Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
File: TOdM9jcjwCadUoOxBlghrzhKmiY.mft (raw, json)
Hash identifier: NGxE0kNvB1d2IjjqTAJWUq2ymVeH68bzTMZo+bqBBPQ=
Subject key identifier: 4B:40:34:2E:CE:05:B5:A7:7D:B6:2B:1B:6C:B4:8B:F5:C8:E5:5C:C6
Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
Certificate issuer: /CN=4ce74cf63723c0269d5283b1065821af384a9a26
Certificate serial: 01988AA0C4FAA05CF6AA4C4AB2AADE73AE4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
Manifest number: 06B7
Signing time: Fri 08 Aug 2025 17:00:48 +0000
Manifest this update: Fri 08 Aug 2025 17:00:48 +0000
Manifest next update: Sat 09 Aug 2025 17:00:48 +0000
Files and hashes: 1: SILoOgzFVVKXYr4BeO1iAtaShUA.roa (hash: dPpD4jLPayYBOVInoYbVqKqufem4sI8eQUfot03I5EY=)
2: TOdM9jcjwCadUoOxBlghrzhKmiY.crl (hash: V7DzKJL22hX0vN+sBv5dL7q6vfto7mUqCqddEIWjoJM=)
3: ysuILm8GTM9rr0tx4VWy1ub_M3Y.roa (hash: wnzsKo97TxUOdXYRLd6GXvYrsFQQtPcVycGoHAT6hoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:c4:fa:a0:5c:f6:aa:4c:4a:b2:aa:de:73:ae:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26
Validity
Not Before: Aug 8 17:00:48 2025 GMT
Not After : Aug 9 17:00:48 2025 GMT
Subject: CN=4b40342ece05b5a77db62b1b6cb48bf5c8e55cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:c1:a2:01:66:53:20:b0:98:a0:71:ab:0a:
e8:5a:00:68:29:49:f4:8b:ce:dd:15:11:bd:41:69:
ad:3f:2d:46:63:19:88:96:84:cc:4a:3c:8f:7f:67:
df:1a:ef:d7:b0:e7:cc:04:da:3c:d6:2e:30:20:5d:
21:ae:30:5c:98:39:20:fb:f0:d6:3f:20:37:25:9d:
a5:2a:8c:fe:23:dc:fb:6e:5f:ad:f6:82:be:de:aa:
35:8c:de:69:87:ac:90:b8:41:a9:c5:b6:9e:dd:16:
fc:5b:f4:3e:98:cd:f9:43:1e:81:ca:78:b8:31:2f:
48:30:e7:86:d0:9c:45:a4:99:40:04:6d:7f:98:34:
fd:2a:78:72:1e:30:9a:80:6d:83:7f:47:cb:8a:b6:
b2:ba:4c:f8:0e:f4:97:bd:c6:cb:28:c1:78:ca:bd:
a6:63:2a:be:83:5d:09:ce:ee:6e:3e:ff:11:bb:03:
1d:f9:47:73:03:d6:2a:19:0f:5b:16:a9:e9:6d:71:
cc:1b:12:59:55:b2:28:9a:da:8c:38:0f:0b:8a:2a:
b9:fa:ee:27:f4:69:75:20:f5:1d:5f:b4:58:28:ef:
7c:6b:ba:34:70:9f:ee:02:47:a5:d9:5e:27:8e:2a:
72:0b:c0:8a:3b:44:b2:a1:49:90:0d:3f:1c:49:e7:
d2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:40:34:2E:CE:05:B5:A7:7D:B6:2B:1B:6C:B4:8B:F5:C8:E5:5C:C6
X509v3 Authority Key Identifier:
keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b1:04:ba:ba:8a:b9:6f:30:5f:6b:a0:c3:72:b4:d9:d5:04:
49:f8:38:04:0d:9e:32:51:f6:2a:8b:5b:98:e8:e0:ac:b1:87:
6f:f2:7a:ef:b7:83:0b:86:71:6f:31:58:d4:1b:d8:eb:b1:b2:
c3:c3:11:84:5e:67:86:12:57:77:e1:c8:fa:a5:bd:84:04:68:
57:7a:a8:b9:ce:d4:bd:13:83:e9:9f:13:60:61:2e:a3:52:7d:
bd:0c:be:00:bc:e8:44:9f:66:54:ea:49:01:93:58:95:3d:1b:
c1:38:9d:fb:aa:9b:ec:cf:ce:f3:5c:92:ea:fc:f3:d7:81:05:
85:95:c5:86:57:03:a5:e3:94:d9:5a:50:89:46:86:bf:9a:ce:
a3:ff:af:11:e9:d0:f1:de:05:b5:38:bc:0b:b6:e1:36:0b:79:
32:18:2a:66:0a:8d:a0:7b:84:08:ca:12:48:7a:b4:ec:50:c4:
83:7d:db:fe:1d:dd:1b:2b:14:e9:35:1c:d6:3d:f1:09:ee:2e:
80:b8:e9:ca:0c:9a:a9:f5:f7:76:03:cd:89:ac:06:19:5f:17:
a9:54:1f:2e:f5:cf:2b:ef:cd:48:44:04:5b:7a:c5:98:ae:f9:
44:29:7b:ef:23:62:9a:41:ca:f9:1c:59:06:82:42:53:f4:ae:
18:04:71:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:45:32 2025 by rpki-client