Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
File: m7viALvfN5tQRVFjAXudR3fx210.mft (raw, json)
Hash identifier: uI65UdbxQDDdeuV3TfaX0jznuS2IBHfX7n4cBt6K8F0=
Subject key identifier: 3C:7A:07:5C:B5:E5:3B:DB:EB:A8:D0:68:F2:D6:2E:36:42:29:97:8E
Authority key identifier: 9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D
Certificate issuer: /CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
Certificate serial: 0198D54E51DED8932C86461FB5C42E597DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
Manifest number: 11E0
Signing time: Sat 23 Aug 2025 05:02:16 +0000
Manifest this update: Sat 23 Aug 2025 05:02:16 +0000
Manifest next update: Sun 24 Aug 2025 05:02:16 +0000
Files and hashes: 1: 3KDKnt4N1kaVYO5cJoBomMZhBKI.roa (hash: MYr27t+UpY1nV8Z5RMAwd4JpyhndolDAT0zGy5OlcpY=)
2: m7viALvfN5tQRVFjAXudR3fx210.crl (hash: wnP570weVvfNqJjEHF9C/fH8AYCzhTRLzc+xCuZrZXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:51:de:d8:93:2c:86:46:1f:b5:c4:2e:59:7d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
Validity
Not Before: Aug 23 05:02:16 2025 GMT
Not After : Aug 24 05:02:16 2025 GMT
Subject: CN=3c7a075cb5e53bdbeba8d068f2d62e364229978e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:21:06:d4:b6:d4:e5:86:00:19:73:4f:3c:11:
36:6a:1e:4b:ad:72:41:39:19:79:fe:09:1c:cf:8a:
2f:26:c8:90:b2:61:bb:61:72:53:5a:f2:cf:77:21:
a2:46:83:6a:78:a3:74:fa:b1:8d:49:d3:e4:15:1e:
dd:05:49:35:23:f4:62:b1:34:71:34:c2:99:ff:15:
cf:a4:11:fd:15:15:cc:07:4a:27:e7:9d:82:93:83:
99:5a:00:98:93:c1:7f:f1:62:cd:1e:c9:04:5e:2c:
f0:87:6e:5b:c4:df:18:8c:a2:c6:0a:21:df:32:2d:
37:00:37:1d:41:3a:5f:17:c3:b7:af:ec:2f:52:46:
91:cc:60:3e:9b:52:7b:ee:08:eb:23:15:f4:7d:fa:
06:b6:58:7d:0a:a7:a3:f6:06:cc:20:50:9a:04:a8:
83:2f:28:af:4f:7d:a8:38:58:4b:22:66:7f:f4:65:
01:d6:33:bd:25:b8:92:50:4c:6f:0d:d7:bc:e3:41:
f0:f4:cf:63:02:f2:95:86:11:ca:93:1f:18:8a:c1:
a9:f0:ec:2b:44:cc:29:ee:c8:cc:e3:d0:de:08:e4:
2f:c5:61:62:54:68:1a:53:c0:42:f2:f2:86:4d:4e:
1e:df:ce:7f:99:04:bd:90:d9:73:7a:25:3d:ab:c0:
0e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7A:07:5C:B5:E5:3B:DB:EB:A8:D0:68:F2:D6:2E:36:42:29:97:8E
X509v3 Authority Key Identifier:
keyid:9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:07:11:8c:10:26:a2:63:78:55:f5:47:bc:71:df:b9:a9:a2:
f1:ba:66:a7:b1:f2:d4:dc:76:5c:07:88:56:10:fa:05:71:52:
da:0b:e2:52:34:dc:73:71:33:c1:49:33:3a:d1:9a:0d:1c:11:
54:44:d8:f7:81:c9:30:22:74:80:b0:d7:0e:76:5f:ee:f2:83:
52:a8:98:a5:5b:b7:df:72:d6:de:b2:fc:3f:fd:df:48:52:c2:
36:9e:28:81:b6:e2:b1:26:4d:d0:69:3b:33:fd:59:ba:19:f5:
10:5c:d1:cc:b9:7b:3e:82:1f:87:ba:bd:02:d6:02:25:9f:e6:
40:9e:4d:29:b6:41:4b:9e:03:45:e3:14:ee:01:7d:e3:f5:8f:
51:45:4c:44:3b:b6:0c:30:56:df:39:be:91:7d:31:2d:ed:4f:
5d:c3:0c:15:c8:6d:e5:c8:aa:a5:9d:c2:74:d3:f3:1c:79:62:
8e:d0:0c:1a:26:82:8d:4f:03:a3:5c:ad:53:ad:fb:14:23:a0:
e4:e6:42:bb:65:bc:20:14:fe:fe:4c:e5:76:a2:24:3d:ed:9a:
18:56:ae:2d:aa:f5:ec:13:08:68:42:4d:25:0e:85:97:f9:b4:
07:39:d0:bb:d0:ff:df:3d:e6:19:0f:60:c2:30:ea:c6:27:1f:
43:23:92:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:44 2025 by rpki-client