Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
File: rrC3d_U3e7HFBlOISwPifc3ugo4.mft (raw, json)
Hash identifier: MAIA08CuwrAI48nK9qI7SN65Po1dOLTMeel4MWEq0UI=
Subject key identifier: EF:5A:CD:A1:72:C1:16:13:DB:C0:27:EA:6A:02:93:C7:E0:90:A4:1A
Authority key identifier: AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
Certificate issuer: /CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Certificate serial: 019879AE6542DFE509D890A467CCF650F3D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
Manifest number: 0579
Signing time: Tue 05 Aug 2025 10:02:08 +0000
Manifest this update: Tue 05 Aug 2025 10:02:08 +0000
Manifest next update: Wed 06 Aug 2025 10:02:08 +0000
Files and hashes: 1: JNkggvQx74p1btfiu-ncCk_cuvY.roa (hash: 3PlXzxEghXwRv2XVfxrZveNHTFUHK5O1XcLko9Bh3BM=)
2: iSXPGWrVDYVIEVR8cfFQwv7cBmw.roa (hash: X1bVncWHKP3XqHjUIeZ8VnviT3EO8UdWO3uc8hgbwFQ=)
3: o6055-b-qPzQTA0F_ST-9FEVVmE.roa (hash: g8Jxoy+mBwRsosu9yvKdAVg8QP3DZnBB7YPvuPjdGU4=)
4: rrC3d_U3e7HFBlOISwPifc3ugo4.crl (hash: YNO/zmu81DCkA6IB2OBrKRyOmfw+bCm9IOIg94wUyFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:65:42:df:e5:09:d8:90:a4:67:cc:f6:50:f3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Validity
Not Before: Aug 5 10:02:08 2025 GMT
Not After : Aug 6 10:02:08 2025 GMT
Subject: CN=ef5acda172c11613dbc027ea6a0293c7e090a41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:dc:4f:6e:6f:3f:00:47:c1:11:2b:66:84:
18:04:94:8f:6e:74:bc:58:42:22:66:96:b7:1f:03:
a9:fc:89:ed:df:63:04:71:67:05:a9:29:d3:58:59:
43:d0:4e:aa:b8:32:de:68:2d:bb:4b:85:14:6c:e5:
52:cd:33:aa:5a:73:b1:f2:fa:ff:bd:45:d9:c3:eb:
d6:0e:12:ab:29:51:1a:36:cf:0f:7c:e8:43:c5:0f:
ed:10:87:89:40:79:8c:b5:72:37:91:c9:b7:61:40:
fd:8e:77:98:c7:17:48:2d:0a:91:93:3b:7b:90:ef:
73:46:27:a6:ba:32:53:06:c1:4b:84:66:97:ad:5f:
1a:1d:e6:cd:94:09:75:53:bf:f9:cc:cb:be:2e:63:
ce:af:4b:b0:58:47:66:d0:3e:a3:62:8b:bf:9d:eb:
90:12:3c:1a:10:72:02:5a:53:c1:71:5b:e0:bc:29:
6d:48:c5:f7:62:54:90:fb:f4:44:1b:d8:2b:11:ed:
d3:37:bd:8e:63:32:f1:e8:fb:01:a7:01:d9:28:98:
0d:88:cc:eb:fb:32:db:f6:ff:c8:d8:97:bc:0f:4b:
c8:cf:6a:18:2c:79:16:42:b2:ae:02:43:94:82:06:
e9:ad:4d:63:c4:73:61:b7:ff:20:17:43:a8:29:b7:
7c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5A:CD:A1:72:C1:16:13:DB:C0:27:EA:6A:02:93:C7:E0:90:A4:1A
X509v3 Authority Key Identifier:
keyid:AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0b:ab:47:c1:2f:db:9d:d7:43:53:95:39:a4:c1:56:69:6b:
f1:97:ed:24:e3:3b:e1:c6:4b:f6:64:ba:7f:94:6d:00:9c:86:
e1:fb:1a:44:3a:35:87:a0:a0:7e:14:24:83:6f:d3:e8:0d:e9:
f9:6c:a6:a0:df:3d:cc:49:2c:f7:e0:7b:73:cf:a9:6c:d4:9d:
db:84:7d:23:71:7e:cd:e3:04:e8:4a:b4:d0:53:ae:85:d5:56:
f7:85:26:98:35:00:ea:1d:23:48:17:23:5b:79:06:30:39:a5:
f0:fc:31:79:d5:c4:d8:e5:0d:29:09:40:e9:74:42:3c:13:f4:
f7:bb:45:02:f6:01:38:de:b5:62:db:ec:cf:16:47:c4:03:b5:
31:51:d8:75:1e:fb:51:3f:fc:88:bc:2c:59:b0:b7:68:45:c1:
2d:d2:43:9e:cd:a6:d1:1b:69:bc:5a:e7:42:e0:5c:c4:63:33:
13:7c:fb:58:3c:91:68:0b:71:ff:c8:57:ff:b1:51:5e:f7:2b:
37:f4:64:22:c2:94:24:25:16:4c:76:1f:e7:62:e8:a5:92:35:
0e:d4:ad:4a:2e:d2:58:44:ee:26:50:d2:c7:a1:f3:86:2a:fc:
fc:cd:f6:09:e5:6d:37:50:69:1d:f2:f1:75:80:3e:b4:37:e1:
3d:39:60:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:25:15 2025 by rpki-client