Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
File: tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json)
Hash identifier: cBvUFYzqvaGlbYIvbMf0pL1Bnqp5rSWZUnNwmUKLRmM=
Subject key identifier: 64:77:ED:83:1C:12:5A:11:11:4C:B2:32:40:59:81:81:8D:3C:2B:7D
Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
Certificate issuer: /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Certificate serial: 01987373F0791888A800E30A3DA3A4D7EB6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 05:00:34 +0000
Manifest this update: Mon 04 Aug 2025 05:00:34 +0000
Manifest next update: Tue 05 Aug 2025 05:00:34 +0000
Files and hashes: 1: bCO5bqFLQTtaSqSwTRLhrpm3wCA.roa (hash: xHiR4ALGk4+cM6JODCM19LWc7pantvAdvK3viET0qj4=)
2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: nB0dbby695c3S+nH5iBXrJ50WxRI6tvrS8gOtlCjiII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:f0:79:18:88:a8:00:e3:0a:3d:a3:a4:d7:eb:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Validity
Not Before: Aug 4 05:00:34 2025 GMT
Not After : Aug 5 05:00:34 2025 GMT
Subject: CN=6477ed831c125a11114cb232405981818d3c2b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:c3:2f:c2:a0:cf:b1:db:6f:a1:a9:18:f4:
5f:ca:2b:e6:b0:89:66:52:d4:41:e1:bf:d3:24:5a:
72:d3:23:55:b6:49:ec:ca:d2:86:42:f9:fb:93:99:
27:1e:80:85:02:cc:57:cc:e4:4d:1b:e8:e7:03:e8:
75:2a:da:6a:d9:b1:5b:46:5a:52:57:3e:fc:e1:b7:
95:bd:84:5b:db:91:bf:ae:e5:cf:6c:b2:c0:06:05:
a7:97:2c:19:cc:88:27:75:58:79:95:93:c0:6f:7c:
93:ae:29:d2:78:9b:4a:7c:4f:5f:fc:80:e4:f5:8a:
c7:8e:ce:09:43:8b:a0:1e:bc:4c:d5:fc:41:30:45:
6f:41:e1:e6:9c:f3:02:c7:90:48:b6:d0:43:b4:75:
92:62:7d:6a:04:60:61:c4:41:a5:05:72:ad:db:d9:
65:3b:f0:e5:94:1f:9d:2d:a2:bc:a2:dd:8c:6e:e5:
cd:e2:00:7d:98:fe:92:0e:25:33:fd:5a:6b:7a:d0:
f0:13:3f:99:e3:b8:fe:ba:f2:f8:3c:2a:b2:7e:ab:
26:ca:18:ff:af:7c:d8:6e:21:0b:12:72:2b:97:f1:
79:9b:d2:f1:f8:ea:40:fa:62:42:89:63:31:7e:f0:
b6:cc:94:52:26:d4:8a:de:dc:de:dd:3d:a2:85:95:
1e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:77:ED:83:1C:12:5A:11:11:4C:B2:32:40:59:81:81:8D:3C:2B:7D
X509v3 Authority Key Identifier:
keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d2:b0:46:29:ef:68:53:a4:a2:c9:a2:b2:f9:52:ad:4a:9e:
7d:af:35:59:e0:ab:3b:31:a8:d2:42:29:b7:ee:e9:a2:f5:c0:
21:dc:21:15:db:ec:41:4b:64:25:a7:ef:ae:6d:b7:25:5f:73:
20:63:d9:9a:52:54:90:42:63:9c:b6:84:f8:99:9e:40:7d:d9:
74:06:2c:91:7b:fd:bb:2c:c3:54:d9:5a:cd:f0:ed:a6:fa:12:
e0:e3:97:41:f7:7f:ac:ea:9a:6a:f3:5a:40:0c:77:3c:95:19:
fd:52:29:aa:38:bc:e6:95:4f:4e:d4:cd:f4:2f:ab:c9:c6:b7:
e6:45:f4:c7:3a:67:fa:42:ed:a3:f7:b9:68:95:15:dc:15:a4:
96:1d:8b:56:0a:16:00:3f:46:7d:ca:3f:e1:39:e6:5a:dd:1a:
64:e5:62:0d:7d:86:e7:91:df:a8:93:04:1a:1f:62:3a:ae:f9:
ba:d6:0c:9b:38:f6:ce:00:c9:15:96:4d:97:06:b4:5b:ba:df:
34:22:1a:bc:4f:f8:f2:d7:94:69:e5:55:fb:69:9d:14:03:c5:
63:f2:f0:26:43:bd:f5:6f:cb:6b:71:f2:ff:d1:99:e1:6b:52:
46:f5:c2:bf:65:e2:56:04:83:87:86:68:47:5f:4c:36:44:8d:
02:45:12:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:16 2025 by rpki-client