Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
File: d73XXy78JE-GoyGxUOYpNqFAKds.mft (raw, json)
Hash identifier: iEQ4Llk0La0Dr6O/TXBzyKzQCWkbTz6YQvWJxjDJs/Q=
Subject key identifier: 49:88:A2:57:7F:C2:1E:E5:EA:4F:93:47:6F:79:B5:13:10:AD:4E:C2
Authority key identifier: 77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
Certificate issuer: /CN=77bdd75f2efc244f86a321b150e62936a14029db
Certificate serial: 01987C77BE366542D2E7EFD761FD90A2D905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 23:01:18 +0000
Manifest this update: Tue 05 Aug 2025 23:01:18 +0000
Manifest next update: Wed 06 Aug 2025 23:01:18 +0000
Files and hashes: 1: GAo7ZduAV60PzhY9o_GDH21ot64.roa (hash: L65aKQ/diSXQMwJ1Sh2UT0BCtlwKc371uG33rtI8OVw=)
2: YnJ26bGDXX1huMvr8EfEnzAcB78.roa (hash: k0PljRyemCupKRxSVAifU5D7QGL/CooV0WFr/NbUXsk=)
3: d73XXy78JE-GoyGxUOYpNqFAKds.crl (hash: Ct0+20GJ40encqEhPMDqBkO3pY7Hf1gVKHHoG45D/TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:be:36:65:42:d2:e7:ef:d7:61:fd:90:a2:d9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bdd75f2efc244f86a321b150e62936a14029db
Validity
Not Before: Aug 5 23:01:18 2025 GMT
Not After : Aug 6 23:01:18 2025 GMT
Subject: CN=4988a2577fc21ee5ea4f93476f79b51310ad4ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:2c:e5:5a:6b:0c:28:42:a3:74:22:8f:97:
c5:88:2b:47:a0:ad:6b:b6:32:8a:12:e7:0e:3a:90:
86:82:c7:c4:3d:fc:af:87:15:29:69:0e:e3:d7:64:
f2:ff:ca:19:0d:23:ec:bd:08:d0:51:a9:db:bb:59:
b9:fc:9b:54:63:5d:20:d2:2d:66:ca:75:e6:20:8a:
a6:b0:ae:68:2b:f1:a9:81:4f:74:99:b9:91:06:98:
8d:3f:ef:38:d6:0e:6e:04:95:ed:33:ca:5e:6b:dd:
fa:7c:71:d0:c4:0e:c8:ad:d5:8c:a6:d4:66:6d:e2:
0b:07:bb:07:81:0e:14:15:c2:b3:6c:1e:69:30:cc:
1a:5c:b1:75:25:6b:7b:a0:38:12:37:7a:f8:d1:ba:
f0:69:77:95:16:41:d2:2e:f1:91:32:51:3d:d3:50:
50:0d:24:8a:7c:2f:8c:37:21:8c:50:d4:6a:ab:8c:
a0:e6:32:23:50:d5:0e:69:92:81:9c:ca:dc:d8:fb:
9b:f8:d2:b4:71:1c:ab:14:20:be:f6:b1:97:14:02:
4e:04:73:19:89:10:98:4b:8c:55:75:36:75:8d:45:
a7:c2:47:75:6e:10:9e:d1:a7:52:f9:f1:bd:fd:e6:
62:64:69:cc:5d:01:15:d6:8a:cc:19:df:7a:57:e4:
1c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:88:A2:57:7F:C2:1E:E5:EA:4F:93:47:6F:79:B5:13:10:AD:4E:C2
X509v3 Authority Key Identifier:
keyid:77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7c:cb:0e:de:6c:05:d2:a2:a5:ba:83:74:f1:49:bc:f5:f0:
5f:17:db:d7:22:13:6a:c4:00:e6:fc:f9:98:91:5b:4b:33:05:
9e:b0:9d:35:87:7e:f0:89:20:97:50:46:84:06:78:90:ac:4a:
6d:ba:66:0e:42:4a:9c:71:13:8c:1c:ae:33:2d:76:69:da:7f:
e4:23:13:96:41:05:d4:5f:06:dd:ed:0b:d3:28:af:ba:9d:39:
8d:a2:d7:1a:cb:2f:24:32:11:80:ab:ca:22:c0:6d:56:bf:4a:
36:0d:89:b4:e7:55:6a:22:bd:69:1d:8b:5c:7e:d3:95:f3:51:
57:f9:fa:b7:be:ee:ea:27:64:6a:d9:46:26:e6:68:aa:61:5b:
01:c2:5d:4f:84:a0:a5:a3:08:b3:af:04:e0:f5:ad:bb:8a:be:
4b:b3:55:56:3d:7e:e7:99:13:a5:1b:ac:f5:49:54:85:4d:40:
c0:ef:15:23:1f:53:64:e1:5a:46:07:af:fe:7b:31:4b:2a:c3:
99:00:bc:59:92:23:46:31:52:cb:20:81:fe:38:b4:90:7c:fc:
04:57:59:87:43:fb:71:c8:02:24:94:5c:25:57:55:fc:6a:28:
5b:48:f3:b3:85:3d:b7:55:8d:cc:56:6c:09:42:a0:3d:9c:61:
7e:ea:c4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:54:55 2025 by rpki-client