Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
File: tYUi2sa83oxIEzNZkTKhYgDmpb4.mft (raw, json)
Hash identifier: vm0A8f7PvJLdk5zxhLJ/IoGmYTf6vZrcRAZP/jvmNQA=
Subject key identifier: 72:BB:58:71:6B:54:FE:2E:AF:B8:0D:C4:87:3D:A3:11:DC:F4:EE:1B
Authority key identifier: B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
Certificate issuer: /CN=b58522dac6bcde8c481333599132a16200e6a5be
Certificate serial: 019879AF1C1581530DD403CBD7E81523A5FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
Manifest number: 0974
Signing time: Tue 05 Aug 2025 10:02:55 +0000
Manifest this update: Tue 05 Aug 2025 10:02:55 +0000
Manifest next update: Wed 06 Aug 2025 10:02:55 +0000
Files and hashes: 1: 5moGvKAoN95-3rdirRXOwCahhvs.roa (hash: SkhAzMm5Jb5vcIiM14h4SYz3DQTRyqaR2eF+qq4Rdl0=)
2: RuuQV8FVAOprAh_8jcQjyKszeBc.roa (hash: kX89cdA0JPKtfSqgIarOumMCZ1cTxgD0uR8aSG1ObUs=)
3: tYUi2sa83oxIEzNZkTKhYgDmpb4.crl (hash: FXlGNY7wzg1JndNEodmJSA0kir243sfxxGoomcDs2ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:af:1c:15:81:53:0d:d4:03:cb:d7:e8:15:23:a5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b58522dac6bcde8c481333599132a16200e6a5be
Validity
Not Before: Aug 5 10:02:55 2025 GMT
Not After : Aug 6 10:02:55 2025 GMT
Subject: CN=72bb58716b54fe2eafb80dc4873da311dcf4ee1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:d7:cb:2a:ef:31:93:bc:2c:95:27:ed:3d:
b7:54:61:05:3c:83:39:4b:01:70:b1:ab:13:6b:59:
39:65:df:91:2a:68:b5:c3:94:bd:04:b4:49:66:79:
7e:51:67:c2:58:7b:88:10:1c:02:7e:bd:cf:94:d8:
5a:6e:e6:b5:60:9d:b1:5c:f6:bf:25:6a:c0:47:a0:
4c:f0:13:d6:0e:18:b2:57:f9:93:0c:df:ad:1c:3f:
da:44:29:16:0a:fc:6f:b4:62:8f:d7:00:c4:2d:b6:
f3:23:fe:e9:74:79:da:28:ce:79:25:d7:3c:1f:8f:
50:ce:fd:6b:3d:4f:7f:d6:f8:12:ae:dc:e6:aa:85:
e2:76:fb:33:ff:92:3b:ad:2b:86:6b:62:7d:35:04:
92:a7:65:eb:ad:42:65:78:56:13:d8:68:9d:c5:ef:
99:c1:91:cc:fd:4c:ce:3d:ac:6a:19:d5:30:93:04:
13:46:b3:07:93:91:2d:da:e8:e0:71:47:02:4a:e4:
f0:a1:4c:b4:9b:df:ff:45:b5:97:f6:b5:ef:3e:06:
4e:35:48:2d:64:4f:62:3d:9e:51:ea:23:f2:b7:43:
04:7e:56:d1:2a:7e:c4:57:c7:8e:1f:b6:3b:3e:c0:
4d:3c:46:36:7c:64:00:f6:fe:ea:4a:49:73:55:4c:
40:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BB:58:71:6B:54:FE:2E:AF:B8:0D:C4:87:3D:A3:11:DC:F4:EE:1B
X509v3 Authority Key Identifier:
keyid:B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3c:14:fe:f8:55:f0:84:77:20:97:fe:cd:1f:ed:74:aa:47:
d7:1b:ef:c1:d9:79:5a:50:39:68:e4:d4:fd:f1:69:15:6e:c4:
e7:f5:44:46:24:d2:6d:d3:df:65:97:80:03:cd:c6:37:7a:7f:
84:6a:a2:84:64:f9:b5:9c:eb:93:2f:85:eb:ef:51:ed:35:a5:
10:d5:32:a8:b2:0c:77:88:d9:6c:c5:ae:33:f3:5c:83:74:22:
55:d4:e6:57:57:bd:94:2a:d9:84:94:06:80:93:18:0a:e5:35:
7e:97:38:90:ec:34:70:1b:d8:a1:8a:b4:d7:13:ad:fd:07:fe:
0c:be:83:9b:53:0e:e8:a0:55:e8:7b:5f:7a:23:25:18:f0:c2:
2d:7a:84:df:c6:fb:cc:62:57:2f:53:24:9b:be:70:9c:46:59:
fe:b1:d6:93:bf:f2:bc:c6:f7:3d:e4:4c:34:c5:c7:82:d7:bb:
1d:04:e8:5b:62:34:19:c7:ed:42:ea:11:c6:64:3b:06:1a:c9:
c8:c0:f3:ff:39:2d:f8:24:b7:c3:d4:ef:8b:a8:75:30:4a:9f:
38:79:b8:ee:0f:c5:cb:26:32:25:89:c1:2c:4c:45:fa:81:c3:
92:08:1d:05:05:ee:f2:61:0e:ff:ca:fe:27:cc:ae:f2:0a:a6:
f1:62:31:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:08:13 2025 by rpki-client