Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
File: cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft (raw, json)
Hash identifier: UVln9ip2IhC1Ap+VKZUy6nQn5A8KhZZnkhDfc62Hlu0=
Subject key identifier: 8A:5C:4A:60:EA:F1:49:F8:59:49:8A:12:5C:EF:7C:93:E4:C7:26:10
Authority key identifier: 71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
Certificate issuer: /CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Certificate serial: 01987AC035A423AE602DB39850ABE9CB809A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
Manifest number: 0EA1
Signing time: Tue 05 Aug 2025 15:01:13 +0000
Manifest this update: Tue 05 Aug 2025 15:01:13 +0000
Manifest next update: Wed 06 Aug 2025 15:01:13 +0000
Files and hashes: 1: Y4BycvpgIPFrj5lhsii_AUvYAWw.roa (hash: brKO8LRrExe011Bv/UP5eEIq/IhdQ+O1vYEiLB6elCE=)
2: cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl (hash: JhEj2T0cGkHD+4Ua3/qhRp4EmfeKJSV57AnHoQdeDOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:c0:35:a4:23:ae:60:2d:b3:98:50:ab:e9:cb:80:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Validity
Not Before: Aug 5 15:01:13 2025 GMT
Not After : Aug 6 15:01:13 2025 GMT
Subject: CN=8a5c4a60eaf149f859498a125cef7c93e4c72610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:90:c3:cc:d6:09:0b:88:37:21:c6:cf:4c:56:
de:c5:9b:60:38:b0:b4:9f:da:76:65:d3:1c:7b:e0:
fb:8e:3a:a3:d2:bc:0f:b1:74:b7:8b:18:82:4f:c8:
c2:87:2a:5f:ef:8a:d3:d2:d3:e7:6e:32:16:84:a5:
8f:45:6f:5f:34:57:c0:ff:77:09:68:d2:4e:38:0d:
5a:1b:d7:4f:09:db:c1:a0:a1:bf:a2:ac:34:ea:c7:
b6:6d:f5:07:f9:be:65:28:7c:68:4b:dd:aa:65:74:
22:64:a9:a3:a4:41:f4:e2:a2:aa:1b:e9:5f:87:7a:
f5:6d:08:12:fd:d2:4d:fe:e4:ae:ed:37:fe:3f:e9:
53:ec:6a:3f:18:fc:a6:71:8e:ff:6f:0f:97:37:e0:
d4:6c:b0:69:0a:d6:9e:47:d1:a1:e2:31:d2:5a:20:
74:cc:71:50:22:03:6b:0c:f8:60:98:b7:b9:7f:cb:
84:17:90:47:88:3d:14:d3:49:65:ba:2f:e6:fd:1d:
e0:3c:de:d5:3d:47:eb:6c:91:e8:3a:c4:1c:3c:d9:
15:40:37:90:41:2c:fc:73:71:0d:af:75:d7:1f:43:
88:6e:cd:2d:ff:4a:fe:48:83:75:1c:18:86:e2:39:
d9:be:39:f5:ea:71:ac:3e:bb:c6:f8:d2:44:8f:20:
9d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5C:4A:60:EA:F1:49:F8:59:49:8A:12:5C:EF:7C:93:E4:C7:26:10
X509v3 Authority Key Identifier:
keyid:71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:4c:cc:85:e4:24:c0:fa:34:86:15:c9:ea:53:b5:0d:59:96:
03:c6:35:99:90:93:a3:4b:92:37:cb:bd:6b:81:ca:81:a4:57:
a3:8f:c6:53:e9:90:28:e5:00:fc:2d:a5:60:bc:f3:ec:e3:e7:
22:ed:b1:c1:e0:23:c3:c7:45:c6:43:c7:65:3c:9a:18:dd:6a:
fc:9d:82:35:d3:07:a2:aa:66:72:7d:f7:53:5b:62:b8:8b:29:
c0:e6:94:45:75:7a:fc:10:aa:71:df:f7:ac:b5:db:bb:e5:24:
7a:0c:af:54:43:ed:44:14:c2:3a:b8:6c:2a:5c:ca:3c:14:1b:
bb:d2:56:31:31:52:27:9b:9c:c4:b5:86:d3:ce:44:08:72:25:
49:1f:d6:ee:8f:e0:0e:49:1f:39:23:95:78:53:39:af:70:c9:
7e:c3:15:5b:26:95:87:01:71:0d:ef:95:98:a6:f1:c9:23:37:
07:08:b5:71:82:aa:41:37:d8:5a:dd:9b:7d:04:0b:da:10:23:
64:92:eb:ba:d2:c5:6c:43:f1:0f:5b:35:41:41:eb:e9:b0:88:
7d:15:a8:2f:89:f7:b6:3a:46:c7:c5:d9:a0:f7:55:b1:9f:61:
33:97:09:ed:18:68:ca:86:c7:f6:49:75:b3:22:be:85:c2:37:
af:7b:b0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:05:13 2025 by rpki-client