Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
File: tvvGPvVhSn75WhBhiOPXh1XGh7k.mft (raw, json)
Hash identifier: Dk3nIqv6RAOy6qsacZGXFrCzLTIX/McumaDWR1noQx0=
Subject key identifier: 52:64:43:A5:DD:4F:9D:AC:02:E0:82:CB:C3:0F:05:E7:64:51:4A:52
Authority key identifier: B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
Certificate issuer: /CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Certificate serial: 0198A15F509E72BA8D9ADECE9BE1C51F6A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
Manifest number: 1630
Signing time: Wed 13 Aug 2025 03:00:34 +0000
Manifest this update: Wed 13 Aug 2025 03:00:34 +0000
Manifest next update: Thu 14 Aug 2025 03:00:34 +0000
Files and hashes: 1: YUVqQdQIyjArliTwomJUYJEwCGQ.roa (hash: 4idaosIzVzGBgf2LXtYCKacvmrm3Vvf4Nk86J3M+nPs=)
2: buQG-wtVNpUrPJ_2t7dekqYzUho.roa (hash: AC4DBN7YxMjhR0VzHY+/cw0VJl+DFBoERdFnKk3z5Ac=)
3: tvvGPvVhSn75WhBhiOPXh1XGh7k.crl (hash: gI05OEsHwhiC+JylpOU9z5skwzkfbtPGe/fR/YXD9B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:5f:50:9e:72:ba:8d:9a:de:ce:9b:e1:c5:1f:6a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Validity
Not Before: Aug 13 03:00:34 2025 GMT
Not After : Aug 14 03:00:34 2025 GMT
Subject: CN=526443a5dd4f9dac02e082cbc30f05e764514a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fb:f8:73:2a:4a:ee:9f:74:e4:11:8a:0a:a4:
89:b5:ff:f3:c8:c5:e0:48:d6:c3:0c:7c:fa:c1:88:
9a:ea:1f:8b:dc:b9:aa:97:38:78:14:e5:37:cc:e1:
86:2d:ff:e0:b0:19:97:f2:61:64:0e:62:e4:47:d6:
cf:c4:db:f7:6c:18:cd:94:87:01:0f:b3:96:41:b7:
be:e3:f5:8e:4c:6c:fc:9a:db:d4:7e:58:ac:6e:7f:
e1:04:a0:bb:0d:a2:90:d3:f5:73:8d:50:c4:83:69:
17:15:25:23:da:2e:3b:26:d3:b8:8b:de:a7:6d:ab:
d1:ed:b3:30:4c:7f:e8:0e:e2:1c:7f:97:2f:6b:38:
9d:28:66:ad:a8:65:81:1f:e2:35:ec:9a:27:be:d1:
4f:41:1e:12:ba:25:df:1c:f2:a8:10:a0:e1:60:07:
6a:f6:22:06:8c:d8:fc:67:ec:a0:5e:88:20:3e:dc:
fa:e8:21:8b:92:94:2f:8c:7e:e4:b8:9f:7d:05:0d:
e1:4f:35:c8:ae:bd:1f:60:01:c0:73:bd:c4:62:1b:
ca:f8:ed:d5:4b:3b:67:c7:22:ce:dd:8f:95:76:fe:
4f:5e:93:c0:81:06:6a:f5:6e:4f:b4:ef:7a:9b:73:
20:2d:15:11:e7:18:23:70:c6:2e:73:0b:84:bf:87:
3e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:64:43:A5:DD:4F:9D:AC:02:E0:82:CB:C3:0F:05:E7:64:51:4A:52
X509v3 Authority Key Identifier:
keyid:B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4c:62:04:8d:de:69:82:03:1b:e4:16:55:ec:89:7f:7f:db:
01:fe:a0:93:39:b8:8d:b6:7d:79:71:f3:9d:f8:db:99:07:5f:
74:dc:6d:6f:f5:de:e4:f6:f6:1e:c1:b7:2e:09:10:d6:8f:69:
9e:4b:a7:ff:a5:12:c1:26:fd:14:3c:0e:d9:df:6c:d2:34:a3:
19:0f:d7:b0:dd:2f:45:ad:62:47:b1:e1:58:67:5b:b4:ee:ae:
cf:66:ce:aa:a3:84:ff:13:c1:64:0b:db:38:55:17:fc:08:4e:
15:aa:a7:4b:56:17:79:0b:6b:e9:c4:33:04:bd:d2:e2:68:4d:
22:bf:5d:bd:38:ca:76:71:1b:18:ad:de:96:39:85:2b:39:f1:
03:31:d8:2f:f3:41:9a:b8:eb:6f:cf:01:76:1a:57:a2:a8:87:
b8:d0:9a:24:7e:52:f3:49:ec:49:18:c3:e3:09:27:1b:ad:a0:
a4:53:3e:38:85:1b:75:33:f6:d7:f7:13:90:cb:2c:f7:2c:ef:
bc:b8:b6:94:1a:5d:7d:a8:40:b3:fc:a8:83:ab:cb:53:a2:a1:
c8:d6:03:58:2b:e2:83:5c:eb:b2:09:4c:3d:2b:cd:34:50:61:
3b:57:35:cc:ef:5e:de:2f:94:3a:3d:76:cb:76:be:e9:85:5e:
89:d1:fa:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:32 2025 by rpki-client