Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
File: t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json)
Hash identifier: KFvTDiaiWmIzfHUTYdG8FWNp1DmlbeaV/esoNEHIO9w=
Subject key identifier: 85:3F:7D:6C:EA:48:11:44:92:D7:19:1A:AB:17:BE:C1:A0:00:AD:1A
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial: 01989034A29A2D574FB39851CE0EEC740A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
Manifest number: 0E96
Signing time: Sat 09 Aug 2025 19:00:24 +0000
Manifest this update: Sat 09 Aug 2025 19:00:24 +0000
Manifest next update: Sun 10 Aug 2025 19:00:24 +0000
Files and hashes: 1: StPgXcpmiy5JYaEeTseShVrOOPw.roa (hash: 2TP419yQVLSPbiDET0BATqZqoaVVJJbtbUq/1dj+vY4=)
2: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: L3VbdwY9XA90os89SptgWsdKV4qZnAX5rwZcD0A4Nf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:34:a2:9a:2d:57:4f:b3:98:51:ce:0e:ec:74:0a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Validity
Not Before: Aug 9 19:00:24 2025 GMT
Not After : Aug 10 19:00:24 2025 GMT
Subject: CN=853f7d6cea48114492d7191aab17bec1a000ad1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:c1:34:31:6c:cd:81:de:23:52:a0:e9:8b:
d2:0b:bd:9c:04:39:66:0c:0a:40:5d:9e:1e:6b:e1:
1c:34:b9:02:06:60:15:6b:11:ab:97:6e:71:93:d5:
96:64:f4:1e:2d:8c:d1:fd:1c:93:1b:7e:45:f7:3b:
2d:1f:8c:f8:b2:d6:5d:f0:87:78:96:4a:35:6e:a9:
99:d3:58:94:b8:52:34:6e:48:d1:a3:c9:8d:e5:a7:
17:0e:0f:f9:ef:b0:28:15:6f:8f:11:22:96:6a:b1:
d2:34:6d:10:3e:fa:71:a0:01:08:ea:36:86:04:41:
a6:db:79:bf:10:5a:02:d1:51:2f:41:5e:4a:04:1f:
f4:c9:00:0d:d9:ff:85:9b:af:8d:db:98:da:6e:2f:
55:e7:1c:9a:04:49:fe:51:d3:f2:0f:15:d6:c0:a8:
32:55:07:6e:fa:93:4c:c7:1f:31:02:57:62:16:5a:
14:7f:e7:ac:c8:b3:bf:91:1a:aa:c8:9d:9a:60:6f:
84:5b:7b:49:0a:83:4a:e9:7b:bf:45:79:0c:46:88:
c6:48:05:f0:d1:d8:3f:43:df:b2:61:fd:f7:6d:e2:
11:4e:b2:aa:37:bb:cf:fb:99:4c:e7:b5:36:e7:f2:
c7:d4:8e:98:cd:31:13:74:e0:c5:9c:c2:31:19:8c:
36:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3F:7D:6C:EA:48:11:44:92:D7:19:1A:AB:17:BE:C1:A0:00:AD:1A
X509v3 Authority Key Identifier:
keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9f:57:e5:14:69:e4:c7:5a:b3:ea:28:dc:86:fe:6d:94:22:
17:50:2b:6f:75:e2:96:d5:3a:3f:76:bd:67:88:45:08:88:24:
55:0d:1f:35:4d:97:17:24:c2:b7:08:e9:2f:16:b4:4c:95:f4:
e9:1d:c7:77:ba:d8:c9:63:a5:a2:7f:48:0a:de:8d:88:c9:a1:
b0:4c:c3:d4:b8:a9:88:a5:0b:37:23:8e:1f:b1:f0:fa:88:c5:
d6:b9:99:52:e9:91:28:36:e3:44:a7:12:a3:f6:7c:a7:d9:b7:
eb:a7:5d:73:81:ca:d4:ea:ea:d5:8a:58:38:b5:e8:df:77:bb:
db:af:9e:00:dc:34:d6:98:8d:7a:d7:24:86:6e:76:e5:11:d2:
fb:15:7c:c9:b0:f8:4c:cd:a3:f4:91:bf:d5:da:2f:be:f4:7f:
e0:a2:e3:8c:fd:d1:41:04:62:71:fe:f7:dd:ca:54:06:8a:7b:
9a:ba:17:76:2e:0b:d6:1c:59:a9:37:39:61:ee:ec:f6:c0:85:
07:12:85:e1:59:e5:4a:3d:e0:2e:26:c5:41:51:3c:27:da:dc:
ee:f6:dc:26:8a:ec:d3:45:27:c6:27:ca:5f:ee:0e:4f:7a:09:
83:7f:6b:66:6d:64:6b:d7:72:09:94:cf:26:9e:06:54:04:de:
d1:2a:3a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:44:42 2025 by rpki-client