Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
File: t8QKdH46wazGEaTEA7YAc5jn158.mft (raw, json)
Hash identifier: B4ER+ActvACR2cGu/J+Q8bzkfb8moGPOPwrWTltcwNI=
Subject key identifier: 69:D9:FA:3B:1D:C1:63:D6:1C:F9:96:75:EB:00:9C:25:4F:84:A5:33
Authority key identifier: B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
Certificate issuer: /CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Certificate serial: 019893DB169157BB658BE3F845FC48662508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
Manifest number: 1636
Signing time: Sun 10 Aug 2025 12:01:05 +0000
Manifest this update: Sun 10 Aug 2025 12:01:05 +0000
Manifest next update: Mon 11 Aug 2025 12:01:05 +0000
Files and hashes: 1: 4k2m6oWhbCxHwu7ZoOs8FYwRSeo.roa (hash: 0X2CSeSS5EmJeG6XWlWGwSVUMGQ8gwE0QRYVBIvMpS0=)
2: t8QKdH46wazGEaTEA7YAc5jn158.crl (hash: kXW/jtcIj9UcVt///sS08AOBI2vtetPCqFd0Gp3+ULA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:db:16:91:57:bb:65:8b:e3:f8:45:fc:48:66:25:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Validity
Not Before: Aug 10 12:01:05 2025 GMT
Not After : Aug 11 12:01:05 2025 GMT
Subject: CN=69d9fa3b1dc163d61cf99675eb009c254f84a533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:40:ab:f7:3b:20:a6:ce:da:08:b7:00:b8:a5:
cb:90:f2:88:96:45:ab:d1:54:05:e1:7d:f3:bc:97:
19:e5:86:1b:ec:05:a9:67:68:62:ab:40:10:ae:fa:
40:4c:1e:f6:be:02:1a:3e:31:41:a8:4c:8b:d7:5b:
73:ce:5b:a3:73:f4:15:02:a6:c0:af:4b:ee:d6:fb:
fa:26:fa:23:b7:d3:d3:2d:ec:fb:b0:38:e7:1a:96:
4e:f5:59:2c:7d:9a:b2:9b:76:3c:00:c1:2b:ad:a8:
7b:f2:aa:d9:ad:ad:fc:07:ed:6f:7f:3f:34:e8:11:
66:23:dc:2d:ce:b4:2e:07:9b:56:61:80:0a:9d:24:
1d:2b:cb:fe:3c:5b:f5:bd:ef:05:f0:ee:a1:62:af:
ac:d7:5e:3c:f1:32:61:00:07:c5:b1:6c:92:b9:97:
31:b3:43:18:46:5f:23:b0:ce:63:b9:60:06:27:fb:
78:73:83:d9:e3:49:69:6a:75:5f:af:1e:a4:bc:c8:
f8:e3:0d:83:bc:b4:d7:3a:12:27:33:77:51:ee:1f:
fb:f7:69:f2:06:22:c1:c5:31:d5:de:11:d6:c4:54:
3a:ec:4c:e0:ab:a9:cf:c8:90:a9:0c:c5:5a:94:ba:
68:f8:f0:0f:c4:cf:bb:c9:c7:ec:58:7a:10:e8:42:
5e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D9:FA:3B:1D:C1:63:D6:1C:F9:96:75:EB:00:9C:25:4F:84:A5:33
X509v3 Authority Key Identifier:
keyid:B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:27:b7:78:8a:3c:9d:9a:48:e7:f4:bb:42:cb:f9:68:45:d2:
ce:b7:27:82:7c:7e:9d:40:45:7a:f8:1a:f8:20:51:0b:59:02:
ae:1d:d1:25:a9:ca:0b:a2:01:f9:07:b1:22:4f:99:e4:d2:0d:
10:63:e9:85:2f:2d:a8:c6:fe:29:15:38:37:40:15:a6:ee:e4:
ef:77:69:5a:7b:6d:23:62:a4:62:f8:91:cf:e0:6e:5a:93:99:
ce:20:be:85:39:7a:bb:88:5e:9a:d1:31:56:a3:a6:b8:fb:73:
3b:fd:e9:92:cd:e4:48:d1:6d:cd:8b:01:08:16:44:d2:5d:66:
08:90:19:00:73:34:24:cd:7e:92:fe:54:97:20:c1:c4:58:2e:
e1:b6:72:cc:10:48:0b:da:ba:01:9f:df:05:f2:0f:ec:e4:8f:
6d:4d:25:ce:42:ee:87:45:71:c9:1e:7c:11:dc:0d:5a:ef:6a:
84:8d:8a:ed:83:01:81:d3:19:f1:cb:a1:d5:07:ea:23:30:cc:
1e:0d:2d:6b:c5:59:3c:30:24:cf:88:70:41:98:c7:7e:2b:07:
f1:13:a7:d9:9f:7c:86:b1:ac:78:92:b9:6d:3c:f0:79:87:2b:
6f:20:01:02:c1:86:2f:cf:7b:40:d4:d2:93:c3:a4:06:58:67:
bc:28:25:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:37 2025 by rpki-client