Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
File: 977TP_AejgncT-3NAROcDneFSq4.mft (raw, json)
Hash identifier: t53Kl6uPSBQNhX+KgxwBRB70MKYDZ66e+YBmQfgqzQk=
Subject key identifier: 11:5F:FF:4A:FE:F1:11:C8:E3:C2:99:49:6B:C6:44:83:87:9F:E4:5A
Authority key identifier: F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
Certificate issuer: /CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Certificate serial: 019873AACEC44305251D6DCF4FBD28BCF539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 06:00:30 +0000
Manifest this update: Mon 04 Aug 2025 06:00:30 +0000
Manifest next update: Tue 05 Aug 2025 06:00:30 +0000
Files and hashes: 1: 977TP_AejgncT-3NAROcDneFSq4.crl (hash: /tfIA1pK6YCmrBQxJ+OxY8tKI2RuRDIy7PTdtkvtkQE=)
2: JjcLZGuyLgIo7sscNe1lTXgQ2qw.roa (hash: yov5t9IzlLULjVQIxilX737IcyMMJjqyKN9F9q8eIZo=)
3: _lgnGISO0ktGS-TS3jHHuxqlGcc.roa (hash: 2bgXxxG8FQEtolmgRr2kuRhZKybBJ/pEC6iODZDta6M=)
4: yIVyJLl1EpKKS9GoVS2g6EtcfKo.roa (hash: +BexIZ1+iniEPsBZlKynSCHhy877ZiICabmi/L0fbr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:aa:ce:c4:43:05:25:1d:6d:cf:4f:bd:28:bc:f5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Validity
Not Before: Aug 4 06:00:30 2025 GMT
Not After : Aug 5 06:00:30 2025 GMT
Subject: CN=115fff4afef111c8e3c299496bc64483879fe45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fd:c7:41:d4:68:93:f5:5f:7c:42:97:89:83:
fa:cb:72:e5:e5:5d:6d:b4:2d:05:23:94:8d:1b:55:
01:fa:69:77:76:dc:dc:e9:6a:c2:97:02:34:7b:a1:
1c:66:9f:10:ee:22:b5:20:8a:6c:9c:0d:9a:dc:bf:
c1:02:42:be:f9:59:72:ed:11:2e:2a:d4:60:51:f5:
ef:d6:e9:8b:4a:9d:f0:ad:9f:6c:e3:35:e5:cb:1c:
3b:d3:49:aa:49:3d:f9:67:1c:a6:a1:79:ba:0b:72:
df:41:30:b5:8b:12:61:5d:77:63:fe:f9:3a:63:e7:
ba:07:33:4b:47:58:97:26:64:53:f3:c6:52:47:98:
1a:3c:ba:3a:32:fa:12:e0:1d:41:50:af:e8:c9:90:
30:4c:2b:c5:df:d9:97:13:b8:9d:a1:53:34:5c:bc:
92:51:d7:e0:9c:58:95:bb:29:1a:80:12:39:80:11:
98:b4:97:e6:6b:97:24:3a:4f:5f:92:91:14:cf:f2:
25:6a:cb:ff:bd:39:fe:1a:fb:9a:20:fb:d4:6d:53:
79:8a:aa:ae:ed:85:54:0b:71:20:dd:24:5e:f7:5a:
23:51:5a:27:1f:24:8f:4b:c1:bb:bb:24:d2:b4:1c:
4b:0b:4a:65:44:b6:10:f7:2e:c4:8e:2b:69:db:64:
98:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5F:FF:4A:FE:F1:11:C8:E3:C2:99:49:6B:C6:44:83:87:9F:E4:5A
X509v3 Authority Key Identifier:
keyid:F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1d:0b:2f:b8:de:2a:fb:60:11:b5:23:06:82:37:da:5a:0d:
08:a9:69:6b:19:e6:42:90:0e:2e:49:c2:3b:d6:50:ff:ea:06:
92:9e:59:e2:fd:7f:4e:ef:04:ff:4e:74:fa:ad:75:a0:01:51:
c2:f5:85:c9:1b:86:97:2d:c7:0c:3f:02:4f:63:b5:19:0c:06:
0a:38:a1:97:ca:6c:f1:65:cf:b5:fc:ee:20:60:f5:13:06:21:
77:9c:3d:75:ec:9d:f9:3b:37:56:0b:6b:2c:1b:b7:12:d8:08:
ef:87:91:7f:f3:51:23:b8:42:94:42:49:2d:56:f8:25:9e:26:
2a:bf:90:1c:64:b1:a9:61:da:1a:89:61:cf:29:63:75:2b:e3:
18:e7:47:48:0f:56:59:7b:d2:73:9c:e2:7c:f9:a8:b2:39:6f:
dd:fd:61:58:b5:32:f1:30:97:4f:23:05:19:77:a8:1a:82:bb:
89:76:8a:5b:b3:f5:d1:ab:72:95:45:17:a5:fd:d5:8e:21:a8:
6e:85:d2:3c:4f:b4:c2:1f:94:0f:4f:e6:f0:b5:c7:be:bd:3e:
5a:5a:4a:48:ec:98:bb:27:6e:56:01:c7:71:90:1d:44:10:15:
62:ed:9c:a2:d2:2a:94:eb:9e:5a:4b:2d:1e:87:44:6d:fb:7d:
c5:65:3d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:19 2025 by rpki-client