Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
File: cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft (raw, json)
Hash identifier: 5sam92HRMSEenbLGc1sHAY9vRniGwXZ1WbiP9VaOWQ4=
Subject key identifier: D1:B3:83:F6:61:44:6C:1C:2C:65:9F:D0:0A:6F:19:6D:75:DD:58:23
Authority key identifier: 71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
Certificate issuer: /CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Certificate serial: 0198D583A2F786DFBCDE9B46F1278517467B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
Manifest number: 0ED0
Signing time: Sat 23 Aug 2025 06:00:30 +0000
Manifest this update: Sat 23 Aug 2025 06:00:30 +0000
Manifest next update: Sun 24 Aug 2025 06:00:30 +0000
Files and hashes: 1: Y4BycvpgIPFrj5lhsii_AUvYAWw.roa (hash: brKO8LRrExe011Bv/UP5eEIq/IhdQ+O1vYEiLB6elCE=)
2: cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl (hash: RQH5oEaT5PqOKP/23Nxf+1sKtgRRPb60Oy1LtcoZBCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a2:f7:86:df:bc:de:9b:46:f1:27:85:17:46:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Validity
Not Before: Aug 23 06:00:30 2025 GMT
Not After : Aug 24 06:00:30 2025 GMT
Subject: CN=d1b383f661446c1c2c659fd00a6f196d75dd5823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:24:b9:26:0d:c8:f7:2f:a5:76:ee:7c:e5:a6:
66:a9:75:8e:7b:2e:53:64:6a:b1:d4:13:00:0e:24:
02:2e:66:2a:2c:10:02:e2:7d:4d:84:61:c5:64:f5:
24:17:23:83:6a:9e:bc:9a:a8:0b:72:26:ef:0a:81:
82:c9:e4:39:12:b3:21:ca:6d:cb:fb:2b:75:de:0d:
d1:30:20:43:d0:34:f9:16:5f:ad:f1:45:50:68:95:
17:7d:4a:9d:8c:ba:b7:2d:05:1e:3c:02:8a:71:d2:
50:1f:14:61:34:89:0d:de:2d:03:6e:58:4b:d8:91:
45:e3:b8:6d:d1:7b:5d:28:2d:61:1b:34:d0:b7:03:
c3:b8:4d:0b:9d:8c:94:5a:a1:27:a8:70:cf:52:e8:
aa:a7:1c:27:98:02:1c:3d:2e:5c:9e:09:69:31:f8:
2f:b1:a6:a3:7e:92:88:7f:d8:82:02:0e:fc:72:65:
36:c3:b7:1d:a2:de:a5:7d:e1:63:da:be:b3:c5:94:
6f:00:1a:98:15:a5:2e:4e:d2:ef:96:99:e2:e8:ab:
6a:bd:46:45:21:77:9a:26:ea:8f:18:43:1a:b3:1b:
81:32:3d:5e:a6:6d:ce:16:7e:30:8c:3b:fb:8f:18:
2e:80:33:e4:d2:9f:db:a3:61:d7:fe:fb:44:10:cc:
79:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B3:83:F6:61:44:6C:1C:2C:65:9F:D0:0A:6F:19:6D:75:DD:58:23
X509v3 Authority Key Identifier:
keyid:71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:cd:76:96:ca:1d:57:1d:f7:12:fc:b6:5d:ad:9f:a7:3b:6c:
95:00:6d:f1:8c:92:dc:3d:64:e6:a7:36:af:0d:84:c6:6e:66:
e9:c4:8e:a7:9a:e4:eb:ee:06:ac:5a:32:e2:82:39:fe:ed:3a:
df:d6:24:c5:91:0d:ec:be:0d:a4:98:ee:c2:1f:fa:d4:6f:4a:
9d:bd:50:55:1d:63:d2:0b:6e:cf:d5:e6:dd:7d:93:67:b7:be:
dd:e3:38:07:c5:73:03:97:1e:da:ad:92:d3:11:be:9f:b0:0b:
ec:ba:82:87:e9:c8:4d:da:1c:74:6b:78:c4:b3:7c:30:2a:32:
28:e5:ce:72:cb:39:f0:a6:bf:cb:75:20:75:6e:db:bb:4d:ac:
95:97:74:60:00:ff:4e:bb:35:a6:66:3c:bb:a9:d8:03:f3:61:
0d:ed:aa:83:0c:62:93:12:a8:03:cb:2e:26:e4:d5:13:92:e0:
a5:92:a6:53:80:d8:1e:7b:f3:62:85:ad:88:43:a1:d8:33:99:
ee:12:40:27:1b:3c:a3:cc:5e:71:cc:79:60:26:14:84:ba:a2:
dd:55:10:c6:05:cd:9a:65:51:4e:cb:3a:9f:3e:29:0a:42:51:
0d:cb:68:b6:67:ef:43:fb:1a:ba:92:3a:65:61:f9:2c:50:60:
31:65:17:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:19 2025 by rpki-client