:d3:cc:65:26:58:dc:c1:8d:48:4d:d0:b4:f3:
89:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:76:31:33:30:A6:B7:48:89:2C:57:3C:19:80:26:6A:CA:EE:62:B5
X509v3 Authority Key Identifier:
keyid:71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4a:d7:fa:f5:f8:50:bd:23:b2:fd:c0:1e:0e:cf:2d:77:ef:
aa:73:e8:3b:19:65:5b:d0:10:6d:ab:8b:65:dc:fb:15:ca:c9:
61:83:37:a1:a8:7b:1f:39:8c:d4:70:da:1a:7d:2e:a0:4e:ee:
02:4e:6e:75:7e:d0:bd:40:56:1b:97:5b:9f:d5:4b:03:7a:54:
00:81:be:be:4b:bc:26:fe:6e:4e:b0:98:c6:3b:1a:9f:19:31:
ab:96:72:cc:be:95:51:7d:60:6b:00:92:95:6c:67:f1:b2:ee:
42:d0:a8:70:8a:32:81:a9:bb:91:62:ec:3e:6d:7e:f7:65:a6:
17:51:06:13:18:ab:1b:e5:fd:fe:1e:2e:9c:25:54:df:af:4d:
92:db:3e:d7:6b:c4:a2:4b:a6:3e:3a:3c:29:8e:d2:68:cc:c5:
f4:08:5a:7f:8c:ca:34:c1:f4:d8:81:f9:46:44:a6:65:72:77:
58:1a:77:a7:50:52:a4:7e:6d:8d:56:ea:2b:b7:e1:53:04:66:
5e:c1:5c:64:70:34:07:94:38:8a:e3:c4:12:4a:8b:a5:63:38:
84:46:da:40:a9:cb:a6:b8:92:0f:e8:d9:29:66:7c:2c:f2:76:
1c:f2:68:44:b8:24:60:58:d0:e7:da:e6:ab:e7:00:0e:fe:89:
15:80:8a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:19 2025 by rpki-client