Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
File: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft (raw, json)
Hash identifier: TR9wwnzn0OSoJZHqJkFM8R044rE7LyBwClnYeprP5IE=
Subject key identifier: 4B:3E:51:01:59:63:CF:CE:0E:15:56:73:ED:9E:DA:D3:83:6F:E5:59
Authority key identifier: B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
Certificate issuer: /CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Certificate serial: 019872982FEFBF6048F9F2B9819BB4140AF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
Manifest number: 0B71
Signing time: Mon 04 Aug 2025 01:00:32 +0000
Manifest this update: Mon 04 Aug 2025 01:00:32 +0000
Manifest next update: Tue 05 Aug 2025 01:00:32 +0000
Files and hashes: 1: DWyS6ktuYXD1HWtRdim_tw6aAHw.roa (hash: ZpPs8QmClGInLrYdfgabA/tiTnRpT7Agrz+vwk6fAyc=)
2: ebklZqmx0-dRJX-3stcdCCjPSZQ.roa (hash: oxCqtL4IdqqluHjcszErTou8uGJlC2MCnMVsPPzgZCM=)
3: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl (hash: WWi7hIrHGPy3o7cNthG7628YvpPenyO/NTJk7pp/7eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:2f:ef:bf:60:48:f9:f2:b9:81:9b:b4:14:0a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Validity
Not Before: Aug 4 01:00:32 2025 GMT
Not After : Aug 5 01:00:32 2025 GMT
Subject: CN=4b3e51015963cfce0e155673ed9edad3836fe559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dd:7e:cc:c7:f3:fc:be:f6:0d:19:5b:3b:ac:
85:63:16:7a:56:0e:50:80:0f:47:da:a4:22:44:f5:
95:6b:c7:30:3f:42:71:a2:2f:6d:99:1d:13:f3:0a:
ed:e7:4a:06:38:78:63:35:1e:7c:ef:07:d1:0d:3f:
cc:6b:25:a5:d3:c0:3b:ab:70:73:cb:94:3e:59:2d:
2c:66:56:30:9c:be:d4:86:25:83:fd:a1:bb:29:7c:
f0:f8:05:0e:c5:d0:01:67:1f:e7:f2:f1:5d:18:60:
8d:d6:67:ba:63:1f:f6:f2:2c:e7:1d:12:32:44:83:
e6:3a:1c:a1:41:93:df:ed:be:57:fa:4a:54:76:8a:
a2:d5:ba:d5:eb:38:d2:73:c4:49:53:bf:12:71:6b:
3a:45:e0:be:f3:02:a7:6e:1c:ea:09:3e:a6:a6:44:
96:c1:4a:f5:b8:93:53:47:fa:70:24:2d:a7:fe:da:
ba:af:98:13:2b:6c:c4:0a:5c:dd:fc:a2:03:a2:b0:
c1:8b:55:fe:89:87:fa:90:e3:d5:ed:cd:5f:c2:8d:
72:7e:f0:27:97:eb:6d:50:fa:40:a7:74:10:00:f6:
66:0c:f1:ab:09:96:44:89:e9:20:ba:04:db:c2:68:
b6:f4:fe:69:15:f2:33:c0:58:3e:c4:ab:56:13:d6:
6f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3E:51:01:59:63:CF:CE:0E:15:56:73:ED:9E:DA:D3:83:6F:E5:59
X509v3 Authority Key Identifier:
keyid:B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a7:bf:c5:60:50:72:29:75:06:c3:1b:ed:1a:9c:48:d2:19:
4c:bf:7f:3d:0b:82:57:0e:79:5c:f0:a3:6a:72:48:95:ff:0e:
fc:cd:4f:6e:87:5e:c1:05:d6:0a:26:97:7c:9b:ec:a2:6e:b9:
9e:4a:be:37:a7:03:f5:ab:6b:6b:8c:62:e1:16:84:bf:09:ec:
12:83:76:41:c6:2f:f5:84:d0:49:f4:4a:5c:4d:94:6c:4c:e0:
13:3f:12:4a:4e:4b:6c:22:ef:56:59:9b:18:f7:06:e6:09:61:
3d:1d:41:f3:65:74:76:ca:db:40:4c:74:b2:fc:8f:2c:04:a3:
b1:d5:f3:9c:d1:c5:42:4b:c5:32:7d:59:47:6c:05:34:ee:51:
12:2c:9a:41:f0:08:a6:8e:15:12:21:0a:54:4f:96:39:e7:65:
ea:fd:1e:60:b8:21:66:70:9f:ce:4a:42:b1:fb:0c:c8:c4:5a:
3e:d7:dc:f0:08:d3:39:12:2e:81:ed:9e:90:40:32:15:84:e0:
1b:3e:9d:ce:b3:66:b6:f7:cb:fd:ec:6d:11:2b:94:11:0b:b7:
c7:02:1b:a7:0c:d0:73:b7:a4:e7:ed:7b:9e:ed:3a:cf:f6:f0:
65:6d:ce:c6:53:ad:f3:94:03:45:1e:78:85:de:46:7d:69:bc:
fe:cc:2d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:26 2025 by rpki-client