Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
File: itpL9fGQ85mLgMYUmhRjJw-77hU.mft (raw, json)
Hash identifier: wMcRNdlTosZPh2tcwdQmm1SwpAORgR1ppVObdaauOZs=
Subject key identifier: 77:CD:46:E3:B9:A4:7A:0F:A3:42:9E:64:BD:3C:B8:17:04:28:3A:1B
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 0198733DC613DC084FF628A76A37B0730316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
Manifest number: 0BAE
Signing time: Mon 04 Aug 2025 04:01:24 +0000
Manifest this update: Mon 04 Aug 2025 04:01:24 +0000
Manifest next update: Tue 05 Aug 2025 04:01:24 +0000
Files and hashes: 1: U9YffwceqXxTMUqyDWCzvXHoX1g.roa (hash: /csuQO3etFqd6uIjkI+HLHNXHWK6MILTkxxMM7ARd6Q=)
2: itpL9fGQ85mLgMYUmhRjJw-77hU.crl (hash: CbLc66zMftz3e9mg+zcZQK7IGZ25sY4haj6S9sCZDgU=)
3: mogbma_RtoADQ0xZNuTva7SSLFU.roa (hash: rClnvodfou+7xsqC44z7GFztSAn0mdcV3oviTeI4b0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:c6:13:dc:08:4f:f6:28:a7:6a:37:b0:73:03:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Aug 4 04:01:24 2025 GMT
Not After : Aug 5 04:01:24 2025 GMT
Subject: CN=77cd46e3b9a47a0fa3429e64bd3cb81704283a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:4a:28:56:07:70:0b:bf:bf:8a:e8:ea:f4:
a5:91:70:13:fc:1c:bd:c6:28:1e:30:1a:15:ff:6d:
73:d0:dd:a7:2f:d0:39:18:6e:21:fe:21:10:96:cd:
53:ac:03:db:55:5c:d6:6b:e3:1d:9e:10:20:32:04:
df:3a:46:0a:3a:c2:e3:f5:ad:a3:8a:15:75:5e:c4:
cd:55:41:66:55:42:e6:8a:e8:13:b7:28:c3:2c:08:
47:a9:6d:3c:66:f8:b8:01:96:57:e8:1e:06:14:84:
e0:83:bc:14:49:64:83:f1:45:f1:46:ff:d8:68:85:
ff:64:2c:03:3c:99:0f:d5:b5:eb:d8:79:39:db:47:
03:6a:c1:00:67:0f:15:61:a1:f1:5f:53:a5:97:6e:
ec:d7:4b:1b:95:d3:7e:3d:7b:c6:f5:3e:8c:61:34:
70:8f:21:8b:e8:cb:f3:7e:70:66:41:b2:e9:da:87:
7e:dd:d4:8d:c3:0f:c5:48:67:bd:e5:81:02:83:c8:
41:1f:37:4b:e3:ac:34:4f:0e:6d:18:ca:b3:5a:cb:
27:01:7b:51:10:89:f2:ef:7c:d5:6c:24:53:70:42:
30:28:73:56:78:9a:08:5f:31:32:67:5e:59:bc:3e:
f8:28:36:1b:a3:bf:d5:aa:12:b3:b3:ab:86:4f:fc:
d9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CD:46:E3:B9:A4:7A:0F:A3:42:9E:64:BD:3C:B8:17:04:28:3A:1B
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9a:8a:da:ff:50:05:ac:0d:7c:aa:46:fc:04:81:eb:25:e4:
09:8d:df:21:18:bc:9d:87:a2:3c:5f:fa:cd:fd:dc:1d:3d:34:
a7:65:3c:19:cc:e4:cf:31:32:4a:48:92:1b:c5:79:b5:45:05:
75:b9:33:31:c9:19:d3:8a:cc:f0:ff:46:10:33:52:f1:85:1b:
f3:66:23:0c:ad:bf:e6:d9:89:d3:64:26:36:eb:91:fa:8b:fb:
a9:e8:d8:0a:fa:a8:29:a2:47:6d:36:ef:3e:6b:db:19:37:ea:
20:17:42:3c:58:48:e8:07:d2:90:19:12:dd:e7:43:4c:ca:3c:
68:ed:3f:9a:04:c9:af:24:ad:eb:cf:91:c2:18:ee:7b:60:03:
a7:08:ee:07:62:18:62:17:73:1f:9e:16:e3:0b:64:94:d1:9a:
5e:05:7a:de:7d:5d:b7:00:94:f1:a9:02:66:b6:f3:af:8b:6b:
c9:b6:92:b3:05:f3:4c:3c:7f:0f:c6:9c:17:23:54:d2:d2:f5:
ac:2c:1e:9c:04:f7:b7:7c:7e:cc:79:94:ef:6d:12:db:98:02:
08:83:74:c0:12:80:1b:85:9a:2a:2c:7f:8b:b5:b5:62:e6:61:
95:28:a5:69:9a:c0:ba:55:44:0c:b8:91:a8:79:fa:d0:3a:fc:
9b:3e:07:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:59 2025 by rpki-client