Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
File: tAifhEgwV6w2RkfIChsjyXa5MBY.mft (raw, json)
Hash identifier: HYxeD5YMLBU5SNA9zMaa5mKAiYfPitCBMWer+GeTXcI=
Subject key identifier: 7F:8E:C7:58:04:1C:2B:1B:F0:7C:D8:29:E7:0D:DE:D2:A4:D0:9A:7F
Authority key identifier: B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
Certificate issuer: /CN=b4089f84483057ac364647c80a1b23c976b93016
Certificate serial: 019892C7E30FD53EDBD87DD26CF231A3A3D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 07:00:30 +0000
Manifest this update: Sun 10 Aug 2025 07:00:30 +0000
Manifest next update: Mon 11 Aug 2025 07:00:30 +0000
Files and hashes: 1: ZZlyR1qePInNwWMshU_T-zKOIRs.roa (hash: 1/uH+W7Kksp46/1+HMCQDG/zqQ+/+VqifvgRn9tMf2U=)
2: tAifhEgwV6w2RkfIChsjyXa5MBY.crl (hash: QWZi9r9pviREpryFJuH2+EpcxrY5eP/a+bsvvSsbezM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c7:e3:0f:d5:3e:db:d8:7d:d2:6c:f2:31:a3:a3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4089f84483057ac364647c80a1b23c976b93016
Validity
Not Before: Aug 10 07:00:30 2025 GMT
Not After : Aug 11 07:00:30 2025 GMT
Subject: CN=7f8ec758041c2b1bf07cd829e70dded2a4d09a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0c:08:c0:ef:ed:d1:e6:c1:13:32:25:ae:06:
2b:6b:dc:b3:05:fb:da:de:4a:ec:20:d9:50:84:a2:
65:d2:75:33:82:a9:27:70:8b:9f:ca:a1:18:a7:d4:
b6:7f:8d:6f:c2:7c:99:c9:10:ef:7d:ac:ca:33:96:
c4:dd:b3:49:a5:21:82:20:3d:67:0a:8b:b4:15:aa:
81:61:b3:51:84:fa:a6:43:75:23:80:de:c1:f3:3d:
e6:a7:68:4b:ee:d6:48:a4:20:a6:cf:49:45:c1:3d:
4c:d5:ef:1c:26:06:61:48:2e:1f:db:a8:e2:8e:86:
50:74:1a:ba:c4:e2:ed:8f:34:8d:15:11:ba:19:78:
6a:8b:51:cf:e6:63:60:b0:bc:ee:de:84:14:be:1c:
bf:5e:39:02:37:0c:df:a0:92:61:11:76:a0:8e:ce:
51:47:ee:47:b3:e8:5d:ac:a8:45:f5:96:4f:d4:44:
18:c0:81:47:ac:2b:32:fe:ac:15:19:74:1f:3f:d1:
de:09:cc:11:56:54:f5:7c:71:ed:f7:e1:d6:07:d3:
69:60:ad:67:41:68:f2:dc:b9:86:c9:a1:d1:df:8c:
e6:07:0f:44:52:21:76:27:8d:54:b0:39:2f:69:5d:
ae:7c:0e:5a:06:70:e7:82:a6:db:a6:17:96:e2:01:
37:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8E:C7:58:04:1C:2B:1B:F0:7C:D8:29:E7:0D:DE:D2:A4:D0:9A:7F
X509v3 Authority Key Identifier:
keyid:B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b2:b3:37:16:0f:ae:1d:64:c9:7c:58:2c:bd:a9:ba:b0:9c:
ba:81:e3:e9:3f:6a:c3:f4:b6:14:af:18:f4:d8:03:db:96:7e:
59:8f:81:72:ad:20:db:18:ef:29:b9:1d:f9:38:f8:c2:ff:9b:
02:fc:89:86:90:79:da:79:50:30:9e:a0:90:8b:56:de:81:e8:
71:65:30:94:da:fa:53:ca:2a:a1:5b:c7:b1:3f:89:b6:56:07:
c5:14:2c:7e:c1:f9:a0:42:5a:20:34:78:96:92:ee:a2:b7:91:
ce:b7:7b:10:99:79:54:50:e9:fa:70:b6:03:d3:63:24:b8:60:
a2:23:9f:ad:22:61:a3:05:de:c4:2c:97:7a:c8:76:29:2e:d8:
df:bd:c6:b4:2e:8a:b5:79:e7:5b:ad:22:32:16:21:1c:08:5e:
3e:34:5c:23:52:30:d7:ed:18:ac:a4:54:54:a0:1e:d9:9a:fd:
94:34:6d:c6:d1:9d:7a:3b:94:29:95:9f:59:e6:e2:cf:64:fa:
17:b6:37:21:39:ed:a7:3e:99:50:04:87:90:7d:7c:97:4e:a8:
01:f1:b0:8f:0a:bb:2e:a4:a5:d6:c1:e3:2e:52:fc:f3:08:59:
bf:9e:e4:cf:47:79:b5:b3:5f:e8:0a:0a:65:17:60:ec:85:dd:
52:b7:c8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:10:19 2025 by rpki-client