Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
File: tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft (raw, json)
Hash identifier: Apg9P6y0WbWiNRgeAANIAKSBwTfFl+TewOOiLJxNTcg=
Subject key identifier: 32:E3:94:9E:F6:96:6E:2E:82:97:F8:82:95:31:3E:6E:AF:2C:24:DC
Authority key identifier: B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
Certificate issuer: /CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Certificate serial: 019872D0108BF3E755F3AD09C980D6111841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
Manifest number: 08B7
Signing time: Mon 04 Aug 2025 02:01:34 +0000
Manifest this update: Mon 04 Aug 2025 02:01:34 +0000
Manifest next update: Tue 05 Aug 2025 02:01:34 +0000
Files and hashes: 1: P4_VmIDFfqYiDiPBdVVMzIA4LMY.roa (hash: fbL8P+MktK6PkeO1KtnH7o+BeC/FNslw8AAfJjr38OY=)
2: WKELc_W8mdXUUZ324MSWDeu1wXI.roa (hash: 0tteI0ps1fiC7XdrvhsFyeYnjz3rCzmXkLHL3vxN7GA=)
3: tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl (hash: PJGwvu2cIa5y9yLFsv3jOcbnm7J+6OYA0BHlNbAA+UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:d0:10:8b:f3:e7:55:f3:ad:09:c9:80:d6:11:18:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Validity
Not Before: Aug 4 02:01:34 2025 GMT
Not After : Aug 5 02:01:34 2025 GMT
Subject: CN=32e3949ef6966e2e8297f88295313e6eaf2c24dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:fc:be:92:2a:17:ef:bf:6d:58:4b:d8:1f:
58:75:0d:92:dd:ec:70:40:94:cc:ac:5f:d8:20:64:
0e:3c:9e:0a:a9:85:6a:d6:a6:3d:c4:69:0d:90:7c:
66:53:eb:ab:5e:9d:8c:47:3d:36:46:e2:c3:42:c8:
9c:3f:7a:9a:da:93:fb:62:f2:05:46:9e:66:d4:89:
db:7e:9c:db:f3:9a:07:a0:4a:1a:2e:9d:ad:a3:85:
19:66:3e:fc:14:1d:d0:c2:35:99:11:63:71:c5:3e:
10:b7:cf:9b:e9:3e:f8:fe:67:0b:e9:c6:3b:e3:25:
0d:ff:bc:01:d0:a2:91:19:fc:1b:ed:fd:a9:24:3e:
00:b9:d5:73:11:dd:cb:6c:61:95:33:9c:4c:98:40:
85:06:5c:e3:48:a8:43:9c:ca:0a:36:5d:b2:05:4d:
4c:43:c6:93:36:df:82:a2:d3:27:89:68:e7:e5:31:
f0:fd:57:18:09:20:25:e7:55:fc:63:93:b6:ef:f3:
75:45:af:ad:fe:34:9b:38:00:d6:2a:a4:3a:7f:2d:
9f:a3:b2:24:dc:1d:ae:df:57:95:cc:b1:79:8b:ff:
ad:a3:82:c0:4c:f3:be:3f:94:24:d4:ef:78:9d:5f:
43:4e:6e:9f:ed:76:76:ea:9d:03:3d:7c:9a:80:04:
04:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E3:94:9E:F6:96:6E:2E:82:97:F8:82:95:31:3E:6E:AF:2C:24:DC
X509v3 Authority Key Identifier:
keyid:B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c2:d8:53:0f:1d:ed:15:35:c2:f3:65:40:ea:3c:7a:ad:ce:
7b:ef:6a:7d:a3:3f:f0:ea:c5:42:ca:76:72:e3:40:09:3e:b7:
0c:71:30:cc:1d:60:9d:67:ed:df:6d:70:6f:01:13:5c:16:24:
ba:af:e9:14:2c:22:b8:6a:49:d4:a0:18:bf:87:c9:85:11:de:
69:b4:50:3a:dd:cd:51:0b:7e:8d:b6:33:ea:7c:a4:85:3d:55:
8c:77:31:96:ea:fd:34:28:a3:e2:73:a3:f6:20:99:40:3a:6d:
9d:f1:f4:77:da:c8:8d:97:06:d5:b2:c2:70:44:09:79:0d:aa:
1c:7b:80:d9:4a:68:d4:e4:64:ab:d7:63:5c:c3:3a:0d:00:e4:
91:42:6a:03:dd:e4:f8:ed:77:3c:5e:39:ce:00:c0:7f:78:03:
c0:2a:e6:c9:0b:2d:a1:63:95:b8:2a:1f:b9:30:42:60:e2:41:
47:aa:54:f3:04:95:94:85:cd:f0:3a:34:15:45:58:8d:80:fc:
50:aa:48:c6:c5:ee:c2:5e:76:d8:40:3e:8b:03:fb:d4:d5:e8:
74:37:89:18:b8:0f:64:2e:59:1a:63:2d:06:59:c5:35:30:4a:
f0:b0:0c:8f:4f:15:11:db:82:68:fa:ee:58:45:b1:27:3d:a4:
ee:17:b5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:47 2025 by rpki-client