Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
File: tmDXgyCGDV7-cp4gi160sqvr4Hg.mft (raw, json)
Hash identifier: QfMRoCRlHqgSd2zk7wrUS2LpIPW0rVjc3xJLfH2bEnw=
Subject key identifier: 9E:CB:72:A2:1B:DC:FF:70:A3:FC:F7:26:92:93:2A:F3:11:21:37:BD
Authority key identifier: B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
Certificate issuer: /CN=b660d78320860d5efe729e208b5eb4b2abebe078
Certificate serial: 019874F4FD045053D7AA85691F9A0334FE8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
Manifest number: 0BCA
Signing time: Mon 04 Aug 2025 12:01:09 +0000
Manifest this update: Mon 04 Aug 2025 12:01:09 +0000
Manifest next update: Tue 05 Aug 2025 12:01:09 +0000
Files and hashes: 1: H_s46FVu3VtqmBdzQOsgFtOpwm4.roa (hash: xXfRZ05adaRJT3b+JBMiwuYhoS+v9eiqRiPqJaWYY3s=)
2: tmDXgyCGDV7-cp4gi160sqvr4Hg.crl (hash: EkeSRPa7PGyTpE77Bxx9S+U7sryAhuxLhbnKnFkxKi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:fd:04:50:53:d7:aa:85:69:1f:9a:03:34:fe:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b660d78320860d5efe729e208b5eb4b2abebe078
Validity
Not Before: Aug 4 12:01:09 2025 GMT
Not After : Aug 5 12:01:09 2025 GMT
Subject: CN=9ecb72a21bdcff70a3fcf72692932af3112137bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:68:ba:aa:4f:10:ae:5e:cd:81:a5:5e:07:2f:
b6:b2:03:c4:0d:0e:07:5e:b7:8b:fe:78:2e:96:0c:
ac:ca:90:de:e0:74:59:ec:6a:92:19:8e:50:8c:7e:
42:22:2a:bd:26:b9:eb:9e:c2:41:4e:ca:95:88:f3:
f5:30:11:4b:72:96:7d:e8:e7:44:92:29:ae:49:7c:
06:86:3a:a5:3b:ba:80:43:c6:cf:1f:87:29:66:94:
c8:3e:c8:38:7a:fd:89:e5:90:af:a8:e4:bf:63:d3:
a0:07:33:df:ef:3c:8a:96:3a:b5:f1:70:3f:04:ba:
24:ac:1c:66:35:a5:4b:b4:50:0b:90:af:9d:d8:b5:
67:af:c2:24:69:8d:eb:68:3e:2a:8c:5d:c5:33:4b:
7c:f3:da:cb:48:eb:80:e5:fe:53:21:2d:de:8c:20:
59:72:22:c4:e5:55:b3:64:8c:d4:7a:f9:a0:67:66:
28:22:d6:df:b6:73:5d:2c:02:e8:f6:e1:03:a7:5e:
3e:18:0c:c0:af:09:c1:79:55:17:8e:19:83:c4:5b:
84:51:36:24:06:00:2f:3b:3f:94:90:95:46:aa:13:
60:33:c4:7a:b5:10:9e:b1:69:23:04:b1:e6:ff:34:
ff:0f:cc:f8:f2:33:f1:ac:57:a0:dd:2a:11:11:2a:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CB:72:A2:1B:DC:FF:70:A3:FC:F7:26:92:93:2A:F3:11:21:37:BD
X509v3 Authority Key Identifier:
keyid:B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:56:10:15:be:18:ea:b7:2c:60:e9:ef:12:13:5b:aa:03:7d:
1e:cc:09:f0:a6:47:d3:f5:c0:4a:e7:16:47:6d:33:de:e2:d4:
16:ca:eb:05:52:05:18:4f:46:01:ce:22:c7:51:1d:95:24:d6:
a3:f0:ec:a6:d5:7b:c8:de:e9:11:5f:6f:36:af:23:45:f3:ee:
d4:d0:25:38:2f:ce:fd:2c:ae:bf:ac:8a:4a:a2:5a:cf:78:0e:
b5:19:eb:d4:8f:86:ce:65:51:ee:ff:c2:de:41:ae:90:8c:05:
75:c1:83:f6:0b:b3:7a:09:8d:26:19:93:ba:2a:46:77:2d:e7:
79:b4:c2:df:2c:ba:96:a9:1a:49:49:a2:87:d2:c2:87:bf:90:
f6:de:d8:da:98:db:05:bc:d7:20:28:7d:4b:a5:20:24:4c:be:
a0:92:d2:5c:04:8d:6e:8d:c2:5c:b5:14:8f:e0:ad:39:3c:be:
f6:62:15:e1:2b:2c:f6:73:3c:43:f4:b4:8d:c6:7f:e5:1c:88:
2f:d1:49:cf:0e:93:a7:ef:86:15:ef:d2:f4:36:87:bd:cb:7a:
74:5a:ff:31:f7:d4:1c:e8:ab:34:e9:93:b9:d6:c2:ba:9d:43:
46:65:cc:36:e2:e3:ad:0f:06:d3:ee:6b:15:03:72:03:66:f1:
fc:d3:44:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:01:30 2025 by rpki-client