Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft
File: t3gT9sVnClhoatw9SVV0QpXdFBk.mft (raw, json)
Hash identifier: helT0R8ZwcsQKoYlWKWec4L0t0RIJWohlIhAhxLQyTw=
Subject key identifier: 77:06:E8:94:83:1D:B6:01:67:AD:39:B1:E0:4D:C5:2C:4A:48:03:32
Authority key identifier: B7:78:13:F6:C5:67:0A:58:68:6A:DC:3D:49:55:74:42:95:DD:14:19
Certificate issuer: /CN=b77813f6c5670a58686adc3d4955744295dd1419
Certificate serial: 0197C68189CB3895D372C19353D052983E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3gT9sVnClhoatw9SVV0QpXdFBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft
Manifest number: 0E95
Signing time: Tue 01 Jul 2025 15:01:07 +0000
Manifest this update: Tue 01 Jul 2025 15:01:07 +0000
Manifest next update: Wed 02 Jul 2025 15:01:07 +0000
Files and hashes: 1: t3gT9sVnClhoatw9SVV0QpXdFBk.crl (hash: izTIbBTGIgSnBI8EBZEFofC2CHHQLsEbALDlwburn74=)
2: xy0ayvCMPxVGUij5mpyeTNFKRNw.roa (hash: tXbOwwPUAQhZJRCjintnYpclKOHIFWoxy2lUX1RBhtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3gT9sVnClhoatw9SVV0QpXdFBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:81:89:cb:38:95:d3:72:c1:93:53:d0:52:98:3e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77813f6c5670a58686adc3d4955744295dd1419
Validity
Not Before: Jul 1 15:01:07 2025 GMT
Not After : Jul 2 15:01:07 2025 GMT
Subject: CN=7706e894831db60167ad39b1e04dc52c4a480332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b5:e7:e2:b5:31:d8:94:88:8e:56:82:e0:06:
6e:bc:62:ea:fa:30:17:32:8b:b3:19:b1:33:d3:b3:
53:26:49:70:56:95:69:70:03:a9:a0:cf:4e:a8:26:
df:3c:cf:d2:c3:8c:c4:0e:7b:82:f8:66:95:ed:83:
38:a5:8f:de:93:4a:ca:d4:14:68:5c:d2:0b:0d:00:
99:21:8a:14:e4:1f:ad:5f:b8:59:0e:e1:18:0e:62:
a5:5a:70:e2:84:7e:d3:73:11:56:0b:51:b8:07:2f:
ad:21:c8:d0:61:26:86:c2:0c:fe:ac:6a:e6:81:c7:
81:6e:71:6a:3e:2c:60:13:88:1b:7f:34:fa:b1:f5:
75:c0:14:52:8b:3b:91:17:56:21:fb:20:82:e8:61:
86:c6:10:91:ba:ff:1b:f0:e7:52:e9:49:d6:2d:7e:
e3:35:8b:b4:01:91:2a:f3:cf:27:13:16:96:d0:ff:
52:f3:53:30:14:57:66:73:d7:e1:15:b8:7d:9a:49:
4c:73:87:76:e6:2a:51:b4:33:c9:b0:ec:ec:0d:59:
a9:66:00:4b:01:db:6e:ab:51:b7:8a:bc:47:c8:8d:
a0:09:e8:b2:13:d7:0b:4d:a2:e1:af:2d:2c:4b:45:
60:62:14:43:aa:3e:ad:a7:bb:75:92:84:a3:41:fc:
7b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:06:E8:94:83:1D:B6:01:67:AD:39:B1:E0:4D:C5:2C:4A:48:03:32
X509v3 Authority Key Identifier:
keyid:B7:78:13:F6:C5:67:0A:58:68:6A:DC:3D:49:55:74:42:95:DD:14:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3gT9sVnClhoatw9SVV0QpXdFBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f9:3d:2c:83:62:d7:3a:8f:c5:6e:f6:05:34:34:b2:d1:b7:
04:7e:51:15:52:1c:01:9b:9c:4b:89:7b:98:d7:37:b2:7f:5c:
ca:8a:43:28:01:4c:cc:5f:81:fa:cc:d3:1b:e0:22:5b:68:c1:
dc:78:a1:4d:48:3c:b4:d9:24:4c:b2:8c:37:d9:85:5c:13:36:
0a:ca:1d:dd:f6:98:ac:6c:3e:a8:bb:90:02:62:df:30:88:9d:
d2:e8:92:1b:d5:ec:71:95:2d:c9:0e:3d:fe:6d:f7:65:26:c8:
32:58:4b:68:a1:b1:36:0d:aa:ed:08:3e:49:98:ca:20:ce:70:
44:04:c4:21:08:72:bd:92:dc:7a:b1:e8:16:3c:73:3c:57:d7:
72:ec:f0:ba:4a:13:93:e8:fe:80:e5:ac:10:79:13:24:69:5b:
1a:11:19:89:b9:25:82:96:20:00:03:04:8c:9d:9b:d1:06:13:
5d:e7:0e:4b:71:8e:d6:9d:9c:f5:b1:fc:c3:07:c8:01:1a:45:
84:6a:48:14:c2:4d:ad:b1:ef:75:7e:8f:67:c4:cd:2c:df:c7:
d6:8a:6b:d3:73:17:2d:5d:84:02:90:49:05:a6:a4:96:11:e9:
9d:8e:4b:ed:07:d6:c1:03:7e:ff:ad:32:ae:32:55:90:f3:3a:
88:08:3e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 23:12:21 2025 by rpki-client