Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
File: TuFxPha0_Y8zAYh95qERmARJsp4.mft (raw, json)
Hash identifier: 9vLExXLO53ewCewVJbEJWy8Mckt8qWIx7vdhpUKEslY=
Subject key identifier: 5C:E8:C8:CA:70:21:F0:A5:C1:9B:93:D5:3F:47:77:BA:77:1D:83:EA
Authority key identifier: 4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
Certificate issuer: /CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Certificate serial: 01988C57FBAF41ABE1B1F2295EDE905804B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 01:00:32 +0000
Manifest this update: Sat 09 Aug 2025 01:00:32 +0000
Manifest next update: Sun 10 Aug 2025 01:00:32 +0000
Files and hashes: 1: IJqJkkG32juZ9JC_-n807ugagLE.roa (hash: a5ckR7gAH5+zi6QRTimZRXE/Wgs09xk/gP8A83O6nQM=)
2: TuFxPha0_Y8zAYh95qERmARJsp4.crl (hash: bM3bkZBpmjWhPfnmD3hSg2wrUEMNuj82yjnMIsyqP+I=)
3: yXKulFLipTbjSUmowLRqtzSALEA.roa (hash: LNf43mdJtw9mAKFqBqZr/MgvJNf0ToK4qGWZ05MJPz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:57:fb:af:41:ab:e1:b1:f2:29:5e:de:90:58:04:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Validity
Not Before: Aug 9 01:00:32 2025 GMT
Not After : Aug 10 01:00:32 2025 GMT
Subject: CN=5ce8c8ca7021f0a5c19b93d53f4777ba771d83ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:94:ae:f5:6b:7f:86:88:16:51:6f:68:5b:
31:f3:51:13:7e:aa:1f:0d:44:f7:1a:36:e6:81:0a:
6a:00:55:02:20:15:0b:a3:5f:88:39:c5:4f:54:7c:
b8:b4:78:9e:5c:13:cb:9d:df:e4:e8:0b:e0:7d:ef:
82:92:0e:a4:bb:40:3a:8d:53:13:e0:ee:88:c3:c9:
8f:af:47:14:58:02:98:50:f0:04:53:6e:a1:af:f6:
fa:b5:42:e1:ba:13:79:13:1c:8c:36:35:53:f4:31:
4a:0f:ae:20:cc:ce:21:b3:26:0a:d2:df:32:e3:7e:
68:5f:9e:d2:70:44:91:92:d0:bd:d7:01:45:50:78:
f5:ef:20:78:63:ba:a7:17:9e:a3:4c:8e:1d:24:1c:
0e:ab:f1:ca:1f:4e:91:36:d3:92:3e:4c:9f:ec:e2:
31:5b:92:74:21:ab:8e:4d:e7:36:73:ef:3f:36:7a:
29:e4:f0:31:0d:ac:1d:98:86:56:69:f6:cf:9a:9d:
ff:bc:45:28:b2:52:f3:a0:79:22:04:c1:d2:7a:03:
ee:7d:6a:82:e9:be:83:19:42:f9:12:3e:f3:9d:78:
48:6e:64:4b:64:5c:cd:a0:ec:bc:23:21:9b:ff:5b:
a2:61:b4:41:f7:4f:75:dd:b0:32:16:51:38:c9:0d:
97:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E8:C8:CA:70:21:F0:A5:C1:9B:93:D5:3F:47:77:BA:77:1D:83:EA
X509v3 Authority Key Identifier:
keyid:4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d0:ea:78:ae:e8:ef:76:18:b2:6f:a0:20:2e:66:73:73:89:
d2:d8:90:a5:89:1f:96:ed:fd:91:b8:15:f2:3e:54:7a:e8:4b:
3c:23:23:35:c4:49:c0:26:66:06:cd:e4:db:06:51:9d:c7:8d:
a5:16:f9:b7:d9:fb:d7:e7:a7:05:98:8d:62:49:25:21:b2:13:
67:90:ed:c8:06:17:5a:c3:16:dc:4b:5f:4a:8c:f4:ac:9e:0c:
e3:54:c0:9c:64:e3:e6:eb:76:44:f1:12:27:88:6c:9f:e9:85:
2a:58:ee:33:97:3d:20:e0:25:81:f1:67:74:a8:52:2b:86:c3:
19:96:11:a5:02:da:4a:59:b7:af:bc:ae:54:fb:0a:6b:bf:c1:
dd:07:b2:76:a6:c2:e1:56:6b:47:f9:d3:0c:32:89:53:83:4b:
9d:fb:b9:e1:8f:7f:8f:16:97:76:27:7d:b5:65:23:0e:cd:33:
85:0d:17:e9:da:46:88:83:f6:f4:25:91:6d:21:14:d7:e4:b1:
1c:c3:c2:57:0a:9d:f8:e7:f2:51:67:fa:e6:8c:9f:0b:40:69:
4f:58:af:3a:1a:44:4f:de:fc:4d:4c:d9:a3:87:cb:ca:f1:aa:
97:21:be:a8:8f:4d:48:5b:28:05:f2:d2:f3:4a:b1:fd:97:6e:
59:88:ed:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:51 2025 by rpki-client