Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
File: t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft (raw, json)
Hash identifier: E9EwqzMhgsYUoxxq73e513VWJH0Fw1QZ3au2pFYrQaw=
Subject key identifier: 07:44:54:24:5D:E7:B4:7A:3A:ED:5D:6B:A4:51:DB:7C:0A:3A:81:24
Authority key identifier: B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
Certificate issuer: /CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Certificate serial: 019895C981C3421273D84384B950FA034F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 21:01:07 +0000
Manifest this update: Sun 10 Aug 2025 21:01:07 +0000
Manifest next update: Mon 11 Aug 2025 21:01:07 +0000
Files and hashes: 1: 4tvYqBz30c-0SHwQf2CtT0VNBPQ.roa (hash: qCyQEU6OdMbxdWiqsxkcJvwc0b3lfRGI0KL0oWxXAXQ=)
2: 5BiiR8tyxMqnVkrCR-JVCe5thJE.roa (hash: Hg2Lr4BrUeLiGXPiTTswxDVsunI16iUbiaP/wD6FGp4=)
3: t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl (hash: DpIRNjL1gCBuNeH9VPasyBE58QKYfmXRzCB/Bz0FlKg=)
4: zmgQ_aWhp6cEGx4y0seWn4Gsss4.roa (hash: /bqbphYKFU51MVxXzZqrdhuQ80/Caxadp1A0xOJ6vp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:c9:81:c3:42:12:73:d8:43:84:b9:50:fa:03:4f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Validity
Not Before: Aug 10 21:01:07 2025 GMT
Not After : Aug 11 21:01:07 2025 GMT
Subject: CN=074454245de7b47a3aed5d6ba451db7c0a3a8124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:74:0a:fc:21:f4:59:a9:31:0a:2f:0e:c3:b4:
4c:20:ea:1c:7a:ba:ed:8f:09:d9:6b:3e:72:90:f6:
fc:69:ea:47:4b:d1:9a:03:9d:a5:eb:35:2e:62:92:
2c:72:eb:7d:a8:2a:85:7d:59:c8:70:0c:2e:0c:58:
88:c3:2a:0d:b9:f3:bb:3b:16:53:ee:73:eb:b6:eb:
f2:b6:e5:8f:af:06:9d:f0:88:13:0c:06:13:12:6e:
05:ee:e8:7e:e9:37:73:d7:0c:02:10:0e:9a:fa:57:
64:6e:e6:91:be:d8:3f:0b:5d:fd:4f:d4:db:4d:3c:
6d:dc:58:98:9d:fc:db:94:fa:15:f1:12:f1:22:5e:
1d:b6:49:41:28:a2:a8:f7:a3:c5:9d:43:54:e4:b2:
28:c5:b5:1c:87:a8:26:aa:91:b6:93:ff:b5:98:14:
60:fd:8c:53:13:42:cf:85:9b:b9:f6:03:4e:d4:79:
c6:7b:11:03:17:61:c5:7f:be:1c:c4:9d:01:63:c1:
ee:0f:f4:1c:f6:1c:8d:b3:06:f8:78:b7:3a:db:96:
3d:61:1c:3b:48:8c:3b:3c:ab:ce:2a:33:c2:5b:2a:
5f:ad:db:13:54:c5:fa:55:08:54:1b:d2:85:e6:b7:
95:f8:17:63:43:50:08:3e:41:90:52:92:89:ef:d2:
2c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:44:54:24:5D:E7:B4:7A:3A:ED:5D:6B:A4:51:DB:7C:0A:3A:81:24
X509v3 Authority Key Identifier:
keyid:B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b7:2d:a4:3c:80:e1:73:9c:4c:d1:00:50:bd:76:30:0e:be:
28:f3:1c:c1:1e:0c:b3:a4:04:9b:18:dc:e7:bd:2c:f1:ef:f6:
64:98:c5:3f:e3:75:42:21:58:ce:5b:2a:f7:a0:6b:52:6e:e8:
f4:b3:2e:44:14:68:0b:12:80:a8:4c:92:2e:8e:9f:97:84:87:
35:91:74:80:70:3d:2c:b1:b8:c7:88:0b:af:12:48:2b:16:65:
88:6b:44:36:8f:81:b7:97:a1:de:c7:4d:ac:b1:4d:2f:08:24:
6a:e8:1e:82:70:b6:70:5d:d6:12:f7:92:74:37:a9:d7:3e:f1:
79:98:26:58:d6:89:25:c2:f0:ef:66:17:31:f7:dd:1e:4d:97:
f0:78:4a:e2:34:69:ce:2e:66:73:3c:4b:32:1f:71:bb:16:9b:
3e:78:be:d2:5e:f5:8b:37:81:0f:1d:d5:8c:d6:07:ce:a5:0a:
0a:e5:31:68:da:00:dd:c4:d9:d3:7b:72:b9:da:05:3a:84:8a:
14:da:28:ea:90:3f:8f:da:e4:64:d4:8b:30:57:e0:2f:d7:6f:
e8:e7:9f:8b:01:14:c4:bd:34:63:0a:1f:30:d8:fb:cc:9b:8a:
e4:6b:3b:aa:6c:47:f4:b2:5c:c4:c5:68:a0:de:df:cb:f2:63:
3c:3b:17:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:27:49 2025 by rpki-client