Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
File: 1tk74RT4LQJYkWqXjKy_sVu1hAo.mft (raw, json)
Hash identifier: 2MhniF9QR7wIZ1Io4428bSe+UHp4OPSeagmaCKFLork=
Subject key identifier: CD:7A:9E:02:8A:88:65:6E:27:C6:0A:C6:83:48:C0:F8:F0:6D:87:97
Authority key identifier: D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A
Certificate issuer: /CN=d6d93be114f82d0258916a978cacbfb15bb5840a
Certificate serial: 01987E9CB5611E828AFE5F61DF91E6D9B10E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
Manifest number: 1091
Signing time: Wed 06 Aug 2025 09:00:55 +0000
Manifest this update: Wed 06 Aug 2025 09:00:55 +0000
Manifest next update: Thu 07 Aug 2025 09:00:55 +0000
Files and hashes: 1: 1tk74RT4LQJYkWqXjKy_sVu1hAo.crl (hash: fC/B/XulJaCyEqEx+Xet9tGwEc2JmTdeTc3d4QeFH2I=)
2: EjxEvyFrbjIutBBjgjTn5G6eW5c.roa (hash: dmAYBtW0oaeyULNatDjSeKws5fd+ZFknimkAFUD4KMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:b5:61:1e:82:8a:fe:5f:61:df:91:e6:d9:b1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d93be114f82d0258916a978cacbfb15bb5840a
Validity
Not Before: Aug 6 09:00:55 2025 GMT
Not After : Aug 7 09:00:55 2025 GMT
Subject: CN=cd7a9e028a88656e27c60ac68348c0f8f06d8797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:52:81:3b:a2:cc:2e:55:0f:96:71:08:13:7c:
8c:af:93:60:f2:11:a0:94:17:89:89:20:cb:de:ab:
47:84:11:09:5b:a2:5d:9f:9d:89:bf:eb:23:7a:9a:
56:19:e5:22:dc:f6:b2:ec:b7:06:31:52:bb:c9:cc:
46:e5:7f:65:b1:c2:2d:ec:a2:6b:7f:31:64:ef:b6:
fa:12:32:b2:cb:35:5b:99:2f:19:09:e1:a1:d7:83:
59:ce:3d:9a:42:0f:fe:69:3b:8f:67:e8:db:13:97:
ca:c7:c4:84:ff:b0:c1:bb:64:fe:19:4a:7d:fa:79:
3a:f6:2e:dc:96:b8:dc:90:f3:2f:b0:d7:5b:18:2c:
5f:e4:a5:17:9f:3e:3d:f8:ab:8f:3c:14:36:d1:23:
69:b9:59:ee:32:c7:e4:cd:89:ae:c6:41:28:fe:70:
41:f6:55:5f:60:3f:1b:73:3e:af:83:ca:c2:a5:22:
af:6f:51:c2:44:dd:02:27:9f:a7:3f:48:6f:8b:01:
51:aa:3b:ea:df:b5:0f:fd:cd:73:47:ed:c3:bd:bc:
3d:97:33:1d:39:a1:9b:a5:0a:9b:98:f0:01:de:1a:
75:2b:ad:2d:93:f6:9c:87:e6:c0:7e:6b:19:b4:0a:
20:2b:f4:c6:a4:28:4d:29:f3:5c:05:1b:4e:5c:84:
81:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7A:9E:02:8A:88:65:6E:27:C6:0A:C6:83:48:C0:F8:F0:6D:87:97
X509v3 Authority Key Identifier:
keyid:D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:03:23:05:c4:ca:56:5b:d5:f4:f5:03:53:47:a2:57:a9:06:
36:76:b0:63:aa:ba:4d:fd:d1:58:c8:e3:16:96:37:22:c7:73:
a1:cf:7d:24:4d:9a:ce:2a:24:62:22:b1:17:c9:04:16:ff:d5:
a1:2b:7f:77:4b:89:02:07:9c:7c:04:0a:fa:e9:62:bf:69:aa:
28:46:87:c4:13:be:f0:ce:66:47:14:45:e8:21:70:3f:1a:16:
a2:15:d9:f4:d9:87:68:b8:b2:67:71:b0:c5:9f:12:54:27:37:
77:07:9f:8c:fc:09:9b:97:93:c0:cf:5f:51:a6:7c:1e:96:cd:
aa:2e:ea:18:fe:14:ab:7f:2d:ca:0d:22:88:6e:c0:4a:b3:6a:
bf:c6:3a:6e:3f:2a:2f:e9:08:ee:50:74:5f:b4:d9:0f:99:2a:
56:78:44:d7:85:ab:04:1a:11:ba:d6:00:57:b4:76:ad:a3:b9:
6c:a1:ef:7e:c2:05:1c:40:a7:f8:64:11:76:75:79:3d:60:92:
19:90:f9:76:16:cb:11:ab:4f:37:e0:4f:6b:37:38:44:6c:4f:
d4:a3:15:32:7e:39:e4:81:6e:11:9c:4c:57:d7:17:ea:e4:d8:
86:1a:48:4e:30:56:5c:bc:a2:c2:c7:56:9c:e1:bd:f4:dc:67:
89:3b:d4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:44:49 2025 by rpki-client