Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
File: 18pTroRCI2dXp4Bm5OIXM_dYQHo.mft (raw, json)
Hash identifier: rh7PHMZsZNyWBUDr1dRTrI/ZW+HoJPowKkLdMI56Z0w=
Subject key identifier: B6:5E:31:EE:CC:F3:07:91:65:56:15:5C:3E:86:DC:13:CD:18:BA:31
Authority key identifier: D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
Certificate issuer: /CN=d7ca53ae8442236757a78066e4e21733f758407a
Certificate serial: 0198D6604D9E4A8DD23224951745F4842AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
Manifest number: 11D2
Signing time: Sat 23 Aug 2025 10:01:32 +0000
Manifest this update: Sat 23 Aug 2025 10:01:32 +0000
Manifest next update: Sun 24 Aug 2025 10:01:32 +0000
Files and hashes: 1: 18pTroRCI2dXp4Bm5OIXM_dYQHo.crl (hash: QHz5lUA1pq0F2ETXpOpFY9imB0C2zkzrPi+qYUbC530=)
2: 38s2EfLKTKzwDnKrug63iitVwN4.roa (hash: e5mS3BLPFSR7Y2uJcSkAUNlVQiD5b7eKpGpMN+urBn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:4d:9e:4a:8d:d2:32:24:95:17:45:f4:84:2a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7ca53ae8442236757a78066e4e21733f758407a
Validity
Not Before: Aug 23 10:01:32 2025 GMT
Not After : Aug 24 10:01:32 2025 GMT
Subject: CN=b65e31eeccf307916556155c3e86dc13cd18ba31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7f:49:a0:f2:b4:55:86:a0:f5:3f:7d:f7:b6:
62:ca:bc:21:6f:43:b9:d6:55:70:5f:ca:98:e2:3e:
4a:ba:ee:91:e3:e3:a7:3e:78:b2:cf:07:dd:f6:06:
6b:b0:6f:46:7e:2b:cc:3d:63:e8:d9:23:39:9b:02:
9c:21:8c:dd:8b:1b:85:2d:1e:58:4b:b3:f3:20:77:
2f:9c:ca:d4:1a:1c:0e:99:ee:48:81:e2:66:54:59:
d5:d2:d6:dc:1e:47:3d:ae:63:ec:19:b1:2c:65:71:
d2:7e:22:38:01:d5:5b:80:c9:ff:dd:9f:51:e8:19:
da:d7:0c:7e:49:0d:08:b2:2a:54:9e:47:94:dc:30:
9f:cd:37:88:61:1d:7a:cf:ac:73:ee:63:5f:6a:08:
cb:2a:86:66:b8:c4:9d:d1:40:d5:2d:de:7f:06:f4:
0d:22:38:83:7d:61:54:bb:be:ea:8c:55:64:3a:51:
e3:1b:d0:db:07:1c:4e:1a:e4:04:a8:ac:47:45:90:
59:5d:8b:55:c9:6d:4b:3c:99:39:74:2e:0d:be:31:
36:9d:2f:d8:2d:44:2c:61:30:85:97:e7:66:7b:12:
ba:82:d4:7f:bc:de:c3:a2:7a:8f:ed:a3:95:12:10:
4a:8b:b6:1e:6e:76:d7:96:23:73:55:9b:3a:6b:3c:
86:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5E:31:EE:CC:F3:07:91:65:56:15:5C:3E:86:DC:13:CD:18:BA:31
X509v3 Authority Key Identifier:
keyid:D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:54:db:f2:5f:08:eb:8f:70:e5:94:f7:f9:54:bf:34:69:73:
91:40:af:d9:75:88:fe:fb:a1:bc:2f:3b:e6:be:ab:63:25:2f:
a8:1c:72:0d:41:b8:6b:e8:53:53:2f:5a:9a:84:15:30:2c:29:
c2:e6:90:3b:f1:db:0b:ed:49:ae:ba:90:d9:83:33:6c:d3:f1:
40:97:08:0f:92:9f:6b:10:e3:f0:1f:07:07:e6:69:64:93:45:
58:22:b5:f4:89:39:6c:2c:78:1f:2e:46:05:2e:89:4e:9d:0e:
94:4f:d5:35:96:d2:73:8a:da:08:3e:6f:ec:e1:f9:01:3a:44:
6b:73:77:84:1b:8c:fb:97:25:2e:66:a0:21:6a:d8:d2:e8:57:
44:c7:c0:2e:45:38:7c:0b:00:b1:0c:e9:f3:9b:48:82:9c:5a:
1e:fb:db:cf:d7:2f:b0:55:8f:a5:c8:20:bd:97:c2:61:ec:61:
bb:b5:2d:b7:d8:4b:41:a7:7a:5e:54:61:19:bd:71:38:e3:c2:
d1:71:1e:90:a5:8f:0e:1d:a4:71:e5:c7:fa:91:f2:2c:07:e5:
82:a6:e9:90:6e:1b:9c:19:79:04:48:39:f4:ea:a3:aa:91:cb:
6b:74:ac:00:f3:01:42:79:0b:94:5e:bc:f6:f9:b1:27:e5:d7:
8c:cf:5a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:22:17 2025 by rpki-client