Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
File: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft (raw, json)
Hash identifier: 3vH612Vu5FwWKuk9ZOeMmTcBbNkmXbadX8Bq2NeJnBw=
Subject key identifier: D6:69:77:0A:F8:1B:80:6E:83:52:B8:23:0E:2A:FA:4C:BA:40:9E:94
Authority key identifier: B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
Certificate issuer: /CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Certificate serial: 019888B24FC35D853EC87BC5CB3A34AB2DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
Manifest number: 130E
Signing time: Fri 08 Aug 2025 08:00:43 +0000
Manifest this update: Fri 08 Aug 2025 08:00:43 +0000
Manifest next update: Sat 09 Aug 2025 08:00:43 +0000
Files and hashes: 1: 9ykTfaxNeEIbk7wOARPuxoyYN9I.roa (hash: t511WQ9hIp1WWZqq1Z1Tp5plKXaqmdK3FlJidSm8B5Q=)
2: TVu5aQ7CXqbPlsSn9wNLY8tYilE.roa (hash: B5zfotvyVUd7f8T5ZgXVly2iMRkx4aTHfTXgfsPh/CI=)
3: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl (hash: oaodUtezaEtVQuTRk4MGqR7O7RvACpuCdaGBN1bV3ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:b2:4f:c3:5d:85:3e:c8:7b:c5:cb:3a:34:ab:2d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Validity
Not Before: Aug 8 08:00:43 2025 GMT
Not After : Aug 9 08:00:43 2025 GMT
Subject: CN=d669770af81b806e8352b8230e2afa4cba409e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:64:fc:c6:30:85:92:ae:fa:11:d2:af:6f:04:
6f:7d:e7:08:86:5a:b8:fa:90:b4:47:8f:aa:87:a6:
a1:9e:e9:81:7e:47:ea:89:8d:e0:97:bd:00:86:41:
fc:40:67:68:08:74:a7:bf:3b:ef:a8:08:c2:0f:7c:
f7:ed:da:d9:49:96:55:41:9d:6d:de:38:36:88:8d:
f5:82:55:87:2a:90:43:17:ba:4d:83:f1:a4:32:10:
35:69:1f:4b:92:11:2f:44:42:45:50:22:6e:53:bb:
a1:e3:a5:46:88:ac:42:c8:5e:64:db:94:ce:44:9f:
56:4d:57:fa:65:de:df:f7:c8:d4:ab:8a:64:b0:a4:
e7:94:68:3a:55:c4:00:60:27:53:bc:03:99:de:d7:
04:be:04:b2:49:e7:a1:29:52:7c:85:2b:11:51:99:
68:da:28:5d:7b:d0:5d:7c:ec:76:05:b7:b0:ac:77:
75:06:2e:84:1a:01:82:fe:cb:b6:7d:f6:d0:74:c7:
e1:b0:58:e1:00:13:07:92:a2:e1:85:02:22:3e:d4:
78:11:9b:03:8e:98:04:a1:85:d8:4e:cf:d2:e3:40:
8b:a0:d1:33:30:f4:8b:bb:1e:60:ed:43:07:31:c9:
85:43:d8:a1:84:9d:21:f6:b7:f4:a5:7d:3b:1a:ae:
80:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:69:77:0A:F8:1B:80:6E:83:52:B8:23:0E:2A:FA:4C:BA:40:9E:94
X509v3 Authority Key Identifier:
keyid:B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:09:fd:7a:34:8c:7e:94:a1:c0:95:fd:64:09:18:3d:37:8e:
a4:75:f8:0a:09:a7:85:88:b2:52:c2:91:82:9f:c1:de:1c:49:
61:bb:6d:5b:09:cd:28:6e:6a:d1:2b:cf:5f:7f:cf:ea:22:ea:
13:9c:30:6c:40:81:c4:30:a3:53:6b:db:06:41:62:64:d8:d6:
c7:d3:5d:dc:ae:d9:ef:83:42:64:18:05:de:4f:a0:42:8f:ba:
9c:e6:8f:71:ec:7f:f2:34:a2:21:e7:84:7b:44:41:db:26:f2:
59:50:fd:3f:38:e4:62:78:c5:b5:10:43:d3:0c:82:f4:c3:23:
4d:31:88:91:8e:d7:0b:c3:8b:9d:03:79:52:b2:45:37:b9:97:
93:79:29:b6:3e:8a:9d:bf:ae:c9:55:ec:87:3b:11:1e:12:dc:
d7:c6:4d:c0:7f:8a:a1:a4:4a:ae:99:50:df:fa:77:72:0e:f1:
55:37:f6:2b:f0:5d:d8:85:59:0a:74:c1:75:3a:8d:4e:07:eb:
11:f4:f8:20:3c:9b:a9:19:e6:bf:e8:d2:96:ea:e5:63:66:0d:
7a:36:1c:77:90:5c:4a:91:72:4c:4e:a7:e9:61:ae:a4:22:64:
84:bd:cd:8a:8b:e2:56:a3:88:38:88:7f:21:a6:49:f2:b3:bd:
ff:ed:84:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:08:38 2025 by rpki-client