Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
File: tTZGbQNoUuL3N2reE4BGFDuZTMM.mft (raw, json)
Hash identifier: 68quOMgKccAJfFDY1kol1wuQkpPhrIgvhyas/MbRyNQ=
Subject key identifier: C6:11:CC:F5:A6:7F:75:4A:DE:93:0A:FE:88:1D:4E:95:1D:99:53:8A
Authority key identifier: B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3
Certificate issuer: /CN=b536466d036852e2f7376ade138046143b994cc3
Certificate serial: 01988A32A321EF3E2DF666F98AFDB6593B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 15:00:31 +0000
Manifest this update: Fri 08 Aug 2025 15:00:31 +0000
Manifest next update: Sat 09 Aug 2025 15:00:31 +0000
Files and hashes: 1: 4dgJmFIjsrGv5rSLSqks3SszRsQ.roa (hash: Sg9Vz95hfxUFPzxyRHpzX8FvIho0lOoY/A6mHLZCWkE=)
2: tTZGbQNoUuL3N2reE4BGFDuZTMM.crl (hash: dIQ1IammHN3RBkIBbZF6YRi2KdjmQEnacxiKq38NmK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:32:a3:21:ef:3e:2d:f6:66:f9:8a:fd:b6:59:3b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b536466d036852e2f7376ade138046143b994cc3
Validity
Not Before: Aug 8 15:00:31 2025 GMT
Not After : Aug 9 15:00:31 2025 GMT
Subject: CN=c611ccf5a67f754ade930afe881d4e951d99538a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:18:53:7f:ed:87:39:3c:d2:9d:e6:a9:da:
37:7e:57:c6:00:06:3d:e5:11:24:f2:2d:c6:d9:e2:
41:59:09:54:34:fb:41:65:64:fc:3f:c3:36:24:1c:
c5:88:98:e9:5b:5a:b9:3e:2f:92:94:d3:be:c9:80:
ca:e3:df:1f:0c:22:3b:25:25:a4:0d:4d:9b:2d:36:
20:e1:87:ad:62:bd:9b:79:76:94:81:f1:87:51:c1:
fd:c4:54:ad:c1:f0:61:e2:7b:55:ff:04:a4:8d:4d:
eb:12:0d:bb:44:c0:7b:df:66:e6:3b:a9:00:57:bc:
8b:fb:4a:a4:60:89:1c:e2:f9:0d:47:15:9c:bd:d5:
62:dd:a5:4d:9d:be:84:fe:12:a8:c4:d8:62:dc:f0:
d4:ac:48:1b:33:7b:4b:01:88:95:aa:c9:a4:73:76:
4f:39:44:d4:8f:ca:1c:33:2f:06:c4:79:80:69:44:
d3:46:f5:28:bb:a7:d8:2a:5e:9d:13:37:0e:0a:85:
48:86:69:ea:6a:87:27:71:e7:bf:48:15:ac:fd:ed:
9e:7c:66:3d:35:da:e1:ec:80:aa:c2:1b:e7:ab:d1:
fe:63:aa:69:75:45:b5:5d:01:83:80:79:8e:b3:89:
23:2a:cc:44:1b:6e:e0:a2:d5:25:4e:48:b6:e2:1d:
8e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:11:CC:F5:A6:7F:75:4A:DE:93:0A:FE:88:1D:4E:95:1D:99:53:8A
X509v3 Authority Key Identifier:
keyid:B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b1:b8:35:5b:06:a4:6f:87:0e:c6:13:cd:f9:da:34:7a:65:
1f:7b:a8:10:c9:44:b1:0e:de:bf:5c:b7:80:7e:26:46:f4:09:
fc:46:74:a7:0a:17:81:05:da:cb:64:3d:cc:a1:97:22:55:86:
6e:fb:8c:d6:a8:b5:a2:9d:61:b1:77:14:db:10:39:0c:ab:5b:
d0:75:b7:cb:b4:0a:5f:6d:25:50:fa:b9:66:e5:7d:db:e1:b7:
58:f5:de:de:9f:37:c9:b9:ae:fa:d1:3b:07:ee:1b:92:c3:e7:
88:8b:d2:e5:67:d7:20:97:b5:66:51:e1:12:b9:ae:d8:a0:72:
d1:03:d6:28:ff:f7:a0:a5:b7:f6:92:b8:97:b0:d2:68:ee:59:
a8:7f:a9:c7:9d:a5:c6:82:d7:5a:22:9e:97:34:49:d1:65:d2:
25:c4:94:e7:74:c8:17:e8:62:b6:ab:82:97:21:f4:68:71:8d:
6e:05:dd:67:b1:8d:fc:34:15:fb:ab:03:02:bc:c2:c9:d1:12:
dd:62:99:af:b2:3f:1c:5c:85:25:c2:a8:74:1f:d3:7a:53:d1:
8d:40:80:c9:ff:91:81:b6:6a:71:80:9b:69:c8:aa:a4:17:7b:
8b:1d:87:b4:0c:20:08:77:c6:7c:d6:7b:1a:08:8f:a1:29:dc:
9e:5b:61:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:22:45 2025 by rpki-client