Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
File: ril1GgrIGmVxkFRupHgM2GFA3J8.mft (raw, json)
Hash identifier: NtXYuIkGSC9uO2PDs5mS3xQAKsn4I+FFr+k45P8tCuI=
Subject key identifier: 79:96:11:8E:F8:C4:9F:A1:07:01:3D:E1:28:86:92:8F:53:55:D9:D6
Authority key identifier: AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F
Certificate issuer: /CN=ae29751a0ac81a657190546ea4780cd86140dc9f
Certificate serial: 019874F495F458F2227C81E7F2BBDEC87B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 12:00:42 +0000
Manifest this update: Mon 04 Aug 2025 12:00:42 +0000
Manifest next update: Tue 05 Aug 2025 12:00:42 +0000
Files and hashes: 1: Pn8xyEax8dTf2X7jJobPQxh-9Fg.roa (hash: HTtYaWmG4vFsBggg1bZWXxDw9HN8LeHTNamhfWYt0+s=)
2: TzCEbM_FX1C8Etsgv1SpL73BfwY.roa (hash: 0+du4/EByKMALnvia/65AUVyk52kmBip6bBqdirNoQM=)
3: ril1GgrIGmVxkFRupHgM2GFA3J8.crl (hash: pq9upmuVD5Xxq8yruUXreWtqKJpFzI9u8dAbmRAVHWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:95:f4:58:f2:22:7c:81:e7:f2:bb:de:c8:7b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae29751a0ac81a657190546ea4780cd86140dc9f
Validity
Not Before: Aug 4 12:00:42 2025 GMT
Not After : Aug 5 12:00:42 2025 GMT
Subject: CN=7996118ef8c49fa107013de12886928f5355d9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:57:6f:7b:da:99:9d:83:42:7b:2c:6c:2b:8c:
1e:8b:25:c5:4a:f8:f3:3d:17:04:26:9a:05:17:44:
ab:4b:32:b1:a6:59:60:c4:fc:86:b8:cd:65:3c:9c:
34:07:20:1f:f1:b5:7a:ce:42:90:e0:af:d0:3a:d0:
72:36:e0:e8:09:91:a3:1b:28:f5:2e:69:76:2c:0e:
1f:d4:47:01:f9:d1:87:56:11:65:09:c2:51:65:fb:
39:55:19:9b:ba:ca:c0:bb:da:16:a7:3c:96:01:42:
6f:07:4c:fd:5c:14:25:97:bd:09:ce:9c:ad:2b:b3:
60:54:fd:4a:a2:0f:81:0c:20:65:fb:f1:ca:4e:6d:
60:2a:2d:d3:4a:22:61:af:1c:38:06:50:98:0d:1e:
5b:ca:5a:7d:15:66:d1:08:94:a5:3c:eb:d8:d1:2c:
64:c1:af:9a:cc:38:b9:8e:31:2d:d0:f4:99:cd:36:
6f:ce:f3:e7:1a:b5:2d:66:64:8f:fc:d7:c5:05:7c:
bf:2c:8f:b0:63:2d:6e:ac:be:05:61:48:b8:f3:c5:
af:d9:4c:db:9e:ad:59:81:72:ed:06:cd:5a:a6:c0:
f7:02:92:d2:d6:23:a9:21:8d:4f:46:59:66:76:21:
4b:2a:25:29:d1:5b:71:6e:10:b9:50:c6:f3:60:96:
85:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:96:11:8E:F8:C4:9F:A1:07:01:3D:E1:28:86:92:8F:53:55:D9:D6
X509v3 Authority Key Identifier:
keyid:AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:83:9e:24:53:05:a4:6c:41:c2:9e:02:50:d3:aa:b9:21:73:
45:93:fa:36:d0:6c:91:02:b2:d1:f4:1f:d3:b0:47:7d:dd:f5:
b1:53:9e:16:2c:22:d1:06:85:da:28:5f:ea:c3:ea:a5:02:a6:
1c:2a:f6:18:0a:4d:3c:9d:0f:4b:3b:73:1b:bb:2b:04:80:f3:
d8:33:71:89:f1:16:a5:1e:09:ce:78:30:71:87:4a:53:a5:fe:
33:49:cd:95:99:41:22:5c:58:cf:09:cc:26:8f:16:c3:b8:4f:
11:db:ce:32:5b:30:85:2f:46:4e:7a:ef:26:9a:10:18:79:09:
a0:40:3a:69:f4:a2:86:9e:39:e9:65:f5:85:dd:19:50:4d:d9:
79:98:a9:c4:cd:fe:e7:4f:66:43:b8:a2:d6:5a:b6:1e:1f:11:
ef:c1:23:13:0c:9f:0c:60:c9:89:9b:25:cd:dc:26:1d:5e:e7:
77:de:2f:ad:e7:c7:c6:15:b1:6a:d5:3f:d6:71:3d:a3:85:dd:
ec:1f:be:4d:ef:e0:59:2a:af:96:c4:ae:ed:ed:26:6a:00:a3:
c4:e4:01:c7:4f:49:bc:f9:a5:bd:c5:b6:6d:06:53:b6:df:d6:
a6:61:b2:e7:c2:a2:44:0d:24:08:22:c8:d7:e0:79:f8:f3:95:
92:6a:e4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:02:52 2025 by rpki-client