Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
File: tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft (raw, json)
Hash identifier: KYjwDeKqf68jeqASGrGFS98+tt3VDkY/9NJVTWYk1tM=
Subject key identifier: F1:04:18:BC:68:2B:83:8C:44:29:3B:5F:6E:E7:4D:69:18:93:8C:33
Authority key identifier: B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4
Certificate issuer: /CN=b40c95867c3084c4c16a2febb46651090f3247e4
Certificate serial: 01987ED3F043AD49A0AD7615E44DBFA5B5D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
Manifest number: 0C9A
Signing time: Wed 06 Aug 2025 10:01:15 +0000
Manifest this update: Wed 06 Aug 2025 10:01:15 +0000
Manifest next update: Thu 07 Aug 2025 10:01:15 +0000
Files and hashes: 1: lEEZzzybqBVZbE52j1UTaBha8S8.roa (hash: M0ghNe8I1TZs4KtvQ8xKIi7A+x2ciHjaRyld8EsOpko=)
2: tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl (hash: X+T/540T9Ic9O8dUL7QaD5sxlsJCD1q8NQYTTF85zY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:f0:43:ad:49:a0:ad:76:15:e4:4d:bf:a5:b5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40c95867c3084c4c16a2febb46651090f3247e4
Validity
Not Before: Aug 6 10:01:15 2025 GMT
Not After : Aug 7 10:01:15 2025 GMT
Subject: CN=f10418bc682b838c44293b5f6ee74d6918938c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:55:f3:6e:c2:e3:a4:30:9e:18:2c:0f:6f:
c7:19:22:08:4b:aa:32:89:4d:d6:11:f9:57:93:a7:
11:97:7f:82:87:e1:d1:e7:5c:04:6d:e1:c5:15:9f:
59:a8:79:e5:44:32:a1:cd:89:c2:b6:02:93:57:57:
a6:bd:53:24:0a:79:f5:e9:6c:7d:00:3d:7f:f7:64:
65:f0:3f:ae:95:4d:5a:50:dc:99:32:79:16:9e:2c:
4b:65:a8:a8:80:9e:bc:2c:26:0f:4e:33:d3:f2:03:
24:0f:d7:d5:05:78:fd:3b:9c:49:c1:8d:4f:9e:ba:
c4:eb:b2:42:55:5f:45:e2:b4:46:58:75:c4:8f:1b:
0c:85:92:96:30:13:25:a6:30:e3:7d:99:f6:29:24:
00:51:29:8b:09:07:a9:18:e3:f8:c2:34:6a:41:40:
2d:c5:6e:bf:38:53:25:ff:fb:22:7f:3a:b1:df:b2:
1f:e6:ba:3d:aa:bd:59:df:c8:25:24:62:37:d3:c0:
22:ca:c8:9f:18:98:4c:28:df:f8:c3:0c:9b:70:d6:
5c:16:02:78:02:47:ed:0b:f2:8e:f3:d7:a7:a0:39:
12:f8:5c:bc:43:04:80:43:e2:94:f7:8e:59:92:13:
c4:d7:a6:2f:c6:c7:58:8c:f7:77:19:54:1d:bb:98:
09:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:04:18:BC:68:2B:83:8C:44:29:3B:5F:6E:E7:4D:69:18:93:8C:33
X509v3 Authority Key Identifier:
keyid:B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1a:00:50:63:e7:b9:a7:39:11:58:68:32:28:6b:d0:fd:e3:
8a:8c:2e:68:df:b1:d9:22:a7:db:ea:5f:8e:4c:f5:a8:c0:92:
e3:71:9c:67:7f:75:49:0f:d3:76:54:54:0c:23:83:f6:3a:8e:
37:82:b5:a5:42:b7:75:61:58:d9:ee:24:1a:54:b7:c3:80:f0:
ca:d5:52:2a:ed:10:fb:09:0c:70:1d:3a:07:76:b3:06:a3:99:
d8:67:4b:ff:69:cf:98:39:c3:c3:cb:77:72:dd:02:44:77:11:
5a:82:b2:e9:3e:20:12:8c:b8:c8:11:18:99:ac:c0:69:1d:d1:
96:7e:d1:e5:3d:53:d2:e2:fe:6e:1a:96:5f:71:d0:b6:2a:b4:
da:cf:51:cb:83:97:9b:b4:e4:51:05:f8:05:e6:2a:8f:b9:b1:
20:e4:4b:5a:e2:d7:d1:aa:f7:8c:ea:ee:80:36:76:c7:1b:1b:
24:ae:3d:1b:71:3f:f9:b8:23:f9:64:b2:7a:7b:cd:fd:96:06:
62:b0:80:e7:65:1f:50:4f:03:e6:85:92:48:96:2b:74:ce:02:
79:55:87:63:ae:c4:6c:e9:ef:ab:2e:9e:93:96:b8:bc:5f:0d:
00:b4:2d:6f:29:ec:9b:d6:62:ea:32:63:e1:fd:ba:15:38:d5:
52:4a:8a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:30:48 2025 by rpki-client