Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
File: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft (raw, json)
Hash identifier: LK9PUru7N76nA2SwtIicSJ61Bd9mkU4UtuP6P1iI4S8=
Subject key identifier: 86:B6:E1:DA:16:4F:D6:A4:C8:2F:3D:A2:33:D2:F2:B6:F0:14:54:93
Authority key identifier: 4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
Certificate issuer: /CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Certificate serial: 01987450943DAB1E9278C5A78F3071EA408D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
Manifest number: 133C
Signing time: Mon 04 Aug 2025 09:01:34 +0000
Manifest this update: Mon 04 Aug 2025 09:01:34 +0000
Manifest next update: Tue 05 Aug 2025 09:01:34 +0000
Files and hashes: 1: DAiAlkKu2uIH3tPrZHXW35UovoY.roa (hash: ii+y3ES147W1gYE6b/JQu7S5U4fp3robU9GiKGcJGDs=)
2: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl (hash: +56Prga6OZePGYhYoyqkcogbMPl1FHSEntjGwdXiIAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:94:3d:ab:1e:92:78:c5:a7:8f:30:71:ea:40:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Validity
Not Before: Aug 4 09:01:34 2025 GMT
Not After : Aug 5 09:01:34 2025 GMT
Subject: CN=86b6e1da164fd6a4c82f3da233d2f2b6f0145493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:54:ce:0e:d2:cd:fd:8f:81:42:d9:dd:ba:
7e:64:94:ec:d9:86:97:27:30:07:1e:2d:9c:e7:2c:
b8:5e:1f:54:82:14:b5:b0:dd:8e:43:45:bf:8d:49:
12:36:94:c2:7d:eb:b2:de:f0:7b:c7:dc:21:4c:76:
d3:70:aa:2a:89:c7:54:13:38:80:6e:56:d7:a0:2f:
a8:c0:f8:fe:06:cd:a0:53:cb:78:c6:43:b1:55:5d:
58:cf:eb:3e:6f:58:77:bd:55:a5:ff:d7:d2:27:48:
f4:a4:b8:1a:4d:fe:8e:d7:5a:b5:21:0c:5e:33:bf:
ff:70:a4:35:6e:43:ad:dc:aa:df:33:d3:bf:c6:98:
88:03:5b:27:85:8d:4c:4d:ab:09:61:b2:a8:d4:1c:
9f:1d:5a:a0:39:c9:e0:e8:de:78:38:86:b5:9b:b9:
f5:5e:6e:aa:c8:a8:a3:c5:47:bc:7c:7f:00:58:9b:
a3:bb:64:66:a5:61:2a:67:f9:93:b9:0a:07:69:75:
1a:82:a1:b7:2e:88:36:c2:dd:e7:25:4a:3b:4a:32:
a1:05:e5:75:58:5a:77:78:c5:81:0a:29:ba:80:8a:
2f:c6:21:3f:e1:15:c2:a1:e0:25:cf:2a:e8:77:97:
54:47:44:8b:05:d2:c3:f0:e2:f2:d9:ef:bc:e0:53:
b8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B6:E1:DA:16:4F:D6:A4:C8:2F:3D:A2:33:D2:F2:B6:F0:14:54:93
X509v3 Authority Key Identifier:
keyid:4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2a:88:ed:c0:a8:37:6a:92:31:c1:18:36:41:49:8c:a5:78:
a7:89:65:69:9f:8b:b8:d2:f4:e5:72:a4:1f:01:73:e5:99:87:
e3:87:97:08:d4:87:d0:8f:dc:f3:87:44:08:99:ea:ff:fd:a8:
bf:58:25:9b:4c:12:fc:0d:87:fc:fa:c3:43:07:f8:3a:85:7a:
8a:60:e9:74:b7:6b:2f:32:3c:99:92:f9:ef:35:07:83:25:70:
a6:e4:7c:35:00:0f:d0:dc:48:5f:ad:b4:d9:43:e1:e2:bf:97:
9b:9d:c9:13:26:e0:f6:fe:71:31:c8:49:9d:90:14:1b:ac:87:
e3:72:61:e2:61:16:bf:51:7f:c0:9c:4b:d0:13:40:39:08:9c:
1f:e5:c8:d7:99:20:25:5b:c9:6f:60:9f:b5:32:a8:ef:87:00:
3b:b8:1a:59:85:99:ca:48:ed:52:b2:c6:dd:93:62:44:83:fe:
82:9b:a3:78:7a:cc:51:65:b8:b9:15:2c:ea:54:ca:63:f6:76:
d7:c0:46:af:40:f9:54:e5:1e:a0:9b:1a:c2:89:28:6f:09:28:
37:83:83:4e:02:6d:57:96:c5:28:e2:46:4c:d9:b6:74:ad:2f:
d5:2a:53:5c:af:7c:38:c5:95:dc:06:ba:72:a6:fe:4d:d3:f1:
08:09:91:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:23 2025 by rpki-client