Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
File: TFTszmy8nFSSnqpLIrM3sP2bNr8.mft (raw, json)
Hash identifier: tTAoETGKM4pVWYbXDbBEvihALcC7gzGj/17mH7WU+oA=
Subject key identifier: 63:4A:57:CE:10:FB:4E:88:D7:F3:E9:96:32:2E:59:3C:39:FC:4F:75
Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
Certificate issuer: /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Certificate serial: 01987D8B8D358714F4D58B8EE409FFE76C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 04:02:33 +0000
Manifest this update: Wed 06 Aug 2025 04:02:33 +0000
Manifest next update: Thu 07 Aug 2025 04:02:33 +0000
Files and hashes: 1: TFTszmy8nFSSnqpLIrM3sP2bNr8.crl (hash: X44RVIMNbjBueP81+CBHCrm35iWlmMMfQGT2itiNNQ0=)
2: eHPqpiMAvfqI-We9VzdWjZPR_bY.roa (hash: 2EtKDvjgQC4QGGaHfks3HUfVQC7NvALc/OB3oROL6rM=)
3: ePZ7Yuu3-_aTMfNEBfmL4fdhXII.roa (hash: ho6FnqARFfeawc2fVl+6U/A9evk5Ck/9UluGTSWRaEw=)
4: jEFUKY2bhw_vuBM1OshauBn8mvg.roa (hash: ZeWPCxGU+ldLXwfBechPAx21XNMieJ0auUVK9LjYs/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:8d:35:87:14:f4:d5:8b:8e:e4:09:ff:e7:6c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Validity
Not Before: Aug 6 04:02:33 2025 GMT
Not After : Aug 7 04:02:33 2025 GMT
Subject: CN=634a57ce10fb4e88d7f3e996322e593c39fc4f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:59:5d:99:2a:56:f6:2a:70:7a:c7:8f:3e:c0:
12:2d:e1:22:47:eb:e7:d2:7f:f9:1b:df:5e:b9:a9:
57:d6:a3:9c:39:86:a6:ae:17:5a:b6:19:a9:0c:4b:
3a:9e:ad:99:c0:bc:ba:a1:e5:15:5f:f5:ec:2b:0c:
3f:1c:94:3b:c3:82:20:cb:78:70:b3:34:3e:62:2e:
7f:ba:f6:46:20:93:e6:8e:68:9f:bf:a3:d2:99:4a:
2d:2c:4b:98:df:55:17:cf:6e:11:dc:18:22:fb:da:
4b:c8:ec:17:65:16:5e:9b:26:54:a3:69:02:d6:fb:
b2:df:54:18:50:f3:46:54:3f:ca:f0:c8:9e:2e:a0:
79:e3:72:76:72:2c:87:0a:b1:eb:bf:a2:6b:65:6a:
23:1a:e0:5e:83:c0:42:d9:1b:d6:a6:93:c9:b1:7b:
8a:d7:03:60:ca:4b:b0:60:54:35:e0:a5:54:46:be:
16:ae:b7:f6:69:d9:5f:77:d5:ee:89:db:13:23:3f:
fd:9a:74:17:ba:92:3d:29:8d:a6:62:fa:35:05:f4:
0a:59:b5:b0:25:a3:05:36:e3:d3:74:2e:8a:ba:b7:
60:7d:a5:bd:cf:fc:33:4e:fc:03:17:69:42:53:d5:
41:3d:68:a5:f4:fd:46:8b:99:3e:13:7d:89:f3:8c:
92:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4A:57:CE:10:FB:4E:88:D7:F3:E9:96:32:2E:59:3C:39:FC:4F:75
X509v3 Authority Key Identifier:
keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b9:aa:dc:19:9c:57:21:0c:2e:7d:69:47:8e:09:ec:c3:a5:
e4:f3:6a:2b:41:d6:69:77:51:b8:53:4c:d2:a7:55:3f:db:15:
0d:e7:0d:dd:dd:6e:88:99:f7:84:1a:b5:9b:d8:7f:f1:58:90:
04:cf:d6:b6:61:11:34:c9:24:92:8c:8b:74:e0:05:d2:74:35:
06:25:e1:5f:32:aa:15:9f:c0:90:df:08:a5:63:23:f1:59:29:
91:a6:e8:be:a4:e2:fa:ec:55:c1:ee:c7:5d:6b:54:ac:07:b2:
4c:3f:27:8f:49:10:a3:a9:b0:ac:f1:3b:05:55:53:ef:ca:7e:
87:2d:14:d6:40:63:fd:eb:3a:98:e6:86:2f:4e:a7:92:b3:f3:
8e:1c:6c:7e:6d:b4:53:ac:d1:28:27:89:01:d8:23:47:c8:61:
4e:eb:b6:1e:5d:18:34:a0:58:3d:ad:8d:ed:1b:1a:9e:a9:86:
1e:2a:bd:06:d6:b2:6e:0b:59:e1:17:30:c0:d2:db:c9:78:fa:
92:a4:4c:52:db:6e:92:b3:2d:41:fc:18:3f:9e:7f:19:1f:71:
f8:45:b4:8d:18:9d:04:d5:cc:8a:f1:1c:e0:83:a0:a0:15:54:
c7:20:ba:37:35:94:96:1a:9f:f8:f9:f4:d8:4e:c4:cb:d8:0f:
23:bc:b1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:57:11 2025 by rpki-client