Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
File: T1JcTLrI19lzMkWHalyr5rNeL-k.mft (raw, json)
Hash identifier: S1rjsvSf7rklaLUqKMHxKjzADqAAWJ+PGa8oMWciHOc=
Subject key identifier: 27:DA:DB:BD:DC:A1:57:75:50:E0:92:DF:57:D1:84:B2:4B:AF:31:38
Authority key identifier: 4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
Certificate issuer: /CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Certificate serial: 01988DD90BE8FE7460F0F1CC61FD0D65A0D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
Manifest number: 0EBB
Signing time: Sat 09 Aug 2025 08:01:08 +0000
Manifest this update: Sat 09 Aug 2025 08:01:08 +0000
Manifest next update: Sun 10 Aug 2025 08:01:08 +0000
Files and hashes: 1: T1JcTLrI19lzMkWHalyr5rNeL-k.crl (hash: 4NAfxn4IQF3ix9/QbDzIj2kyHYgRqfPJpnQ/oR3Uabs=)
2: c8I1j-_EdlLIZz3-7BnhuaavJno.roa (hash: CwCN8RoP1XffLa+Wr9AuQzfDKd1y2haHBaFngEMqfpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d9:0b:e8:fe:74:60:f0:f1:cc:61:fd:0d:65:a0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Validity
Not Before: Aug 9 08:01:08 2025 GMT
Not After : Aug 10 08:01:08 2025 GMT
Subject: CN=27dadbbddca1577550e092df57d184b24baf3138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:1a:66:89:d3:98:9e:ea:17:5c:71:30:ac:
32:b5:a4:11:0e:3c:12:28:d4:bb:20:f7:ca:ed:99:
ca:52:df:d9:31:30:0c:88:80:5f:74:1d:cb:47:ae:
e7:88:af:2f:39:99:eb:f4:c2:02:ac:c1:a9:49:65:
2d:e0:c9:b5:5b:d3:c2:76:c5:5d:95:ac:e1:da:9d:
18:f5:cc:62:75:df:14:5e:d1:d0:bf:88:aa:9f:ec:
b6:b1:97:1f:75:7e:70:d0:cf:77:12:2c:1f:8a:99:
fa:b1:43:4c:0b:39:1c:ba:36:8c:cf:29:63:ab:1a:
a6:45:5f:aa:d5:41:29:37:37:90:27:19:c4:7f:7d:
61:b8:b1:6e:ad:21:42:8c:81:78:68:5e:09:9c:7a:
61:94:75:40:18:c7:12:3c:73:8c:8b:5d:cf:f7:0c:
6c:8f:ec:6c:cb:ec:2c:ba:52:d4:a0:30:2c:dc:2b:
f4:d6:b3:ee:60:f1:70:6e:aa:5e:66:ba:35:d3:12:
12:16:36:20:9f:1c:b9:f2:5c:10:88:6a:dd:0b:a4:
9e:39:5f:0e:b4:8d:8f:7b:3e:2c:10:e5:ef:be:d2:
98:ca:93:02:d6:bf:74:07:01:ae:d5:53:93:18:3c:
f1:87:e3:99:7c:3b:8d:27:2a:41:04:03:89:29:23:
bd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DA:DB:BD:DC:A1:57:75:50:E0:92:DF:57:D1:84:B2:4B:AF:31:38
X509v3 Authority Key Identifier:
keyid:4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:3a:0b:e7:db:e0:43:4d:f9:9e:bd:ab:3c:d3:9c:fd:82:1d:
7b:4d:50:7f:03:ab:96:04:e9:79:d2:95:e7:7a:3e:f7:df:3b:
02:fe:4c:6c:30:dc:27:70:7a:18:70:52:d5:58:fc:34:f0:7b:
65:a5:1c:39:f0:4a:b3:a0:e2:79:d1:da:a0:e1:e8:a7:28:dc:
a5:1c:d8:3d:18:9e:6c:bb:b0:07:e0:cb:a6:8f:9b:e0:5d:1c:
e5:80:8a:ee:b9:e8:85:0c:92:92:42:4b:10:6e:6f:c3:c8:e7:
ae:8b:05:da:74:57:1d:5b:32:77:1f:c0:0e:b6:46:98:e1:e7:
b9:98:50:04:a9:a1:77:ad:27:de:7a:21:bf:1c:66:fb:51:a9:
a2:61:e7:9a:29:00:a0:ff:24:0a:65:c5:0a:11:5f:74:3d:21:
b0:5e:10:3a:5f:0c:11:25:06:34:96:55:f2:c3:d7:0b:8d:96:
b0:ec:25:38:81:a5:dd:32:9f:ee:d4:34:78:b3:3d:f4:76:9d:
b6:79:93:73:4a:e9:77:3a:08:a7:0b:79:16:b4:29:d9:62:10:
a9:de:1b:d4:be:c1:d4:87:59:15:c0:ec:4b:5e:b2:ff:d6:9f:
66:ba:31:e5:4b:9c:64:a8:19:19:ca:d9:7d:52:00:ec:2c:cf:
aa:b5:4f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:31:39 2025 by rpki-client