Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
File: 234XcKOATHS58Sy5tvpwOW3pMp8.mft (raw, json)
Hash identifier: /DnQodCoNocCGFqSLPh36k0MCW0q/LTqIf3zSxsFv5o=
Subject key identifier: 31:79:45:F9:F2:B4:F7:4A:6E:67:FB:37:CD:BD:21:C9:1B:C9:7B:7C
Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
Certificate issuer: /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Certificate serial: 019873E1F44FB774C7CC8C84928AF451D619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
Manifest number: 0378
Signing time: Mon 04 Aug 2025 07:00:44 +0000
Manifest this update: Mon 04 Aug 2025 07:00:44 +0000
Manifest next update: Tue 05 Aug 2025 07:00:44 +0000
Files and hashes: 1: 234XcKOATHS58Sy5tvpwOW3pMp8.crl (hash: 2hUIzUeJ0yhtKWxmlUq+AtfMFWcddfIWkEJu29OcBRM=)
2: TfZHjmYknRwU6ErUe_wYUlK2dPk.roa (hash: c7WP6wJfnnCXs2t+4y61hzS0o/WHpIcUL2rUoYBlMZ4=)
3: UQg1PMXj1_xA8cNWapDDicWf9QE.roa (hash: SNk8uKYXIWMnimS9vpTvdTlC1q8gr9Fg7CLCU0N94ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:f4:4f:b7:74:c7:cc:8c:84:92:8a:f4:51:d6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Validity
Not Before: Aug 4 07:00:44 2025 GMT
Not After : Aug 5 07:00:44 2025 GMT
Subject: CN=317945f9f2b4f74a6e67fb37cdbd21c91bc97b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fd:95:34:cf:ca:86:c6:8a:02:ad:93:a7:b8:
99:ee:08:48:3e:0b:74:22:2e:70:80:cc:59:ef:a0:
e2:58:5e:91:49:cc:13:f6:95:d9:bf:9a:5b:86:65:
22:92:1f:cd:cc:6a:0b:45:2f:c6:ba:a0:ad:e2:f8:
f2:18:69:8b:77:23:99:b2:1e:fe:77:1d:f2:81:13:
71:3a:b6:bb:80:62:bf:70:9c:c0:7a:d1:08:80:b1:
87:98:16:2d:40:09:a2:94:4f:a2:0e:32:c7:05:e5:
b1:cb:d9:dd:f2:92:cd:7e:f6:43:aa:36:73:bb:80:
e1:a6:47:ff:3e:9b:0c:a1:6e:2d:f9:bf:cd:5a:e2:
1d:9a:59:72:60:fe:8e:24:cf:9a:90:6b:1e:dd:0e:
53:e1:2f:d3:06:57:ef:aa:50:ce:60:f9:25:a1:e9:
e8:9b:03:36:57:2e:4a:cc:84:4d:72:80:ac:eb:8e:
c9:fe:74:67:21:72:80:36:1b:06:6f:cb:b2:e0:51:
ec:e3:78:4b:40:20:1a:5b:40:67:7d:28:f3:37:70:
42:52:01:94:04:18:c0:51:e8:79:c4:e9:66:c7:74:
e2:d9:44:c5:0b:99:51:3a:65:84:47:46:2a:a0:70:
d6:f3:9d:2b:5d:21:6f:72:99:96:40:0e:bd:3f:86:
3c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:79:45:F9:F2:B4:F7:4A:6E:67:FB:37:CD:BD:21:C9:1B:C9:7B:7C
X509v3 Authority Key Identifier:
keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c7:31:ea:04:51:d6:58:6a:da:49:be:9e:c6:d3:ad:0c:f3:
59:ef:9f:ea:7e:a5:ee:33:40:06:ba:44:79:36:a0:5a:fd:b1:
18:77:d9:df:4f:be:d7:19:d7:f0:d0:34:d1:fb:d3:00:21:98:
24:df:b9:98:6d:3c:ba:88:9b:2a:9f:da:90:eb:e6:7b:a2:13:
56:2f:4d:5e:46:80:ea:f2:29:16:95:bc:2e:71:82:e0:8b:a5:
f3:db:b4:1a:c2:e1:5c:74:c4:7d:d4:14:39:80:2f:3b:49:87:
96:51:25:e1:f1:1a:6f:72:78:2a:c5:44:f9:df:4c:bb:de:25:
e3:8f:87:76:34:5d:49:4d:ae:ea:6c:e5:21:e9:ae:a6:f5:9a:
67:11:f3:1f:18:93:5c:5e:9b:92:95:a1:53:eb:83:28:6d:0b:
46:71:d0:00:b2:1e:38:16:70:a4:98:30:c2:12:85:55:bf:50:
25:62:1d:8f:6d:6d:82:e6:23:5e:41:5d:2a:e4:9e:d7:cb:3b:
73:88:fc:42:5c:a7:0b:f2:90:3f:07:a0:9d:62:aa:46:87:dd:
b0:49:da:ba:cb:7f:24:ad:d6:89:58:fe:d4:00:da:d5:57:7b:
ae:61:63:2a:ff:18:1c:85:3f:81:08:d8:a0:c1:21:de:46:65:
89:89:ca:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:01 2025 by rpki-client