Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: Y5lmYiyG85SUOXHOvSvVbmgELe415QA+TQK+GA3CAvI=
Subject key identifier: 07:A8:B6:93:66:6D:A4:26:29:61:F8:72:20:3D:FB:94:2E:6F:11:7A
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 0198741958D63AD84E57903F5D8EB213597C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 08:01:14 +0000
Manifest this update: Mon 04 Aug 2025 08:01:14 +0000
Manifest next update: Tue 05 Aug 2025 08:01:14 +0000
Files and hashes: 1: 0qa8r-MxNMLt6tCXa-K5V6QBkro.roa (hash: oU+YFw1zeHKoa31/el8AmGzlkf3ldrnYHs0Qc542gzw=)
2: 2s9R-8NKLGYziws7CzdBBuI05qY.roa (hash: 8cPZV8bL1izy9SNqvDNd1+gha6xq2vYnb61KexJW8KE=)
3: 8trwTS6zWWIc2CXU2a9uB3EK1CE.roa (hash: cB6Sm/NTvhdg/vAHTGU6288+fVcpUIfblu8fCuXy72c=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: QpcY0kvU8rLfCB1XHyuWLY7ou1+utNkWaZSPuyGeuoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:58:d6:3a:d8:4e:57:90:3f:5d:8e:b2:13:59:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Aug 4 08:01:14 2025 GMT
Not After : Aug 5 08:01:14 2025 GMT
Subject: CN=07a8b693666da4262961f872203dfb942e6f117a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:75:a0:58:0d:ff:cd:5d:b5:3f:26:fe:85:da:
36:14:eb:42:12:4d:ab:f5:77:4f:43:46:e3:3b:6d:
46:21:fa:95:b2:9f:72:bb:90:ec:91:f4:fd:7e:a6:
8a:d4:89:a1:b8:34:7e:c1:9a:e5:ce:87:3f:fb:f3:
7c:5e:3c:9b:9f:69:4f:00:4e:97:dc:1b:57:d6:2e:
b9:5c:66:ea:a9:04:64:4f:4e:2a:61:be:a8:88:9c:
ea:68:1a:46:9e:26:1c:66:a5:c8:1c:0a:80:71:0f:
65:e7:ca:48:51:2d:85:d7:3f:22:6e:66:3b:1d:c8:
e4:82:c2:e7:93:24:8f:4a:1a:95:52:45:90:e2:f8:
89:96:ab:a4:72:ea:0d:f4:95:1b:63:40:53:c8:c4:
7b:eb:a4:71:8f:4b:6b:c0:63:b8:5f:a2:37:2f:05:
0c:68:a2:60:58:b6:a0:8f:a8:d8:1f:04:12:fd:60:
5b:5c:41:51:0d:14:2d:32:9c:46:c3:49:a6:94:44:
79:03:1f:63:f1:50:da:a2:99:be:63:92:91:91:1b:
73:a6:a4:e5:21:fe:c1:1c:ca:1f:10:ea:cc:1d:85:
28:92:f0:b5:91:d1:5e:64:b8:17:d1:53:4f:80:19:
77:36:d2:74:b1:89:82:77:56:94:27:65:dd:03:eb:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A8:B6:93:66:6D:A4:26:29:61:F8:72:20:3D:FB:94:2E:6F:11:7A
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:08:b4:aa:5b:74:0c:86:02:26:b7:37:9b:35:de:0e:9f:9e:
31:08:c3:1b:ba:36:5b:1c:b0:1f:be:32:ba:d8:80:2a:a9:68:
44:b3:69:9e:e4:0a:35:d4:ff:57:27:a5:53:87:bb:ae:66:39:
3f:a8:79:90:8f:48:d0:4c:95:52:e6:07:58:b8:3d:da:97:51:
b3:c7:79:0f:be:87:88:93:81:c7:8d:ea:44:06:a3:3b:e3:f8:
06:9a:d6:34:cd:98:cc:12:ad:4b:ec:57:85:2d:99:c1:22:76:
e5:d0:0d:93:74:25:5c:c0:80:8e:3b:40:eb:ba:40:d4:10:19:
bc:89:77:ae:00:cc:4e:06:cf:64:b5:39:a7:cf:1a:b3:26:af:
76:45:d0:8e:b6:90:a2:36:44:45:bd:6d:a6:7c:28:4a:c4:78:
7c:06:e3:0d:de:fc:12:e7:ba:7f:4f:64:5e:53:e2:e1:9d:d8:
0f:5a:f8:3e:87:35:67:9c:0d:22:5a:41:e6:3b:bf:44:d2:98:
2f:a1:64:75:80:7b:29:d7:0c:5e:2d:13:29:c8:f7:ac:b3:87:
0e:d5:a1:d6:f1:ba:fc:0e:3d:24:05:ee:4d:67:fa:23:1d:8c:
a4:b3:83:3c:08:dc:85:91:2e:07:fd:bb:cc:37:1e:8d:e2:e6:
db:02:ab:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:11:39 2025 by rpki-client