Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
File: ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft (raw, json)
Hash identifier: 3kuxYRF/ZzkGcll6VDE7nPa5GaIbKwdOg1eFEoaRpnM=
Subject key identifier: 3A:1F:72:9D:3B:7F:D1:EB:09:E0:77:BE:AA:B3:7D:74:FF:49:B1:16
Authority key identifier: AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
Certificate issuer: /CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Certificate serial: 019872D00134EAD0B1F00C72B9A7D48900A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
Manifest number: 0B12
Signing time: Mon 04 Aug 2025 02:01:31 +0000
Manifest this update: Mon 04 Aug 2025 02:01:31 +0000
Manifest next update: Tue 05 Aug 2025 02:01:31 +0000
Files and hashes: 1: TK8oRVgmC_iGkqpkIUxL12Jskyo.roa (hash: WWQSgn1wOK2i+o7wtaeqJibMN9Pjr41qBXdRO7I04u0=)
2: Z6cP8UU8ou5UZa2tgmGF-TWXv7o.roa (hash: 4wKWfKiX6etE7Y85veoMkmwG3aEsU0NvUo1kjzyAViY=)
3: kcWTfdAykr4V6or-J5DNrcGjkPY.roa (hash: ogmpuXD/e22gpKD4xD0G9j8Nblm4BJXQE5obj3J5Qcg=)
4: ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl (hash: kGYIS9JGHnMHqDDmCgkpXGqNnHouT1+b6L8caB3sUk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:d0:01:34:ea:d0:b1:f0:0c:72:b9:a7:d4:89:00:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Validity
Not Before: Aug 4 02:01:31 2025 GMT
Not After : Aug 5 02:01:31 2025 GMT
Subject: CN=3a1f729d3b7fd1eb09e077beaab37d74ff49b116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:cd:60:36:0b:b9:ba:b6:f6:f0:41:b2:e3:
a6:c0:c2:8b:cf:54:78:9a:5d:16:a7:45:51:da:7a:
25:f9:e9:53:9e:f3:95:ed:33:38:35:25:4b:df:46:
b1:93:96:f6:6f:2c:f5:0d:f7:9f:a5:b6:ff:2c:17:
2a:47:5a:83:b8:1a:90:3e:81:16:c4:c1:da:19:84:
bb:2e:bf:18:fe:df:89:1e:92:97:0e:3a:db:92:1c:
a5:00:9e:d2:6a:84:e2:f0:3f:01:a2:5a:e8:70:28:
8b:f8:25:b9:f8:1d:91:13:c8:a7:3d:e7:81:ef:72:
11:3b:ec:3e:02:b5:e0:bd:54:eb:54:85:28:0e:41:
2d:59:f0:cd:6c:b1:a4:87:72:9f:42:6a:18:30:ba:
fe:b7:0a:7f:65:68:d1:2e:15:ff:0b:10:4d:0d:24:
36:bb:db:86:00:eb:18:34:ed:de:3e:8d:0c:18:ad:
c7:8a:ae:4e:e2:c6:88:dd:0f:e8:bb:83:d1:11:bc:
4b:cd:7b:10:6a:23:d7:6d:a1:51:44:1c:a1:51:90:
07:0d:17:7e:08:98:30:c4:05:f9:cf:c6:f6:fe:90:
9a:de:2d:d8:d3:8e:5c:ae:98:f5:e8:e3:8c:1d:c8:
d8:af:95:7a:55:f4:f8:80:ef:6b:75:d4:78:1e:df:
b4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1F:72:9D:3B:7F:D1:EB:09:E0:77:BE:AA:B3:7D:74:FF:49:B1:16
X509v3 Authority Key Identifier:
keyid:AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:93:80:b9:43:94:99:a3:41:b0:fb:66:cc:d8:0d:6d:25:bd:
b8:81:7a:a6:08:cc:ba:fe:24:0b:90:7e:74:5e:d1:99:31:f4:
1f:f4:28:1a:e3:5c:bd:89:7e:6a:d6:17:c2:c8:e4:3c:9d:0b:
68:2c:90:d7:ef:29:1d:60:ff:cf:41:91:ef:14:2b:ad:67:a8:
03:f1:c3:8c:78:e8:22:be:f2:cf:36:5c:7f:07:dc:ae:64:68:
29:99:e1:6d:93:91:16:22:c2:b7:e8:cd:f6:c3:6b:5a:f4:15:
26:6f:89:6c:e4:03:c1:62:bd:99:e6:0e:a2:9c:88:6a:ac:43:
5b:a9:8c:3b:2d:d5:9e:df:9a:82:26:38:9d:6c:5d:d6:85:d3:
53:9c:2c:d3:a0:11:9e:26:6c:a0:8e:5f:68:16:9c:bf:9f:0c:
7b:c6:4c:66:7e:f8:cb:ad:1f:f2:8a:ee:be:99:42:52:ea:e4:
69:5b:0e:72:8a:05:12:72:c4:d3:b7:40:53:ef:02:4d:8b:2a:
ad:ce:5e:00:ec:59:5c:16:b7:62:51:7f:9a:b5:ab:7a:07:5c:
cc:46:88:3b:18:b0:da:96:1f:f8:6a:43:ac:96:d4:8d:d4:85:
17:9e:b8:10:03:93:2c:ab:44:6f:c6:95:e1:43:96:8c:03:da:
b8:13:19:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:19 2025 by rpki-client