Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
File: tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json)
Hash identifier: pschIVfn6yxgNuetKaC9Vv0oCK1Lba1arWlbkt1U098=
Subject key identifier: B9:0E:16:74:0E:D2:E7:93:82:B6:38:88:70:F1:C6:6C:45:7D:82:2D
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Certificate issuer: /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial: 0198805471D560495E2D46B90CCF03388FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
Manifest number: 1621
Signing time: Wed 06 Aug 2025 17:01:14 +0000
Manifest this update: Wed 06 Aug 2025 17:01:14 +0000
Manifest next update: Thu 07 Aug 2025 17:01:14 +0000
Files and hashes: 1: 17YYIme-KWzHBg96NocCTiyimXg.roa (hash: FAXdBZmp0XEPsS+suM0xEmeoeGFCXd94Tv626XwAcGQ=)
2: H94mgXcbmEPiObELGoT_irqbFZA.roa (hash: zafi3kAgrBwpb+xZqeS8u0za5f6rLKTWup2Rk4ukWyE=)
3: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: n7LsM1L9SG5bca80JrKmmhPnVCzreJdcC1vF7ZOs23g=)
4: v0ygM5ko9tgsiV9gTnymwBnpZD8.roa (hash: Qr8YJSCtuGUwCDefoz4H2ImMBPjSdowCdy9x6G8wdbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 17:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:71:d5:60:49:5e:2d:46:b9:0c:cf:03:38:8f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
Validity
Not Before: Aug 6 17:01:14 2025 GMT
Not After : Aug 7 17:01:14 2025 GMT
Subject: CN=b90e16740ed2e79382b6388870f1c66c457d822d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:70:f1:dc:57:b7:44:4c:7b:30:83:9b:b0:40:
53:af:88:25:aa:bc:f1:d1:fb:68:bc:4e:e9:a1:28:
2e:ac:cb:fa:3d:9d:47:26:96:4e:13:9a:9a:5b:2d:
cd:9e:f7:4d:7c:7a:18:ac:e3:aa:c9:be:50:b9:f2:
48:74:10:83:7c:35:d4:69:9b:a4:59:61:e5:15:44:
45:d1:d5:da:07:cc:8a:3d:1f:5d:29:b1:67:2f:95:
e7:82:9a:03:27:05:d2:2e:00:c0:1f:23:2a:e0:1d:
ef:a9:ff:49:98:fb:3b:f4:bf:96:a6:8c:9b:02:e6:
ae:c4:a5:aa:f2:42:bd:75:98:c1:17:00:d3:17:09:
4d:69:e3:4c:c4:8b:26:71:f3:54:94:44:54:31:69:
9a:a5:1a:47:9a:2f:59:31:34:8f:22:8d:42:4b:42:
dd:82:18:ba:96:8c:d9:5d:96:05:77:8d:13:01:46:
ed:d7:a4:80:41:9c:3b:1b:65:1e:24:85:ca:82:00:
2c:cb:59:23:d1:a3:67:1d:c6:f3:1e:42:44:8e:61:
7a:b1:97:02:77:4f:34:45:f1:6a:ad:81:40:ae:c8:
59:53:39:c0:74:67:e4:56:87:ee:40:f5:fe:e8:27:
73:b0:8f:3d:a5:4c:5a:42:8d:f2:83:da:b0:45:96:
2f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0E:16:74:0E:D2:E7:93:82:B6:38:88:70:F1:C6:6C:45:7D:82:2D
X509v3 Authority Key Identifier:
keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:61:e5:49:dd:2e:aa:ee:60:48:67:d1:d7:23:57:83:a7:84:
c3:5d:88:46:7b:8d:ba:7e:bd:41:bb:9b:64:ef:37:00:c4:26:
ab:45:6a:94:fb:6d:70:38:cf:19:59:29:d6:ea:b1:7b:03:34:
24:52:65:c9:bc:da:07:0c:0f:81:4a:5c:83:e0:3a:fc:56:a4:
f3:6f:e5:a9:f1:fe:5a:1a:1a:19:e0:1a:55:db:1c:71:4d:fc:
88:96:e4:38:e2:48:21:cd:b2:91:ee:44:2c:c5:22:aa:89:4c:
9f:dc:1b:09:74:87:ff:18:37:a5:c5:59:ca:4a:dc:e2:70:4b:
71:39:e6:72:90:85:0d:a5:28:73:43:e7:43:00:d9:6d:8b:67:
9f:d9:8f:88:e2:c9:df:ba:0a:27:1d:bd:9d:a8:7c:bf:a5:8d:
af:fc:b6:ec:4d:13:14:4e:e4:ce:f3:b1:f3:5c:fb:93:f6:32:
91:88:c5:48:9c:7d:d1:69:c7:cc:bf:00:52:d5:78:ce:21:ec:
71:ba:58:bb:bc:86:fe:42:a5:4d:c5:29:5d:9b:5b:5d:ad:ce:
7f:2e:82:5a:10:e3:f1:0e:24:2e:d5:3f:04:b8:4b:69:e1:53:
72:3c:c2:ef:cc:01:2d:02:c4:62:7f:58:35:69:81:fb:bc:8d:
7e:20:a3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:19:01 2025 by rpki-client