
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
File: cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft (raw, json)
Hash identifier: DcrQNc0CyJWnoJPx7rDJHZ6GH3FehfUQPHf5za6Thl8=
Subject key identifier: 92:E1:45:99:54:77:F7:93:E5:5A:60:6B:8C:5A:8D:45:5C:50:3E:55
Authority key identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
Certificate issuer: /CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Certificate serial: 0197B7EA68C0706128994E5295846DD1BAEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 19:01:22 +0000
Manifest this update: Sat 28 Jun 2025 19:01:22 +0000
Manifest next update: Sun 29 Jun 2025 19:01:22 +0000
Files and hashes: 1: 2tI0pPHAMAIk_osuAaaPnbBYiYE.roa (hash: Y+gWUa2jjd6N+7XsleK0WmIL5jH60gWVDj3pYUgybgk=)
2: cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl (hash: /e5y1EIH8swxOoNmBc1qajKEFQQpsOzjA8DoWMsV35g=)
3: fs0ZmJI91FgrAyS_qaO4SZnCnx4.roa (hash: ycybeagUIzrtezPLqz+FSenm/c5GMC1YyzGUnHiNwd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:68:c0:70:61:28:99:4e:52:95:84:6d:d1:ba:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Validity
Not Before: Jun 28 19:01:22 2025 GMT
Not After : Jun 29 19:01:22 2025 GMT
Subject: CN=92e145995477f793e55a606b8c5a8d455c503e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:32:1f:3f:2e:69:88:9f:8b:a5:a2:5d:5d:c4:
6b:33:58:bb:8d:80:5f:7e:ac:59:b2:75:41:d6:87:
4c:c2:12:67:82:f2:6c:49:a1:43:ed:68:25:36:4d:
93:d2:4f:44:26:f4:30:7e:5d:7d:26:cc:a9:4e:ec:
cb:23:50:fb:97:f3:f9:c2:58:23:2f:80:76:8d:4d:
5d:46:88:25:1b:a5:ac:87:f7:60:89:fb:9c:d4:ae:
b1:d0:51:76:f2:64:a9:46:c4:e6:07:09:e3:7a:db:
e6:d0:88:de:79:a5:eb:33:95:37:2f:56:88:31:3c:
2d:8e:df:9a:68:50:6c:71:2b:b7:fb:28:c5:0a:c4:
2d:c2:8c:59:d6:ac:ce:a0:f8:9b:d8:d8:be:84:cb:
b0:00:0c:3f:bc:e8:94:bb:1e:e5:b8:fc:70:cd:a5:
86:77:f5:b9:26:a1:c3:93:18:54:be:7e:c4:53:51:
f6:84:4a:69:1d:ad:90:09:05:8b:36:ea:84:fe:e5:
87:c4:1d:4b:f3:49:dc:e3:ca:18:b7:e4:07:3e:d0:
b2:47:73:75:a3:34:2e:b4:a9:e6:40:2d:cc:37:9f:
b4:95:12:23:3d:8b:fa:c5:c5:a1:62:84:89:5d:db:
81:e6:a9:47:2f:19:9b:13:bf:42:a7:2b:6f:c4:4e:
ca:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E1:45:99:54:77:F7:93:E5:5A:60:6B:8C:5A:8D:45:5C:50:3E:55
X509v3 Authority Key Identifier:
keyid:71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e0:2f:a7:5b:7b:ed:82:d4:89:58:37:e4:13:23:ee:e4:cc:
1c:e8:21:39:3e:6c:8e:d9:f5:2c:09:d8:5e:6a:16:2e:86:be:
78:10:8b:da:6b:4a:28:90:7d:6d:cb:b0:a2:14:9d:b3:99:33:
e8:66:8b:4d:c5:ca:b1:1d:9c:12:2c:9f:3e:9e:80:8e:ca:00:
8f:5b:9a:14:38:8a:28:27:d7:ee:a8:a5:36:37:d5:96:35:32:
77:61:b5:10:e7:69:b8:3d:a1:9d:1b:be:c4:a9:e9:fe:c0:c5:
27:90:e9:b7:7b:7b:24:1d:07:b7:94:34:bd:45:19:93:61:2c:
7d:7f:88:75:05:e0:ed:cb:83:d4:c8:90:bb:34:b0:28:28:a7:
80:7f:1b:a9:7b:62:ca:46:46:a6:4e:ce:35:ac:cc:56:40:3b:
5b:bc:d4:f3:10:93:65:68:56:bb:3e:82:c5:38:df:37:ed:bd:
69:d1:7d:01:85:50:9d:68:6d:4c:1a:4a:d3:fa:06:1a:3b:18:
05:dc:9d:71:10:93:99:58:11:90:40:2a:20:f6:c3:bc:df:73:
be:09:6f:e1:6c:37:7e:68:33:18:b7:c9:c7:25:8a:5d:b3:ca:
21:01:11:85:05:e9:ec:b0:06:ed:79:ab:3f:a2:22:1a:bd:35:
69:dd:58:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:40 2025 by rpki-client