Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json)
Hash identifier: IYYRI9TmMS1mQlyZ1eiBzYxLsV8DtOnpqjFnS4CLmvU=
Subject key identifier: EE:AC:C5:C3:F9:70:B0:54:C7:53:9A:B5:C7:31:75:86:4C:DF:F2:BC
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial: 0198D5F1AA00D75266B9C53668BDDB824FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
Manifest number: 1080
Signing time: Sat 23 Aug 2025 08:00:41 +0000
Manifest this update: Sat 23 Aug 2025 08:00:41 +0000
Manifest next update: Sun 24 Aug 2025 08:00:41 +0000
Files and hashes: 1: 3vMVhDVuSakGpKEegLzmX9CZn_0.roa (hash: 0WA7LBg+VlA+MYR6g5nbmdux2cCvdzgMgFAqrxmL/5k=)
2: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: vfCG0KIZmsKXlJqqHl+oAPNZZejhKjDqvWTpJJpEUas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:aa:00:d7:52:66:b9:c5:36:68:bd:db:82:4f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
Validity
Not Before: Aug 23 08:00:41 2025 GMT
Not After : Aug 24 08:00:41 2025 GMT
Subject: CN=eeacc5c3f970b054c7539ab5c73175864cdff2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:d1:9a:5c:88:0e:60:f6:ab:2f:19:1e:f7:
b2:74:33:1e:a0:c4:bf:43:66:79:0f:2f:4b:63:3b:
d3:3d:49:78:ba:8b:17:8d:76:5d:9c:5d:e3:52:f7:
40:b8:ad:94:6c:57:1f:cc:10:6c:90:6b:1d:ae:9a:
ae:37:5b:58:a7:48:8a:1d:a6:4a:ea:48:c6:6c:07:
00:e9:e6:d5:13:b4:7b:50:a2:3a:e2:86:9a:14:38:
ea:86:b9:6e:8b:e2:a1:d1:c0:5a:66:5f:79:53:8c:
8f:49:86:15:a0:88:fe:d1:2f:53:6a:32:42:e8:4e:
bf:6f:9d:96:dc:cf:a7:ba:2e:94:9e:11:d1:49:b4:
6d:18:c5:5a:f4:8d:64:c0:3e:4b:06:42:c8:a0:60:
62:89:4f:32:ef:84:39:d3:df:39:04:b6:8e:29:f5:
3b:a3:95:81:7d:dc:58:41:5f:fa:31:81:40:be:a1:
c1:72:a0:1b:da:09:57:6a:71:58:28:35:7c:de:83:
1e:96:07:61:9e:2c:ef:f8:8b:a5:3c:a5:7f:a6:a4:
21:78:59:3e:cd:46:d5:34:e1:9a:63:f5:b4:bc:1d:
c9:3b:46:b7:68:74:be:b9:d0:b7:10:71:76:eb:56:
5f:2e:bb:1d:21:e5:15:4b:cc:61:99:38:bf:7b:17:
5b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AC:C5:C3:F9:70:B0:54:C7:53:9A:B5:C7:31:75:86:4C:DF:F2:BC
X509v3 Authority Key Identifier:
keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5c:ed:17:26:6c:76:4c:eb:f8:e7:a5:54:9b:e2:4f:fe:a7:
84:50:af:e7:c4:02:be:b9:23:3a:79:21:35:90:1d:8b:56:6c:
73:3f:fd:c3:1d:e3:82:37:95:9e:ef:4c:7a:ab:01:df:05:a9:
cc:48:55:b6:2f:d8:ed:a9:ee:4d:85:1e:f5:af:45:9b:5a:49:
2f:00:a5:bc:82:7f:96:86:df:d3:ef:5d:09:0e:d9:ad:66:52:
44:b5:82:e7:99:8a:6d:0e:c6:e2:7e:d9:e9:5a:e7:be:9e:7c:
8f:08:19:04:77:f7:5d:c3:20:c2:ad:a5:6c:79:74:09:ab:49:
06:cf:56:84:74:29:b7:73:44:bb:db:e3:41:6f:eb:d2:c3:79:
16:60:f2:94:94:70:f6:b2:dc:e3:85:35:66:70:5b:50:26:21:
d5:78:7b:38:b1:f3:1b:8f:fd:e8:bd:ff:5c:55:ef:8f:84:ec:
e4:e1:08:79:7b:d6:5c:2e:a2:35:c7:b8:36:48:cf:b8:83:ba:
3d:59:a6:cd:46:9d:da:6c:e5:a7:e6:c0:94:91:e7:16:d0:19:
d3:3f:8b:b6:43:42:bd:d1:11:3a:7c:9d:bd:fb:54:60:86:de:
3e:f5:ba:05:73:3f:17:eb:bb:c3:25:d4:75:87:ac:df:93:94:
de:8c:03:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:33:33 2025 by rpki-client