Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
File: 77RcySOXjBokve6WzHs683OG0qg.mft (raw, json)
Hash identifier: Q5R4TOujQWFnAtlRxErsPSu6/50n1yBH5aEvLsqtw1Y=
Subject key identifier: BC:9F:77:7D:FF:45:C1:8E:BF:E6:2A:F0:43:3E:E6:2E:E2:5B:F7:87
Authority key identifier: EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
Certificate issuer: /CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Certificate serial: 0198D4E068DB01CE7A3DCB19B12A8C150E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
Manifest number: 0DEB
Signing time: Sat 23 Aug 2025 03:02:13 +0000
Manifest this update: Sat 23 Aug 2025 03:02:13 +0000
Manifest next update: Sun 24 Aug 2025 03:02:13 +0000
Files and hashes: 1: 77RcySOXjBokve6WzHs683OG0qg.crl (hash: BMhkc4/N0v0qc2ZTkmZJSQUgCVK6aA8VQq7h9aJOpEA=)
2: ONW_HHb2ZjsySF4n5zNLufP_Ugo.roa (hash: Fs9suOzCDzlX3MVkt67omPbuhLWfHekY4xcrsMfgW7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:68:db:01:ce:7a:3d:cb:19:b1:2a:8c:15:0e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Validity
Not Before: Aug 23 03:02:13 2025 GMT
Not After : Aug 24 03:02:13 2025 GMT
Subject: CN=bc9f777dff45c18ebfe62af0433ee62ee25bf787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:ae:a6:88:74:25:6b:6e:c0:b7:9f:11:22:
cb:61:fc:78:d2:5d:8c:23:a0:46:dc:b5:a3:a5:41:
5d:a9:37:cc:7c:41:23:0c:41:71:bf:21:1a:82:c1:
43:73:c6:03:7f:46:e0:62:98:7d:81:ad:54:08:d1:
3e:93:3b:5e:ef:8a:2b:0a:f1:66:7a:8c:95:41:7d:
3b:b3:f4:7e:7a:f2:21:8d:4b:6e:fa:b9:32:d4:60:
ce:63:4e:09:2b:0c:1c:06:e3:0b:44:37:00:ca:3c:
70:90:a7:56:11:7d:ba:72:d8:77:2c:0b:6f:07:df:
28:76:4d:ed:52:b8:d5:26:aa:83:da:28:9d:f5:68:
82:d6:d1:c0:7e:03:91:81:39:55:62:86:7b:ac:12:
0d:c9:83:fa:89:f5:7d:a4:ef:5b:9d:7b:54:0e:c6:
10:8a:21:29:90:25:ff:cc:6a:d6:2f:7d:2c:98:46:
50:c7:c5:11:c9:41:17:cb:16:b5:c4:e6:96:a2:c5:
f6:c0:4f:e1:fd:c1:f0:9e:71:43:63:1b:78:3f:66:
90:d9:df:dd:06:57:5b:5c:92:19:3c:eb:32:96:2e:
a5:ae:0d:76:78:53:7e:d9:af:c9:97:d8:ea:de:ec:
ba:91:90:d3:96:e3:b1:6d:2b:d4:99:12:ca:cf:55:
0e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9F:77:7D:FF:45:C1:8E:BF:E6:2A:F0:43:3E:E6:2E:E2:5B:F7:87
X509v3 Authority Key Identifier:
keyid:EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b6:2b:1d:7f:5b:12:42:01:e6:ca:28:12:c2:a1:f2:f8:29:
e0:62:34:8e:de:40:a9:ae:57:98:bc:4d:d9:92:7d:36:3b:fc:
d1:ed:a8:26:20:f9:b9:5f:88:a4:97:f3:09:3a:99:a6:30:df:
9e:f4:48:b0:4d:9d:75:da:49:6a:b9:8a:45:48:d8:77:10:c7:
6c:4a:36:c9:00:48:44:79:75:f7:32:71:d7:cd:69:08:8b:c5:
ae:92:6e:40:4f:31:8a:81:a2:3a:e3:7f:0d:ff:57:2b:a8:aa:
56:f4:18:f1:50:a2:aa:51:31:5c:c3:0c:95:e2:05:62:7b:0d:
95:db:a4:5d:08:1f:13:3f:32:a8:01:e9:86:97:de:9a:f9:d6:
04:ef:0e:c4:1c:ea:07:94:05:ff:de:49:c3:bb:67:c4:60:be:
c1:c9:68:87:f8:e3:6e:03:5a:a4:44:6f:64:01:16:d7:b2:6f:
eb:c6:fc:9c:0d:13:85:74:ad:b9:5f:d9:38:41:46:59:e6:92:
cb:cd:7f:de:3c:b7:6c:6f:99:a3:fe:b6:e8:66:e3:c5:10:31:
89:f5:b8:42:0c:70:00:03:40:62:02:bb:69:29:ad:83:c9:5e:
14:08:32:f0:f3:e1:7d:59:fa:c2:75:d3:7d:0b:62:1d:41:3a:
41:5b:e5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:12 2025 by rpki-client