Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
File: tGTgryi3VcTsiAENlCmGl9GIOTM.mft (raw, json)
Hash identifier: qDaIChMWs4qm7MU5qEaDica3167/6OjHXHpJus4U+Zo=
Subject key identifier: CF:60:D1:3D:84:61:AE:4D:39:D0:92:89:F1:52:43:E8:71:30:7C:F2
Authority key identifier: B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
Certificate issuer: /CN=b464e0af28b755c4ec88010d94298697d1883933
Certificate serial: 01987486C59B112F0355B0794F6155F29D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
Manifest number: 07DB
Signing time: Mon 04 Aug 2025 10:00:45 +0000
Manifest this update: Mon 04 Aug 2025 10:00:45 +0000
Manifest next update: Tue 05 Aug 2025 10:00:45 +0000
Files and hashes: 1: 4ZUimyMSrmZMeMTJpofdIprKN0Y.roa (hash: +sbrqZ7npPQY0M7RUiP5uMAuk7XGp56zDb3oxzfgBs8=)
2: D6cOOwuzIu0b1VD3IEBzEJwwwCo.roa (hash: v5PJLnM3bwyGnG1xvGzcUgGuOEM5ARi6RIpoEpY7P4s=)
3: fyoJ9a9SSU9QMOOAnopUi24XOCI.roa (hash: Oq4G4KqExdW+YSWtwOksmXAFXdtGTgedgjAZaCPW9DM=)
4: tGTgryi3VcTsiAENlCmGl9GIOTM.crl (hash: hxG2x7cGFwlVyDYaoasxJ7o30URitKfY/o52TH8JKsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:c5:9b:11:2f:03:55:b0:79:4f:61:55:f2:9d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464e0af28b755c4ec88010d94298697d1883933
Validity
Not Before: Aug 4 10:00:45 2025 GMT
Not After : Aug 5 10:00:45 2025 GMT
Subject: CN=cf60d13d8461ae4d39d09289f15243e871307cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:12:ec:7b:58:ec:54:bd:27:14:3c:1f:db:
bc:16:dd:1e:6a:33:dc:db:ea:fc:d3:48:51:5f:e0:
cc:c9:8e:b5:44:37:2a:cf:81:66:13:16:93:15:8c:
95:d4:bb:85:61:6b:8d:71:8f:46:10:df:52:2d:62:
8c:b8:7f:61:ff:5a:dc:2f:7d:10:8c:23:37:73:ae:
2a:dd:0f:06:ca:e1:46:39:25:38:22:91:3e:65:e8:
26:c9:d7:08:00:c4:a6:df:56:27:1e:06:a9:63:25:
b7:be:5e:34:e3:e3:75:55:75:16:b9:d6:f5:a1:66:
29:9a:c6:cf:2f:eb:88:89:4f:f0:32:39:30:67:82:
8d:e8:9f:66:de:c3:28:92:05:0d:d5:58:3f:ca:5a:
14:e4:b3:64:a1:9c:5a:d7:04:9a:5b:c3:e3:81:f5:
b3:96:91:70:16:83:0b:29:0b:8f:2a:72:05:76:19:
bd:56:29:02:8a:de:06:25:e7:5f:38:92:64:5e:ec:
40:ca:20:b5:00:6d:e5:81:1b:03:ec:18:6e:b9:a1:
31:6b:f6:d0:4c:98:a6:e0:a9:c7:c6:4d:2a:e1:96:
dd:45:e8:20:31:24:93:70:09:49:f1:0e:b5:4d:22:
93:86:c3:d6:2c:d5:ab:81:f7:e6:e3:a1:24:9a:e2:
63:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:60:D1:3D:84:61:AE:4D:39:D0:92:89:F1:52:43:E8:71:30:7C:F2
X509v3 Authority Key Identifier:
keyid:B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:42:1e:37:6b:31:aa:44:08:ef:29:e5:6c:fd:6a:d5:90:a4:
15:df:34:f4:5a:c2:41:da:f9:ed:bb:2d:e2:fc:7c:a4:6b:8c:
b3:92:80:2f:d9:d3:18:7d:e4:95:57:d0:db:af:5e:c3:89:20:
1b:39:b1:aa:bc:2b:2c:ae:00:ac:a5:fa:8b:27:79:88:ca:90:
81:65:37:b1:6c:96:b2:aa:54:fa:07:ef:e0:c2:ec:7e:ec:ca:
76:24:b0:06:14:65:b2:42:e8:8b:21:5a:76:54:fa:20:01:3c:
73:83:de:a6:be:dc:cf:b2:fe:80:ab:ea:28:dc:89:93:96:9e:
7c:86:a9:67:21:ca:fd:43:cb:8b:6d:8e:e2:ac:88:01:59:eb:
6b:ba:76:e6:55:a1:7d:15:98:fc:a1:7a:8b:b3:be:9d:6a:5c:
ad:df:53:89:f7:da:c5:56:2b:98:3b:6f:45:54:9f:b7:3e:dd:
72:b5:2c:a2:75:8f:ab:31:ba:31:56:a5:1a:e5:e1:57:54:7a:
ee:ba:43:59:71:ba:05:4f:b1:ec:92:ce:bd:d5:3e:08:8d:31:
7e:24:99:5b:92:f0:65:f4:ed:f9:59:55:5b:fe:14:4b:62:36:
32:88:12:0d:2c:d9:64:91:13:89:7f:c2:04:85:f8:b4:42:fe:
59:c0:73:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:09:25 2025 by rpki-client