Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json)
Hash identifier: rbLK0rF0X55jJg5Fyhk29uwgV+0KW4iWNuaWYdZCCkc=
Subject key identifier: 20:07:41:BA:C6:69:6F:E8:53:D1:3A:FC:83:39:20:CE:0C:3C:B1:31
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 019873E23470AD87B20FF0654BF83EB1B829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
Manifest number: 1350
Signing time: Mon 04 Aug 2025 07:01:01 +0000
Manifest this update: Mon 04 Aug 2025 07:01:01 +0000
Manifest next update: Tue 05 Aug 2025 07:01:01 +0000
Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: wrI72zNi89D82WeTqN5hjZkIvt2KJLAp8J/6hmn4otE=)
2: ughB2qwCJjXq23HnnasoQDdXgE8.roa (hash: LImj3hNpOasXYHWcbm9URdJgBeEySrqqax18nJO4GMo=)
3: v0jeM-EK5U0lFswlXgsyLuIVWWw.roa (hash: M3nsb4FrAgnB7zU3prkNFU+S+Vg3EPSnI0a1Dxv4l5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:34:70:ad:87:b2:0f:f0:65:4b:f8:3e:b1:b8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: Aug 4 07:01:01 2025 GMT
Not After : Aug 5 07:01:01 2025 GMT
Subject: CN=200741bac6696fe853d13afc833920ce0c3cb131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:ec:a3:94:b6:e3:c1:07:26:03:59:64:56:
ab:6e:32:97:dd:ec:f3:11:52:61:c2:c9:85:72:aa:
6a:5c:5f:35:31:75:0e:db:bd:56:48:c2:6e:9d:6d:
b9:33:a9:34:1b:87:90:5a:21:05:f2:61:b9:7a:68:
9b:3f:48:68:52:a0:d3:a8:d7:83:77:7a:1c:66:6d:
15:66:5f:b8:24:a6:72:b9:f0:bb:d9:46:08:ca:e3:
00:f1:53:71:c1:e3:db:6e:f7:81:e1:b8:ca:77:b0:
68:73:1f:32:33:4a:b7:71:bb:fd:f6:ec:53:9d:76:
29:72:69:fa:31:cb:d5:05:44:49:c4:1a:8d:af:e5:
43:b1:40:f5:f9:b9:30:f8:a6:73:82:af:90:64:f6:
20:f6:84:1b:42:ea:b2:45:4e:a6:e1:fd:20:de:05:
8e:ec:7c:42:6e:74:2a:96:df:1d:b1:84:d6:02:85:
76:2b:14:e4:7b:0f:b9:65:c4:a0:82:c9:bb:fa:11:
0c:c9:9e:d5:07:99:da:05:f0:c9:34:8b:40:be:cb:
2a:e8:c2:b1:56:ea:c0:c4:18:48:55:3e:bd:c1:cb:
ee:62:31:fa:05:9d:38:81:01:20:72:b2:08:4d:87:
e6:1d:5c:a7:56:8c:c3:f9:90:15:95:24:c7:d0:d4:
8f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:07:41:BA:C6:69:6F:E8:53:D1:3A:FC:83:39:20:CE:0C:3C:B1:31
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:11:ac:dd:9b:c5:6c:69:11:3a:62:43:a3:54:06:f6:33:92:
85:f3:31:fc:63:e6:15:13:06:45:f0:0c:32:77:02:52:73:0a:
7d:0c:e8:65:53:8a:d9:26:ed:18:90:e3:d6:1d:27:2b:fb:7a:
41:c0:74:52:99:07:cb:b0:4b:85:ac:ae:31:17:70:66:5a:27:
04:8b:11:79:d8:aa:47:59:94:98:0f:85:93:31:dd:96:d2:36:
f6:3c:cc:45:cc:d1:af:52:c4:ef:9a:6e:2a:a8:15:2f:2b:ef:
a3:18:52:99:0e:5a:23:ec:c9:1c:bc:5d:50:e3:09:4b:25:96:
53:bc:be:72:a1:12:cc:64:bd:39:a8:f3:a7:d9:66:62:a5:94:
0f:de:e1:0d:70:63:92:1a:01:5d:d7:61:bb:43:40:1f:da:9d:
54:41:0f:9e:3e:39:3e:ff:86:dd:2a:5f:c4:ae:cb:a1:54:77:
bb:42:21:69:71:70:8c:7b:e9:c1:7e:88:0f:8c:d3:2a:be:d9:
4d:4b:b8:d9:28:ae:be:b8:23:9a:cb:75:8b:28:9d:2d:8e:97:
c0:cf:2b:ee:d8:49:2d:8e:a6:1c:a6:f1:5e:0e:46:48:4b:3b:
a4:db:d8:be:c0:92:9d:bf:68:b7:bc:fc:b9:b4:e9:09:2c:86:
63:d1:69:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:30 2025 by rpki-client