Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
File: t3M-nelIW0RnHI5RHaIh5BU8cRs.mft (raw, json)
Hash identifier: EtvbhpPchfZ0V8nQWRuy55cgD3EJtrutZbPxFGK/geU=
Subject key identifier: 17:94:F2:C7:A6:11:3B:D1:81:98:DE:42:DA:B4:5E:E2:95:21:2C:D0
Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
Certificate issuer: /CN=b7733e9de9485b44671c8e511da221e4153c711b
Certificate serial: 0198D515ECEC21D533DA14A1D61994252BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
Manifest number: 165B
Signing time: Sat 23 Aug 2025 04:00:40 +0000
Manifest this update: Sat 23 Aug 2025 04:00:40 +0000
Manifest next update: Sun 24 Aug 2025 04:00:40 +0000
Files and hashes: 1: MTPWLW2wZKUX3rd5H2fglwcmRP8.roa (hash: NV6d77rjaDRaqkT0W7HOp+x3FnU/qH62m4QIfaIEmLM=)
2: t3M-nelIW0RnHI5RHaIh5BU8cRs.crl (hash: xWRrG8IZ/u4R/6PoE4EO3HHHTrA5Tg2pkudTX1vKA4M=)
3: zMsRcKOONscECgINX74a-U1WNU0.roa (hash: 6TWMzzay/K1ed+s9hSmFCHo0y4lDFCLVPqVrZje4kuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ec:ec:21:d5:33:da:14:a1:d6:19:94:25:2b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b
Validity
Not Before: Aug 23 04:00:40 2025 GMT
Not After : Aug 24 04:00:40 2025 GMT
Subject: CN=1794f2c7a6113bd18198de42dab45ee295212cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:09:7b:1a:93:f8:99:a5:57:79:04:25:fc:23:
bc:d3:01:88:b4:43:ac:e6:84:b2:64:88:36:35:4a:
85:96:85:41:12:ea:09:07:52:a4:61:37:18:4c:5d:
cb:82:ea:f1:ea:11:dc:62:69:78:c7:75:71:86:a7:
40:be:8f:5a:3f:c2:77:1a:a5:cc:9b:7e:48:0c:fe:
a7:8b:8b:8f:0d:0d:2b:7e:0e:66:e5:dd:9d:c4:d0:
f4:f2:06:6c:28:04:8c:8d:5c:ac:a8:05:78:34:50:
16:96:fc:69:1e:97:19:69:aa:8d:d6:e7:db:c8:9b:
53:d2:53:3a:b5:4e:cb:05:60:f2:37:e4:0f:8c:7c:
36:2c:f0:44:c6:02:a2:85:f8:5f:75:0a:0f:35:89:
92:88:a6:90:a1:42:99:49:bd:9f:cc:e9:ee:bd:37:
2c:db:9a:15:ee:48:9d:9d:e6:37:6c:b0:ec:43:d2:
77:0a:f2:1d:a1:e4:31:4b:bb:b7:15:a3:a6:02:72:
9e:c2:19:3d:c6:a2:0b:75:38:a9:72:a1:ef:8f:43:
e1:a6:22:d1:80:2a:39:ae:08:19:fc:52:ff:d6:3c:
3a:14:46:fd:c1:2f:cc:bf:dd:39:80:78:3e:54:47:
02:53:b3:85:4d:88:14:3a:c1:f1:47:f3:ff:6a:40:
2b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:94:F2:C7:A6:11:3B:D1:81:98:DE:42:DA:B4:5E:E2:95:21:2C:D0
X509v3 Authority Key Identifier:
keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a5:c2:de:70:ab:51:18:79:e0:0d:c5:69:3a:df:6c:b4:2e:
1a:7d:c7:67:1a:97:29:3d:82:6c:92:52:17:c5:2e:46:b2:5a:
b3:44:c1:36:e5:e3:f5:7e:23:cd:0e:9a:f3:5b:bc:22:a4:2e:
34:d2:a4:82:ab:5c:75:ca:7d:5a:c6:fc:f8:bb:7b:b2:32:fb:
bc:bc:e2:80:cc:3a:26:b7:0a:88:29:fd:cf:ce:11:38:e3:c4:
18:2d:6c:19:b6:cb:13:46:c2:5b:9e:b9:72:f6:c2:e8:38:09:
0d:55:22:7d:32:b1:a6:66:39:6a:84:1b:8b:50:80:19:14:3d:
11:dc:89:8b:af:c7:d5:30:0c:e9:3e:fd:c7:19:cf:94:13:f6:
b1:83:58:fa:8f:8a:9a:6f:02:99:f8:70:9f:8f:6f:dd:0e:97:
4f:ff:c6:ce:5a:f8:8c:3d:f5:80:75:a9:d1:c6:61:03:47:ee:
74:a6:fb:0b:c8:9f:0b:87:f3:ef:f0:95:2c:3a:bc:b3:f2:65:
54:fe:42:f2:83:73:cc:6e:e6:71:f1:8f:cd:49:62:d0:2c:dd:
22:7f:2b:d3:95:2e:17:7a:51:06:5c:55:e4:d0:23:5b:65:97:
81:39:b5:14:58:d1:c5:ba:61:24:01:30:26:ae:ab:b8:ee:21:
d9:95:b4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:17 2025 by rpki-client