Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
File: cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft (raw, json)
Hash identifier: ShhmIxp1637bh1EhX1fuTRGG42nZmAqU65Ze21loLU0=
Subject key identifier: 12:B6:33:EE:EB:66:24:16:E7:47:0C:46:35:45:C7:82:E3:F2:F8:19
Authority key identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
Certificate issuer: /CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Certificate serial: 0198887B4056EAD77EED5E90F04A40464580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
Manifest number: 1627
Signing time: Fri 08 Aug 2025 07:00:35 +0000
Manifest this update: Fri 08 Aug 2025 07:00:35 +0000
Manifest next update: Sat 09 Aug 2025 07:00:35 +0000
Files and hashes: 1: 2tI0pPHAMAIk_osuAaaPnbBYiYE.roa (hash: Y+gWUa2jjd6N+7XsleK0WmIL5jH60gWVDj3pYUgybgk=)
2: cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl (hash: 2L+EAtvdIK34MEHJtXKmn+NaeolbD/1/rvMByhipJag=)
3: fs0ZmJI91FgrAyS_qaO4SZnCnx4.roa (hash: ycybeagUIzrtezPLqz+FSenm/c5GMC1YyzGUnHiNwd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:7b:40:56:ea:d7:7e:ed:5e:90:f0:4a:40:46:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Validity
Not Before: Aug 8 07:00:35 2025 GMT
Not After : Aug 9 07:00:35 2025 GMT
Subject: CN=12b633eeeb662416e7470c463545c782e3f2f819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2f:f9:da:02:b1:9b:d0:90:8e:4c:55:05:d4:
c2:21:a6:5d:47:ef:15:ec:2c:30:26:a9:55:fe:6b:
14:7f:76:db:9e:53:67:7b:bc:d8:49:b1:0d:13:8a:
a4:5f:83:74:1e:6b:5d:a9:1a:ec:2d:6b:ea:55:5b:
3d:3b:dd:30:ca:db:35:5e:15:30:0d:ea:ad:71:29:
81:4e:05:1d:6e:1e:b0:0d:e3:23:8b:b9:a1:56:85:
d6:f8:dd:45:68:15:65:f5:48:83:69:5f:cb:82:0d:
b3:4a:23:2d:ec:ad:a5:11:16:70:49:71:a6:e5:53:
9f:43:cb:77:55:f1:25:53:69:f5:68:fb:48:1f:05:
dc:98:7c:86:ac:4c:49:71:5b:e7:34:08:be:e5:0c:
bd:04:64:61:bb:77:7b:6a:a1:b0:3b:10:45:e0:de:
53:93:3b:64:2e:ca:34:b5:9d:a2:85:bd:3a:42:a1:
5f:b9:3a:cb:82:2f:30:9b:d7:dd:d7:e5:2b:1f:0b:
12:be:da:22:0e:bb:36:65:60:12:81:0c:d9:e2:f7:
82:0a:40:84:41:4f:7f:b2:6a:bd:4b:3e:96:2d:9d:
12:6a:0b:84:5e:76:27:91:64:ae:0a:8d:7c:c1:d6:
b6:4b:aa:92:f4:9b:90:a9:dd:af:dc:c9:d0:a3:83:
06:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B6:33:EE:EB:66:24:16:E7:47:0C:46:35:45:C7:82:E3:F2:F8:19
X509v3 Authority Key Identifier:
keyid:71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:a5:19:21:5b:bc:3c:a8:65:0a:00:12:05:36:40:07:67:09:
dc:3b:9a:3e:d6:75:25:96:14:d1:69:35:2a:aa:eb:5a:d9:a0:
cc:7b:c4:a6:ee:2d:fb:2b:ca:d2:96:5a:dd:7b:e9:fd:82:d7:
78:46:f2:b8:53:46:40:f3:54:c3:19:4b:00:32:98:9e:04:c7:
bb:ea:ba:8f:63:8d:20:2b:eb:f7:26:34:62:c3:5e:39:42:35:
ba:10:bb:8b:2a:f7:c1:7f:d7:a1:ff:75:53:3d:d2:2d:11:4d:
3c:db:3b:11:24:ac:00:6d:be:55:d7:41:ca:db:bd:3b:49:db:
68:bf:d9:86:5f:26:af:00:8f:1e:c1:a9:f6:f9:54:f5:67:4a:
68:3b:8d:70:eb:1b:cc:1f:d1:34:31:25:37:f8:ed:24:c3:d1:
e2:02:77:3f:e2:10:44:9e:0f:8f:92:44:3d:85:50:96:3d:68:
5a:7e:c4:fb:91:c7:8f:8d:78:f9:de:ba:76:0d:4d:92:0e:15:
75:8e:f2:c7:16:93:de:b8:50:60:08:8c:2e:3d:d7:82:d2:38:
b3:17:1f:da:97:96:d8:3a:18:f9:43:cb:37:cf:47:18:45:3f:
d2:22:59:df:b0:6a:a0:ca:04:57:fb:06:7d:f9:30:6c:61:b0:
a3:98:9d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:17:59 2025 by rpki-client