Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
File: TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft (raw, json)
Hash identifier: tdrvl63+UyvQooDZXByFFiAP1jsUnrHGmlNuGEVJQ7U=
Subject key identifier: 11:D1:BE:64:88:29:97:84:AF:EA:7C:F8:57:92:FD:6D:B1:D7:16:6F
Authority key identifier: 4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11
Certificate issuer: /CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011
Certificate serial: 019874F51EC275D25DF0701C77E3EC968E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
Manifest number: 0BB7
Signing time: Mon 04 Aug 2025 12:01:17 +0000
Manifest this update: Mon 04 Aug 2025 12:01:17 +0000
Manifest next update: Tue 05 Aug 2025 12:01:17 +0000
Files and hashes: 1: RdCbQ_v6C3AqgUPprLsURH8LT5w.roa (hash: kXBabjQsEi+6w0J2wLx2a1ynhFaoOMH+SG7D7xchscI=)
2: TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl (hash: R4mhEYniiilIUvlGKvLmvfLKwhmUstaONflzugzv8mU=)
3: lJrwoyCHk-KhLsTndl2kfTJmzS0.roa (hash: QQVDCU2+xswVxXyXjpbkieNuyjdGUltA6OYqC3/o4lo=)
4: ukETrBXaXN-UD0p_P4lkBp13yEg.roa (hash: 1tDW+L2GN0E1ucMKdwQbOBeshAxIT1tSiJJRpkDWW6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:1e:c2:75:d2:5d:f0:70:1c:77:e3:ec:96:8e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011
Validity
Not Before: Aug 4 12:01:17 2025 GMT
Not After : Aug 5 12:01:17 2025 GMT
Subject: CN=11d1be6488299784afea7cf85792fd6db1d7166f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2b:f3:56:f9:53:34:a6:21:6b:5e:a6:c4:b6:
4e:7d:92:c4:11:c6:2b:1f:1d:c4:96:be:09:bd:37:
d4:db:78:ac:24:b5:91:40:77:35:f5:40:1d:42:11:
e6:f7:50:52:73:61:b5:0f:c0:75:3e:53:33:b9:56:
63:ab:14:f6:9b:eb:31:a7:3b:bf:c4:b5:d8:91:18:
06:bb:f0:3f:52:aa:c9:dc:75:97:4f:90:b1:63:76:
b2:ea:a6:cd:9f:59:66:19:88:76:f8:e5:d5:08:6f:
8e:c5:d5:2a:96:bd:5d:65:7e:a6:06:1d:06:b1:3b:
51:e4:8a:fd:8c:bd:41:c1:cd:f5:1b:1d:60:cb:65:
49:f5:3c:12:36:2c:e9:91:52:43:48:1b:98:7a:93:
83:a6:4b:df:80:37:92:57:e1:5a:0b:43:1c:27:bf:
9e:2e:6c:6b:e6:b9:32:9d:0c:eb:2d:24:e2:4b:d4:
0b:0c:07:f6:57:61:4c:fe:cb:21:b5:e1:24:52:b9:
9c:ea:11:23:ee:f0:ff:c6:d3:a8:3a:17:9d:c3:28:
58:bc:87:88:39:d0:47:78:3f:5b:8d:ed:a8:30:34:
80:bd:9a:df:a5:4d:64:21:48:35:bc:3b:89:3b:b9:
5e:0b:28:65:93:74:b4:fe:c8:ef:56:91:75:75:c2:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D1:BE:64:88:29:97:84:AF:EA:7C:F8:57:92:FD:6D:B1:D7:16:6F
X509v3 Authority Key Identifier:
keyid:4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:78:c2:97:4d:80:5f:4c:12:ed:68:88:e8:ee:7d:6b:24:63:
05:16:09:cf:25:43:b9:bd:d0:22:89:37:58:7e:e5:c2:11:5d:
4c:e0:78:3e:cd:85:14:c7:90:6b:e7:fc:67:56:ac:4c:ca:cd:
df:35:14:42:e2:01:c9:97:33:46:45:2f:4b:31:f6:fd:a2:9a:
62:3f:b0:f1:0a:77:28:c2:88:aa:85:29:96:39:21:96:a4:4b:
05:f3:47:2b:c6:d7:d4:6b:d8:19:3c:69:ff:8b:f0:b0:83:d8:
b7:5e:fc:b4:00:50:ff:13:d3:87:16:60:65:aa:21:59:d2:96:
49:c5:11:84:8d:0a:d6:b2:40:32:ce:65:3c:28:18:2a:54:61:
f0:f6:c7:8d:b3:7e:a9:79:a3:1b:03:1a:25:98:89:77:19:45:
d2:bd:28:10:34:17:8a:b8:4d:a1:c7:6d:b2:3e:7a:a0:ab:81:
a5:fc:fb:16:98:07:d5:df:ae:fc:ae:ff:88:82:fb:02:73:bc:
12:9f:76:6d:6b:e2:20:49:56:3c:c7:6e:65:07:80:65:cd:ab:
62:75:57:72:68:d0:69:40:ad:0c:fc:e9:c0:00:cc:90:c6:aa:
bc:a4:5b:c1:72:76:88:53:05:3f:95:be:c4:78:19:60:37:38:
f8:52:5d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:18:47 2025 by rpki-client