
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
File: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft (raw, json)
Hash identifier: dvlL3ilNh43SLBg6JARmYKA3eu+dTiEfnxtoFBER64U=
Subject key identifier: AA:8E:1F:49:76:15:95:32:4F:51:0D:FC:DB:16:C0:21:58:0E:82:04
Authority key identifier: AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64
Certificate issuer: /CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64
Certificate serial: 0198D5F18EB3DC3F611E97A38CDFE44FBFFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
Manifest number: 120F
Signing time: Sat 23 Aug 2025 08:00:34 +0000
Manifest this update: Sat 23 Aug 2025 08:00:34 +0000
Manifest next update: Sun 24 Aug 2025 08:00:34 +0000
Files and hashes: 1: TImGbHFcysH3yKCENp7I2KDKakw.roa (hash: wV738mzWH7BpaMNjeVJLX60iXYrXwr7zU2chvPIlwaE=)
2: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl (hash: tKRY90QNaXgA6s/3Qet0uFYnSsLs6Pq5ukADg7Buq6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:8e:b3:dc:3f:61:1e:97:a3:8c:df:e4:4f:bf:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64
Validity
Not Before: Aug 23 08:00:34 2025 GMT
Not After : Aug 24 08:00:34 2025 GMT
Subject: CN=aa8e1f49761595324f510dfcdb16c021580e8204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:9a:7c:90:15:11:19:a6:d7:08:1a:09:66:
a2:2e:ad:4a:e3:3c:bc:f9:6a:f2:40:0a:27:80:42:
b4:5d:cb:a2:02:e2:b6:35:d6:3e:c0:23:8c:e9:44:
43:8e:6f:09:ad:2f:18:67:c4:dc:d3:9a:59:cd:4e:
bb:5d:83:29:68:7f:58:80:be:8f:7e:2f:da:1f:ac:
01:72:11:85:12:51:29:8b:f9:25:69:3f:95:c4:58:
e1:0a:16:03:0a:b1:27:79:01:8c:04:33:f9:b7:89:
49:56:f0:d0:6e:b1:f8:5b:c5:18:9f:b7:09:68:e7:
a4:f5:e2:d5:33:b4:b9:8b:6a:c8:2a:e0:d8:84:66:
73:32:95:41:bf:0c:41:ca:cb:5e:81:8e:f7:63:53:
c1:73:60:7b:b2:90:23:9b:dd:c9:23:14:f8:fc:d1:
26:60:94:4f:09:7d:0d:4c:10:d5:f8:5e:0f:31:51:
a1:aa:45:b9:8a:68:cf:5f:a3:e6:27:43:9d:f5:50:
cf:6b:77:35:78:41:78:05:da:64:e9:9a:4a:7f:8f:
bb:9b:ac:f7:06:8e:cb:d4:21:58:14:c5:7e:96:1d:
10:2a:e7:c4:0c:8f:3d:85:3b:d5:70:ac:5d:85:b6:
03:37:44:6d:77:0a:ae:6e:de:0f:e1:fb:2f:90:df:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8E:1F:49:76:15:95:32:4F:51:0D:FC:DB:16:C0:21:58:0E:82:04
X509v3 Authority Key Identifier:
keyid:AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:08:b3:1c:db:76:4d:5c:f5:12:c8:8c:43:ee:48:91:93:99:
19:29:0f:75:a9:6e:fb:6d:2e:50:a5:56:07:90:b8:68:95:3c:
bc:96:4e:c0:4e:8b:68:99:b5:95:07:96:ee:47:2d:0f:5b:98:
c8:b1:38:2e:0e:a3:64:11:f3:d7:c3:6f:a6:0a:b0:8a:8b:7d:
24:a6:11:6c:b8:1c:f0:fa:96:f2:91:61:ad:33:c3:35:af:2c:
f7:39:fe:7b:29:1c:d0:a4:9c:e2:05:ae:4b:a1:2d:00:c3:08:
ee:9b:59:86:1d:34:0d:c0:e3:dd:76:a3:d2:49:55:14:13:ab:
e0:f2:a1:2c:d0:c1:c9:37:ac:4a:3a:24:3d:b5:1b:98:1c:bd:
ba:65:54:05:c8:cd:51:77:11:dd:27:e3:ac:59:b6:61:fd:a3:
79:98:74:6b:c0:37:16:37:c1:69:a2:cc:b4:48:b9:a1:01:7f:
60:7b:9b:0a:63:1b:5d:9b:bb:1d:39:f1:e4:3a:f2:3b:6c:14:
4c:e1:83:62:ab:1f:f3:fb:2f:fd:ec:1b:d3:1f:b0:72:5d:66:
66:92:90:ac:55:88:20:5e:5f:0e:5a:aa:c7:47:c9:67:be:fe:
34:f7:30:42:77:92:be:d3:b3:c6:63:9c:11:c7:17:fd:8b:b1:
93:b1:33:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:23:41 2025 by rpki-client