Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
File: TGtjcblFo16d8wj_Q4A-JheFEGk.mft (raw, json)
Hash identifier: g/mCKyWND0AZK3edhuy3roVyVXZt2HzYGrGgrlKVikU=
Subject key identifier: E2:B6:75:B4:FC:A5:94:EE:5E:5B:78:E0:64:D4:50:99:8C:6F:92:75
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Certificate issuer: /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial: 0198801D42C9EDA54C265F2E9F1E69D3B648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
Manifest number: 10D3
Signing time: Wed 06 Aug 2025 16:00:57 +0000
Manifest this update: Wed 06 Aug 2025 16:00:57 +0000
Manifest next update: Thu 07 Aug 2025 16:00:57 +0000
Files and hashes: 1: NETt5LyS--lV9_ycDBmp9TmpxP4.roa (hash: rz60bepxWIT7kbaafyZ48rHU8Vmg6Vvtzt7Ebp5hgDU=)
2: TGtjcblFo16d8wj_Q4A-JheFEGk.crl (hash: pOe/92ccQW+vxIkEV2zEHnxFsS5EvBayUDhl8MZ18h8=)
3: YU0ymXaczDxniPQtB_xa4RTEU2Q.roa (hash: +3YrNwFP0+tuTgevzTw2FGRwOLOaLfupz3GSxL5OXLE=)
4: e99v7pEfrFm4Dg1SnIaNO39I8Ws.roa (hash: GWy1k4OaIi0pC/Ap0hgLnIy0Gp664zirmOTGWdfBTaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:1d:42:c9:ed:a5:4c:26:5f:2e:9f:1e:69:d3:b6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
Validity
Not Before: Aug 6 16:00:57 2025 GMT
Not After : Aug 7 16:00:57 2025 GMT
Subject: CN=e2b675b4fca594ee5e5b78e064d450998c6f9275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:84:eb:77:d8:ed:99:87:68:10:c2:6a:49:
a4:18:99:cd:f3:1d:79:f3:2d:c8:15:f5:76:ca:ef:
c7:bf:b4:65:7c:dd:86:e5:66:1d:9e:86:22:8c:64:
dc:dc:8d:6d:2a:34:74:d2:7e:67:72:32:98:04:53:
a7:1c:5d:37:62:5c:0b:88:e9:74:06:6f:72:cd:6a:
1f:d5:03:47:7e:92:3b:b0:2b:bd:79:63:38:a7:a4:
ee:f3:95:08:7e:0f:c5:68:fa:ce:10:1d:c6:e7:14:
00:b4:ee:6c:95:92:c6:49:8e:6e:9b:74:f5:38:43:
55:47:46:78:80:83:81:6b:b9:6f:47:0f:f1:cd:87:
9a:40:f6:4a:33:4d:c3:43:95:0c:2a:f9:a4:ce:8d:
9f:e1:93:55:2d:3b:bb:d8:65:1b:51:33:5b:6a:40:
67:69:60:48:42:e2:93:cf:ba:36:61:da:d8:2e:28:
52:19:0a:ce:8f:39:73:fb:c0:09:30:aa:d8:24:d0:
77:8e:29:cc:cd:d4:65:f2:4a:b2:53:2c:7a:3f:0b:
68:07:d4:69:7e:48:60:53:a2:56:72:08:7f:f3:0e:
08:46:ef:bf:46:3d:43:59:89:ae:d2:1b:52:e1:bc:
b0:8d:a4:23:7f:dc:fd:2c:2a:0c:c9:40:28:07:2d:
53:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B6:75:B4:FC:A5:94:EE:5E:5B:78:E0:64:D4:50:99:8C:6F:92:75
X509v3 Authority Key Identifier:
keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2d:f8:6e:c6:60:99:27:8a:f5:77:91:93:bf:30:a8:22:ca:
24:78:22:43:46:1d:27:a8:0c:bf:7b:bd:cc:f0:0a:5d:8b:3f:
03:59:f7:1a:a3:75:22:e5:5b:23:00:80:75:8e:90:45:f7:fb:
5b:0b:dd:c6:72:30:e7:5e:06:52:d7:eb:5b:36:36:28:28:8a:
f1:9f:c3:6b:86:ce:a4:9c:a1:15:0e:e3:00:e8:2e:51:d9:8a:
55:f1:7b:9f:c1:8f:18:b7:0b:8e:a3:0b:6f:f7:df:a4:09:ba:
b1:b5:dc:28:40:34:4d:9b:6a:25:b2:56:32:d4:27:f4:b2:2c:
2d:ce:46:68:8a:32:3d:a5:07:d1:f9:d7:c6:02:a3:6b:89:e8:
0e:35:ca:41:aa:18:85:32:9e:21:32:c1:39:ff:00:b2:c9:d7:
92:87:e9:9f:73:d8:3d:06:21:4c:8b:c7:6e:25:da:63:74:b1:
a7:1d:67:f6:41:18:c9:12:de:c9:0a:1e:1a:98:ef:3b:55:f0:
30:8e:aa:89:73:c7:d4:dd:72:06:42:5e:cd:2e:cf:c3:7b:e6:
96:4d:83:40:5d:55:7e:f1:9f:42:32:14:7b:6d:07:41:15:52:
28:aa:02:6f:63:c7:de:17:5c:7a:77:93:bb:65:63:4e:5b:0f:
54:be:e6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:43:52 2025 by rpki-client