Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
File: 12b8bxuOK2BPf7c8Kf1daJoOqB0.mft (raw, json)
Hash identifier: ocWpcbK9bRQGMme6uj/X01nm1yhl6tasVTk9RManLQo=
Subject key identifier: 7A:34:7C:F8:4B:78:EA:20:1C:FC:2C:35:1E:A3:39:52:7C:61:2F:3E
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 01987C773E1C0B3833E9A2464566A4A9862F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
Manifest number: 162A
Signing time: Tue 05 Aug 2025 23:00:46 +0000
Manifest this update: Tue 05 Aug 2025 23:00:46 +0000
Manifest next update: Wed 06 Aug 2025 23:00:46 +0000
Files and hashes: 1: 12b8bxuOK2BPf7c8Kf1daJoOqB0.crl (hash: Idrdt3FgG6DyoVDuJk3xgy/Ng4/EtwgwdrfJa8y2Urg=)
2: qGuTXxX3KPPGE7gornZUmtCgXus.roa (hash: hoxbUVU+eahUxnAmZd8qLyauIUnjncf8aJqcwbWkeXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:3e:1c:0b:38:33:e9:a2:46:45:66:a4:a9:86:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Aug 5 23:00:46 2025 GMT
Not After : Aug 6 23:00:46 2025 GMT
Subject: CN=7a347cf84b78ea201cfc2c351ea339527c612f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:dd:56:e5:5b:59:ef:06:17:c5:88:15:a6:
f4:45:cd:6e:ef:8f:48:f7:c0:3a:f8:07:cf:b0:2e:
9f:3a:7f:9c:e7:fd:dc:f8:63:8f:0e:f6:38:b1:e8:
21:5b:79:02:c8:9c:c4:7a:13:8e:86:10:e7:63:9e:
2c:4c:6a:54:32:b2:72:f5:5e:f0:45:2f:4e:0f:3a:
cc:56:90:4a:8d:4f:3f:e4:eb:fc:5f:45:fd:18:9a:
7b:ad:c6:04:d5:75:6d:23:09:61:98:b0:6c:8d:04:
04:82:88:3d:41:29:67:c4:90:f4:ca:93:e8:79:61:
39:10:ac:79:f3:f9:24:2a:a3:cd:d5:ad:eb:68:05:
9a:61:78:bc:d6:b5:71:85:b9:26:a6:35:fd:6a:70:
3d:14:eb:8a:fc:4c:fc:78:ca:20:8a:08:11:d9:5d:
6a:fb:e4:6a:fd:ed:53:ca:26:88:14:45:16:15:eb:
4c:6f:0d:8f:a7:0a:c3:52:06:98:92:cc:2b:35:7a:
15:a5:c8:0b:35:76:16:f4:fc:02:72:50:c1:1b:57:
f2:39:91:51:1a:c6:b1:94:0d:e6:5e:57:39:ad:5e:
f5:6b:5b:90:a3:54:97:a2:6a:e3:5c:15:37:48:ea:
12:b6:0d:84:30:cd:2f:bc:e7:2d:16:b4:4c:8f:0f:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:34:7C:F8:4B:78:EA:20:1C:FC:2C:35:1E:A3:39:52:7C:61:2F:3E
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:72:30:19:a2:bb:71:3f:7b:68:bf:21:a5:a2:39:e0:46:c2:
90:7f:be:28:31:04:78:6a:fd:a4:41:be:76:5e:4c:56:5e:07:
5d:d7:ea:86:34:4b:64:51:3f:34:f0:f7:ab:e2:f7:f1:a3:29:
1c:35:16:f8:3c:b5:c6:b0:b0:12:2e:70:54:46:e6:a4:00:36:
ea:d7:eb:bb:d3:70:bd:25:a5:3d:14:f3:ab:59:49:8d:c7:52:
e4:6a:c6:94:9f:af:ae:95:f7:15:7f:c8:ac:18:86:01:b0:8e:
38:89:c9:47:a7:3b:3d:ef:d1:8f:1f:17:4c:17:5b:09:ac:6f:
4b:0d:10:28:a1:05:2f:0b:63:81:bd:9c:4e:2e:9a:94:0f:53:
9c:36:ce:ff:5c:6d:4f:f0:c2:75:00:db:53:f9:58:85:dc:0d:
56:c0:d9:d3:62:22:d0:a6:60:15:18:2c:57:d9:d9:b6:03:aa:
3f:cb:70:98:14:d9:d7:75:e9:e3:8e:fd:f0:2d:1e:73:f4:a6:
e2:83:56:e3:0e:03:e2:2c:5f:57:53:30:36:92:0d:5a:23:da:
00:7b:13:ba:55:b9:33:9a:68:c1:35:57:ba:e7:6f:04:87:a4:
e5:b3:98:ac:f8:6a:75:2a:7d:07:a9:36:f5:e4:54:3a:43:f1:
3e:91:6f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:11:47 2025 by rpki-client