Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
File: tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft (raw, json)
Hash identifier: j/WJjhBNHLeAJS9YObdrgR2ApVQUkd89zUwTbXPYMXk=
Subject key identifier: 24:E7:6A:4D:FC:BB:33:9B:36:3A:65:3F:9C:67:FD:57:F1:5C:58:E3
Authority key identifier: B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
Certificate issuer: /CN=b46320188098520c366277f749a4f77a1d444439
Certificate serial: 01988CFDE55735A0237C861EE915F6CC7837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
Manifest number: 1622
Signing time: Sat 09 Aug 2025 04:01:46 +0000
Manifest this update: Sat 09 Aug 2025 04:01:46 +0000
Manifest next update: Sun 10 Aug 2025 04:01:46 +0000
Files and hashes: 1: 1c-Abo0LxBVDDE4sBrG9JS_ePzI.roa (hash: rxDs0I1CVbIWmreeYb6ePZfwtg9Spev7LU71wCrsp/4=)
2: tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl (hash: gnKjVcnrhmBvY6VvisjuyRIpEEAATgZOas5Gr223sqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:e5:57:35:a0:23:7c:86:1e:e9:15:f6:cc:78:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b46320188098520c366277f749a4f77a1d444439
Validity
Not Before: Aug 9 04:01:46 2025 GMT
Not After : Aug 10 04:01:46 2025 GMT
Subject: CN=24e76a4dfcbb339b363a653f9c67fd57f15c58e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:d8:15:81:81:99:90:86:d6:ae:fb:4e:b3:
dd:9f:0b:ef:3d:4b:e5:2b:fa:b3:76:8b:93:0a:32:
49:37:d1:9b:47:40:77:b5:39:1d:ed:ac:ee:f0:bd:
2a:53:2a:eb:45:00:7f:48:ef:39:20:56:8e:61:9c:
4f:04:14:98:9b:ed:ca:8d:ac:26:3b:40:4b:d5:e8:
76:1c:3e:e3:6f:fb:eb:df:5f:36:0f:d7:6a:53:85:
b9:57:e9:dc:43:b8:39:fc:f7:67:b1:22:7c:84:78:
87:78:51:3b:b7:14:a8:9a:b5:5e:a7:d9:96:f9:dc:
85:25:7f:84:d7:96:ed:bc:66:c2:5b:50:9f:40:62:
6e:69:ee:30:fd:65:41:25:e1:31:18:60:4e:e5:fd:
2e:46:1e:12:f7:28:10:b3:76:e1:2d:df:d6:be:75:
71:ae:f9:4b:af:55:d0:4e:c5:07:1d:95:64:d1:44:
b0:2c:80:3a:66:a2:96:89:c3:48:c8:fb:21:fa:b0:
a0:04:74:40:5a:2f:f5:c8:bc:b0:3d:6c:cb:45:35:
e9:03:1e:ba:3e:14:f5:84:17:6b:7f:a3:e1:cf:67:
38:98:56:47:ef:9d:9a:4f:84:60:fa:33:61:37:23:
93:b4:60:f7:bb:d0:eb:c9:9d:31:ee:57:e4:c1:a5:
29:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E7:6A:4D:FC:BB:33:9B:36:3A:65:3F:9C:67:FD:57:F1:5C:58:E3
X509v3 Authority Key Identifier:
keyid:B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:23:8a:0e:68:1d:5a:aa:78:c1:e9:5e:a5:61:33:7e:81:ee:
1e:ca:45:f9:80:d1:db:a7:20:f8:51:21:2a:83:07:c9:b7:8d:
5a:87:a0:76:96:0d:95:81:05:78:4e:aa:27:4e:12:17:d3:45:
50:89:61:75:ad:9c:f9:5f:31:20:7b:48:a9:23:10:fb:8f:f2:
70:cb:d6:c2:d0:9b:5f:45:81:f0:0c:ab:30:ca:eb:7b:96:8b:
ff:c0:61:62:ef:3f:51:fc:5c:4b:9d:e5:49:41:27:37:91:6e:
a0:58:ff:79:0f:b3:11:d9:10:65:26:90:04:4c:cc:25:7a:37:
4f:50:58:6f:ba:7e:74:3f:3a:82:7d:79:2d:40:f6:03:7a:e0:
fb:49:09:7e:65:48:b2:97:0f:95:34:a2:2a:ba:4b:e8:fb:6c:
fb:ef:33:c3:22:e6:b3:5c:36:08:97:76:cb:4f:7b:44:e3:61:
42:8a:a2:44:0c:cf:95:80:ed:21:ed:ea:ba:fc:d2:37:e4:4d:
28:a3:f3:81:7f:88:7d:c5:5b:1d:1c:62:0f:13:91:6c:c6:5d:
6d:4a:2b:c7:fc:9d:0b:1f:f2:53:50:2b:38:63:44:98:ff:20:
16:41:83:35:f9:93:c3:bb:6c:c8:be:95:94:31:0e:0e:2f:e7:
0e:15:bc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:02 2025 by rpki-client