Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
File: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft (raw, json)
Hash identifier: X2KSzbcF4BQ1CvcJXStWTGp4hBkrhg99E8UZyFF2vfM=
Subject key identifier: D2:60:E2:2C:9E:02:1E:7E:47:50:44:E3:05:A0:C4:49:BD:54:D3:3C
Authority key identifier: B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
Certificate issuer: /CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Certificate serial: 019887A00E06B0B3912FF53F1EDF061CE0CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
Manifest number: 1625
Signing time: Fri 08 Aug 2025 03:01:10 +0000
Manifest this update: Fri 08 Aug 2025 03:01:10 +0000
Manifest next update: Sat 09 Aug 2025 03:01:10 +0000
Files and hashes: 1: A19KF2VhmqgRITxahuDcRts8KJs.roa (hash: YirbVHhxW1CKNUwQAz3dz5QapLv5A3zZT5MHBNEVZ34=)
2: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl (hash: 9PAxR10qq/91fLEqJibUNihKMiqSRYkcg0nujUbaf6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:a0:0e:06:b0:b3:91:2f:f5:3f:1e:df:06:1c:e0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Validity
Not Before: Aug 8 03:01:10 2025 GMT
Not After : Aug 9 03:01:10 2025 GMT
Subject: CN=d260e22c9e021e7e475044e305a0c449bd54d33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:ea:97:e7:e7:f7:cd:5b:c9:11:2f:00:05:
76:a4:7b:f2:c9:2f:6f:a9:65:8c:6a:2a:10:fb:48:
8f:91:73:2d:e5:a0:88:cc:43:02:cb:ce:bd:16:79:
e0:de:11:1b:15:59:77:22:5e:05:38:66:d2:84:33:
64:17:0e:0e:34:4a:8e:5f:1d:5e:53:b1:da:da:e4:
04:a5:34:f5:e6:94:21:67:a7:3f:77:b4:75:f2:81:
2d:48:77:61:f3:01:be:dc:eb:d5:6b:76:57:72:5d:
43:9a:55:65:88:de:01:40:7c:0b:d1:c6:ca:46:bd:
e9:22:62:f6:c8:58:9f:2a:0d:89:e0:34:b7:f7:91:
29:4d:e9:45:9b:61:78:46:9c:fe:0a:86:54:54:95:
07:5d:78:5f:4f:ce:66:30:92:d0:5e:3e:a9:6b:9f:
12:57:66:09:5a:59:9f:1b:74:e8:04:f9:d8:7b:19:
93:28:2b:f8:ae:9f:5c:bc:e5:a0:f0:d6:7f:b2:2c:
85:b7:38:68:e0:91:b6:b7:32:dc:a5:1e:4f:0c:5d:
25:98:bc:d2:6c:aa:13:66:fc:f6:f7:05:b9:22:fa:
26:9c:a4:ce:fa:67:67:92:25:67:ff:c7:2e:1b:57:
fb:8b:cd:30:f8:25:04:e5:48:ec:c1:b8:4f:9e:fc:
6c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:60:E2:2C:9E:02:1E:7E:47:50:44:E3:05:A0:C4:49:BD:54:D3:3C
X509v3 Authority Key Identifier:
keyid:B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7c:cc:60:10:6f:a7:03:0d:47:ca:c7:56:6d:11:e0:ac:63:
50:c7:6a:5a:b8:13:7c:82:40:20:d5:e5:0a:f9:f0:ff:a0:6a:
b2:bb:36:65:cf:0d:4e:8c:ef:54:c6:5e:8b:b4:f6:d3:e0:30:
2c:06:c9:b7:8d:3b:23:41:5f:3f:8e:83:93:cd:e6:89:d8:5a:
29:b9:0b:6e:b4:4c:db:95:c9:48:45:1e:a6:cb:ed:b8:33:53:
a0:0d:57:58:09:d5:a5:48:96:d1:9d:10:b9:30:cb:2e:d8:7b:
91:8c:4a:4d:f2:75:a4:1c:7a:68:29:34:0e:72:57:57:0c:7e:
87:61:87:a7:59:a0:df:91:11:98:04:d7:6f:ae:5a:bf:32:08:
09:8f:bb:29:b5:0c:35:0c:4f:f5:de:e1:ce:fe:52:38:f6:54:
5d:05:99:ef:da:cc:f7:e8:40:06:9e:ff:cf:ac:ef:20:31:f5:
b1:3d:65:cb:db:30:b8:93:00:0b:37:4e:20:2e:5f:15:3c:74:
f7:5f:cd:97:aa:e5:ec:ed:2b:7f:55:23:69:56:0b:ff:e0:2e:
75:07:08:14:e1:16:1f:14:93:de:ea:d2:ba:ec:32:dc:8d:0d:
4b:30:ea:f2:d0:5d:00:32:63:71:fd:ff:d3:fe:40:ef:8b:c1:
13:61:9b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:04:35 2025 by rpki-client