Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
File: tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft (raw, json)
Hash identifier: tVliJmI117/NjkqiE6m1QRMqql+ksyjja828nwinGrk=
Subject key identifier: DC:4C:C6:F4:95:5A:22:9A:06:F1:74:C7:82:23:FB:B8:36:BB:D3:B3
Authority key identifier: B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
Certificate issuer: /CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Certificate serial: 019873E30FAAA73F0F92DD3B8977AF448F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 07:01:57 +0000
Manifest this update: Mon 04 Aug 2025 07:01:57 +0000
Manifest next update: Tue 05 Aug 2025 07:01:57 +0000
Files and hashes: 1: ag-uYpovt5JPQ3cFAXtXn4zz86A.roa (hash: 2LKnP2sHY9S5jGwYqiGKID4jG+yM+87plZe5I7Vq4ns=)
2: tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl (hash: Nhy1+B5jaVcabuq9dnctVDG5AiuJtTUjbO3Tk1LJJrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:0f:aa:a7:3f:0f:92:dd:3b:89:77:af:44:8f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Validity
Not Before: Aug 4 07:01:57 2025 GMT
Not After : Aug 5 07:01:57 2025 GMT
Subject: CN=dc4cc6f4955a229a06f174c78223fbb836bbd3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:82:13:24:cf:91:c4:cd:e5:5d:c1:df:57:d9:
d6:a7:11:82:a5:98:be:be:3a:97:ad:be:3e:7a:34:
48:f2:f8:8b:ef:af:5a:cc:fe:2b:6c:f8:28:47:8f:
5c:f0:e8:f2:53:60:46:50:2e:b8:49:63:b0:d9:8b:
fb:7b:db:e6:65:ae:e5:2c:7d:37:da:d8:18:2c:3e:
5c:45:23:5d:00:60:ac:68:4e:d8:ed:a8:5b:bd:a0:
8c:6c:54:a7:9b:29:77:bc:c1:bd:25:e6:d8:9b:66:
a0:c7:42:44:d7:0b:c7:9a:36:3b:5d:7a:42:7e:e7:
b6:68:a0:f1:9c:9a:75:74:e3:89:0d:6e:af:ff:8b:
91:7a:c8:c5:80:b3:f4:6a:e2:47:9f:ba:1d:0e:10:
a2:87:5d:68:d4:c3:71:d4:dd:7c:03:6f:6a:42:0b:
a4:6c:db:9d:d2:18:c2:75:17:9a:bc:e9:d5:04:48:
97:9d:ab:b4:bd:c1:d1:b2:a4:b8:4e:b2:23:98:ac:
7f:dd:36:7e:e4:3f:36:ef:fb:0b:e3:bc:22:51:bc:
43:1c:3b:f1:b6:72:2c:20:49:e0:45:10:c4:fe:cc:
87:33:7e:0b:7d:6d:0f:04:ba:ad:c1:37:0a:60:95:
28:1a:97:98:bb:af:47:3b:19:48:df:fd:17:01:0e:
b1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4C:C6:F4:95:5A:22:9A:06:F1:74:C7:82:23:FB:B8:36:BB:D3:B3
X509v3 Authority Key Identifier:
keyid:B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7b:7f:ba:d9:62:d0:49:3b:4a:f2:9a:e0:0b:4e:fd:db:3c:
63:ed:f7:cc:a2:31:79:c8:91:e9:a5:d1:35:99:9d:82:4f:39:
83:82:b4:a2:26:77:44:d9:f3:70:10:63:76:c1:1a:a6:3d:6c:
9b:20:bf:e3:ec:1c:da:80:09:51:f6:38:8d:47:5f:f7:4a:29:
b0:e2:02:c5:5e:21:98:6c:9d:3a:2c:f1:eb:4e:40:ab:a0:ab:
8e:5d:45:4b:44:af:4c:0b:48:55:7d:a1:0b:36:d9:ad:df:af:
f1:51:33:5f:11:d9:07:d7:4f:56:b8:7c:0f:c9:97:e4:da:a1:
a7:b5:7b:d6:3e:19:16:bd:04:e5:db:b1:10:8b:94:3f:f4:82:
aa:b9:ee:8d:28:cc:50:6a:53:e0:a1:ba:dd:ce:c8:01:30:5e:
ec:23:29:38:6a:00:1a:33:86:39:c7:c4:17:c3:c3:ea:f6:e1:
26:b9:03:5f:62:47:17:5e:6a:70:39:68:98:8b:d0:56:f2:b7:
6a:ed:77:d8:fe:07:c5:b4:39:18:bf:17:a4:fd:1f:09:af:b7:
37:10:d2:9a:e1:04:8e:6f:75:88:bc:06:66:8b:60:b5:6d:8d:
c7:f4:ec:7b:b8:1e:b8:9c:f2:bb:a2:1b:83:02:74:2f:63:29:
4d:e6:ab:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:50 2025 by rpki-client