Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
File: tEJc9VATRKxazDB6vQrwE_rGcHM.mft (raw, json)
Hash identifier: npRIqrZSzZvuw1sPSTkPAeL9HarpurCJfO+wE7HGEm4=
Subject key identifier: 03:5F:C6:35:3B:49:EF:07:78:EC:E1:80:D9:DD:A8:C4:4B:FC:25:7A
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Certificate issuer: /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial: 0198744FCC9582BCA35302F0860D0CB62F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
Manifest number: 1221
Signing time: Mon 04 Aug 2025 09:00:43 +0000
Manifest this update: Mon 04 Aug 2025 09:00:43 +0000
Manifest next update: Tue 05 Aug 2025 09:00:43 +0000
Files and hashes: 1: iP514Grfm7HoMaMSlriqRZUp57w.roa (hash: uxTzsQkoKG+2gHXofBTy3Sd+QDMMkyYiw3WNGMp0rf8=)
2: tEJc9VATRKxazDB6vQrwE_rGcHM.crl (hash: AWIfDZPB+HUhGTnWTxZ4hsWGtsHpfL47If6Et8ZrnaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:cc:95:82:bc:a3:53:02:f0:86:0d:0c:b6:2f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
Validity
Not Before: Aug 4 09:00:43 2025 GMT
Not After : Aug 5 09:00:43 2025 GMT
Subject: CN=035fc6353b49ef0778ece180d9dda8c44bfc257a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:82:18:4b:dd:0d:27:b4:e1:93:1a:38:f7:
b1:0e:81:20:c4:07:03:c3:9c:df:42:34:01:62:59:
f6:be:36:1e:09:d3:6b:ea:a2:b1:14:57:0d:70:73:
dd:52:dd:21:a1:ac:35:0e:db:4a:6c:9c:d7:7a:65:
1c:bd:51:a9:f0:89:cf:07:8c:d1:d2:9b:c4:17:b1:
a5:79:e7:29:26:d9:be:62:da:11:18:5b:66:64:cb:
53:c0:70:ee:16:3d:7f:a5:f3:2f:c0:d1:fa:3a:2a:
76:1f:ad:72:7c:e8:b4:08:ae:a6:35:59:84:ff:c3:
77:9e:5b:0e:a5:4f:40:f1:2e:2c:ac:56:4a:7b:62:
1b:7b:8f:57:60:6d:db:b1:94:67:8e:7a:ba:fe:ab:
3a:e2:7a:e9:42:66:04:a8:c5:4c:fa:bf:3b:33:c8:
5f:44:fe:a6:61:91:50:a1:b5:97:29:ed:e7:3b:e6:
61:ba:5c:a8:d9:d5:ba:6e:8f:ad:12:67:d9:28:88:
62:fd:28:ca:91:b5:7c:cc:aa:17:e3:39:34:67:0e:
c6:4d:03:fc:73:a0:76:4c:22:1f:0c:8f:ee:c5:83:
80:12:fc:30:0d:1a:e2:71:4e:1c:02:11:b3:90:31:
06:52:e2:47:57:d1:ab:9a:e1:69:61:d4:7b:30:0b:
7b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5F:C6:35:3B:49:EF:07:78:EC:E1:80:D9:DD:A8:C4:4B:FC:25:7A
X509v3 Authority Key Identifier:
keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:87:c7:e1:a7:f9:52:ef:ea:17:83:1e:8c:bb:29:1f:60:93:
fa:ca:bf:91:16:e7:67:1d:24:b7:de:aa:27:a0:1a:ed:48:7c:
7e:5e:64:1c:ff:e5:c6:46:8b:40:cf:62:77:29:03:d6:96:1a:
c4:00:a0:97:3e:1f:c5:53:60:76:de:42:b8:52:c3:81:07:70:
fc:73:d2:14:0d:45:5c:54:1f:9a:a6:87:ca:1a:f2:53:99:a4:
0c:bb:3f:3f:c7:01:4f:ab:7b:12:0a:a5:c2:86:36:b6:a3:61:
0c:42:8a:83:ba:21:c3:02:fa:ee:1c:7a:7e:9c:51:13:19:9c:
6d:1a:cc:fb:c8:84:5d:31:fd:65:53:de:b1:71:da:65:b6:20:
75:35:4b:82:bf:d2:f2:b5:ec:0d:71:79:2d:5c:df:37:d2:50:
b7:0a:c8:2d:94:bf:c8:97:06:40:73:4f:c8:e3:88:a4:26:08:
52:2c:76:ca:1f:d8:6a:4c:f5:96:59:c9:be:2f:cc:9b:09:b5:
b0:32:53:79:2f:2d:7d:39:97:64:c9:3b:b4:bd:0f:cf:63:9b:
83:64:d3:89:d7:34:d5:cd:e5:90:bf:f7:95:22:fd:19:cd:3e:
8a:aa:c8:57:44:60:72:63:79:a8:79:f6:7a:47:29:8e:f2:80:
e0:70:fc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:56 2025 by rpki-client