Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
File: cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json)
Hash identifier: afBvOVzY2EK0EC42grKR0pqvMxcrOZJ+jifThFdzgcg=
Subject key identifier: 25:13:84:94:80:1C:F0:61:59:77:C0:EE:2A:85:17:E4:25:14:A1:76
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial: 019879AEF2A0017646979EBC33AD530953FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
Manifest number: 0C81
Signing time: Tue 05 Aug 2025 10:02:45 +0000
Manifest this update: Tue 05 Aug 2025 10:02:45 +0000
Manifest next update: Wed 06 Aug 2025 10:02:45 +0000
Files and hashes: 1: 1bCVWoklxu9pgUWQ1mLHB-EXkFA.roa (hash: D3wGeYBSZH8FYHWMq5xGTReS6aaUmIPr/PoC2v0b+3Q=)
2: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: ngl3O52SoXnKgI8/7A08OLV+WHvCbup7DliPfvpPN2Q=)
3: vpqI0SPiMCscv2APIfDksYTh41I.roa (hash: hkscOp/XUtYy+TgoXBDOQozFrFzTsJ23rQpXU2E0uBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:f2:a0:01:76:46:97:9e:bc:33:ad:53:09:53:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Validity
Not Before: Aug 5 10:02:45 2025 GMT
Not After : Aug 6 10:02:45 2025 GMT
Subject: CN=25138494801cf0615977c0ee2a8517e42514a176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:86:89:3a:49:42:f3:b3:c4:50:a9:41:41:40:
9b:9a:f2:0e:bb:3b:7d:32:6c:d0:38:22:88:43:2b:
08:d2:dd:c6:bf:c7:ab:27:b7:c5:07:ca:23:84:86:
5a:d1:5a:c4:c2:c4:ff:8f:65:58:b5:51:35:38:07:
48:a1:b1:ac:d8:f1:8f:bf:e8:b5:c7:4a:c3:04:cd:
0a:89:76:ab:cb:9a:04:3f:26:1e:04:78:7a:1f:3c:
31:e7:0b:3f:82:b7:c9:5d:f4:c0:72:49:af:5e:a3:
6a:a1:62:cf:47:46:84:68:ff:f4:10:5c:07:af:14:
98:48:b7:7d:9c:4c:49:96:c7:70:ff:08:db:b5:42:
43:d1:3b:49:7d:90:61:60:7e:2b:88:47:45:22:a4:
c8:6c:1f:2c:36:b5:36:f5:ef:14:e6:4c:9d:ad:1c:
52:05:97:e4:63:62:71:bb:66:59:fd:ec:3b:46:db:
b6:67:53:7d:2c:66:51:89:fe:d8:ab:50:69:c6:f7:
20:03:bc:21:1a:86:de:e2:56:11:24:d4:b6:fb:2d:
aa:c2:28:23:ea:c1:c5:80:5d:a7:eb:8a:70:a1:db:
72:87:fa:e5:48:c1:0f:a6:f3:ad:c4:81:28:48:36:
69:f7:85:6a:cd:38:dc:e3:c0:f1:09:12:61:73:94:
5b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:13:84:94:80:1C:F0:61:59:77:C0:EE:2A:85:17:E4:25:14:A1:76
X509v3 Authority Key Identifier:
keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ca:01:02:0a:a5:eb:d9:c1:20:dc:d3:88:5d:e3:6e:29:1d:
2a:c5:28:15:eb:61:88:2c:c2:89:29:e2:58:13:8d:89:68:5f:
17:99:d1:55:2d:97:e8:f8:d1:b9:a7:ff:c0:29:63:5c:4a:d2:
81:80:0e:d7:b7:78:79:c8:b7:d1:59:1b:0a:b1:85:47:33:ca:
26:ca:81:9b:12:48:5c:7b:80:2c:3a:13:5b:68:9d:33:e8:54:
38:23:81:97:c3:f0:97:32:0f:c7:6f:26:c7:c1:eb:16:18:a3:
c7:40:61:9c:39:ae:8c:cc:9c:60:1a:c4:d8:8b:d3:65:67:e5:
03:ea:b0:97:79:38:7f:43:69:b0:73:e2:98:e7:a5:ea:13:1e:
fc:cc:3a:0f:5a:2f:74:36:0b:b0:ba:89:ae:5e:72:8b:5d:df:
68:b8:3d:73:5a:20:e3:b5:c9:34:fc:64:7a:31:c2:cb:27:02:
9c:64:7f:27:bb:79:be:9d:42:16:b1:bf:00:e6:9c:e2:d3:8c:
78:74:61:ac:ba:9e:ca:a5:17:3c:5b:41:ac:37:51:7d:0f:58:
59:95:83:4d:ee:b0:b9:3d:7d:03:ce:0d:1e:37:d3:b7:f6:b7:
71:95:3a:68:41:fa:d3:bf:7b:ed:36:b0:46:c4:e3:fd:b3:21:
b5:84:f4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:17:37 2025 by rpki-client