Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
File: 10L6T7KPryihjordTBDJYzfDxMU.mft (raw, json)
Hash identifier: bVsUDEq7KgsYb8nPsb+ZM5DLkpDwZtACcm1jVTGKuLI=
Subject key identifier: ED:DF:B2:58:F6:8B:B6:46:66:AD:CF:E2:CB:42:5A:5F:2C:FC:41:3E
Authority key identifier: D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5
Certificate issuer: /CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
Certificate serial: 0198D4747F04E77F561DD92B678EAEEB8DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:04:21 +0000
Manifest this update: Sat 23 Aug 2025 01:04:21 +0000
Manifest next update: Sun 24 Aug 2025 01:04:21 +0000
Files and hashes: 1: 10L6T7KPryihjordTBDJYzfDxMU.crl (hash: bb5eHl/mVz6mT1A90NJXX4KPi3P3noxk9jK6QNwSinU=)
2: DIiJmhkGPOYoFSzKU5OJGHxPZv0.roa (hash: wVFQMX+v03An5N7stfoX0LOfftlraoV2nDd1HWqmadg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:7f:04:e7:7f:56:1d:d9:2b:67:8e:ae:eb:8d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
Validity
Not Before: Aug 23 01:04:21 2025 GMT
Not After : Aug 24 01:04:21 2025 GMT
Subject: CN=eddfb258f68bb64666adcfe2cb425a5f2cfc413e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:94:db:63:3d:30:e6:a9:c0:e5:a6:ed:d2:67:
64:3a:73:a0:96:30:f3:13:65:97:87:e3:92:fc:cb:
ca:d4:1c:1b:3a:2f:10:ee:7b:eb:8a:71:77:57:ac:
64:06:1d:38:77:7a:92:b4:d3:92:d9:68:b8:18:6d:
3c:e8:80:3a:56:ac:c5:ba:21:fd:52:c4:b4:38:0a:
9e:e6:72:7c:71:61:40:e2:8e:72:92:5e:e8:c7:ae:
70:2e:5d:76:f1:2d:48:08:35:cc:c9:79:f6:a2:db:
fc:8b:19:c3:17:7b:d0:3e:91:7b:59:d8:25:6e:55:
38:69:a8:29:c6:10:cb:6f:17:77:4f:a3:e5:32:a5:
8a:cb:ee:25:e8:be:cc:41:e5:b2:33:2e:47:bf:84:
4a:06:24:da:bc:df:a5:82:77:48:f1:f2:2a:c3:7b:
dc:89:e7:5a:f1:11:a1:6c:11:cb:3c:c7:88:0d:59:
f3:aa:e0:c5:fb:90:e1:54:51:4f:19:ca:53:df:4d:
d4:f5:07:bd:8b:8a:ae:88:05:62:98:d0:2d:8e:c0:
2b:9a:39:ab:a2:b1:41:2e:fd:bd:91:39:d4:94:3f:
58:2a:d4:fc:61:ab:aa:10:39:b6:09:97:1b:fc:e7:
bc:77:66:72:21:8c:cb:97:93:2e:45:4d:ba:aa:3d:
54:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DF:B2:58:F6:8B:B6:46:66:AD:CF:E2:CB:42:5A:5F:2C:FC:41:3E
X509v3 Authority Key Identifier:
keyid:D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:0c:03:4d:93:e6:84:79:da:bf:ea:a0:d6:e6:2d:b4:01:4e:
d8:fc:7a:d6:a6:59:38:9d:08:cf:f3:36:1e:1b:97:47:d1:20:
bc:de:71:13:49:0f:3f:e2:af:71:30:49:d8:31:de:a7:1d:84:
ae:ce:30:a5:97:6a:db:b8:cc:da:49:38:00:49:f3:e6:12:17:
8c:c7:d7:f1:59:5f:18:af:41:35:c3:cf:8a:30:a8:e2:3a:c1:
4b:82:4a:7b:0a:01:4f:c1:5d:b3:0e:ce:5e:a4:24:27:06:cd:
02:1b:69:c9:57:46:56:be:9f:58:2b:3e:13:92:c0:76:d6:22:
8f:dc:73:ef:8f:32:bf:e2:22:33:2f:7c:5c:92:0d:62:4a:02:
d4:2b:df:e2:28:e0:85:36:b3:1e:3b:9c:b5:35:cd:b0:4a:00:
34:be:80:af:42:c4:4f:bc:2a:2e:44:df:57:e6:6b:9f:f6:5f:
b5:35:50:56:2a:25:e6:66:8e:96:67:29:99:d2:01:62:67:7c:
63:a9:f8:6a:eb:85:58:87:0e:13:d4:08:dd:80:e8:97:d7:ec:
83:71:70:81:ab:54:4b:5a:ef:9c:0b:5f:83:92:39:ef:a9:57:
e4:18:d7:40:7f:a3:21:a7:ea:04:97:b1:5d:0d:90:22:af:92:
5a:d2:3c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:47 2025 by rpki-client