Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
File: TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json)
Hash identifier: 2qkXKx+7uVU/GqKzoKvHso6kOUFI2JNlvH9oKRhLCzU=
Subject key identifier: 32:36:ED:3F:64:09:F2:49:54:FB:FE:C6:D7:36:D1:58:7D:DD:E8:E6
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 019895C8DF5B30E98F0FA3D06B21A120667B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
Manifest number: 162F
Signing time: Sun 10 Aug 2025 21:00:26 +0000
Manifest this update: Sun 10 Aug 2025 21:00:26 +0000
Manifest next update: Mon 11 Aug 2025 21:00:26 +0000
Files and hashes: 1: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: o9xIoNwMc0IhyJKppGPi7gSE78EYS6mzYiIGz3iCnZo=)
2: VCmh7D4aDnJ3RvUgB4_x96-F7yk.roa (hash: Fvy+64reQdJIkB2LlOhrfVK5VykM8awZbivVRRObMH8=)
3: W2TNL5im0fX66hopLKpEaeHN1Vw.roa (hash: jFMMnSyz7YrR/mDL9VXSfjnRvEdkg9GR9m7oXoI7Q1I=)
4: cC9Kn5RNwJ59ItW6IXpERzZosPw.roa (hash: Tn7jWRKA9agcVwEoCtyV/3OdfNNW+6uN3rC9ZNlnP8I=)
5: zpLViSP1mtGrcERbXmR4V_Zd6cE.roa (hash: yuKnJy9vuRLwT9M7eUlYmO+BbnE5uOEv2Od3+EfguMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:c8:df:5b:30:e9:8f:0f:a3:d0:6b:21:a1:20:66:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: Aug 10 21:00:26 2025 GMT
Not After : Aug 11 21:00:26 2025 GMT
Subject: CN=3236ed3f6409f24954fbfec6d736d1587ddde8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:37:16:37:28:3a:eb:98:e9:9b:f2:0e:5d:
a7:8c:84:97:a7:cd:45:f6:d2:50:ad:70:fe:ae:b0:
96:ad:4f:47:b5:f0:07:c4:3b:32:dc:f1:7a:a2:bc:
55:15:ea:96:d3:21:4b:e1:a5:8f:56:d4:01:7f:38:
f1:6b:37:4a:45:9a:b2:be:c4:a9:59:8f:4e:6d:61:
33:19:f9:ce:df:36:d0:00:bd:26:58:dd:85:d3:06:
09:5e:77:e6:72:c0:bb:f7:7c:7b:17:51:fb:c7:a4:
50:ad:5f:68:41:4d:ea:a7:5c:db:25:1e:b5:9a:11:
10:68:c7:9f:ef:d0:0b:53:9e:95:e9:c4:e4:dc:cf:
6d:93:ad:d5:1b:9a:f5:b1:07:d4:4d:a4:3f:d4:10:
ba:39:1d:66:6a:c8:e3:c1:00:ff:d0:79:57:50:1b:
d7:b2:71:2d:3d:60:dd:d5:51:1a:ac:82:ac:e9:3f:
98:e5:f8:bd:ba:71:50:50:e3:16:f7:7e:99:b4:35:
a0:f5:49:5f:2b:37:aa:67:1c:0c:a1:b3:fc:4e:12:
26:06:8c:39:2c:36:a7:c5:87:8c:3f:1a:98:d4:79:
85:b6:ef:5b:f0:63:68:bc:df:b3:0c:99:bc:e9:23:
db:28:ff:68:1d:95:c4:55:e1:62:29:f3:1d:83:60:
d0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:36:ED:3F:64:09:F2:49:54:FB:FE:C6:D7:36:D1:58:7D:DD:E8:E6
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:df:86:a1:ca:09:32:e5:67:c0:b4:98:67:ff:5a:3d:64:78:
cc:bf:a2:a8:12:ad:d1:9a:c4:1c:f9:5e:57:c2:1f:ad:96:67:
2b:af:63:e2:84:76:98:84:f1:17:9f:99:cf:35:6c:9d:f0:06:
e2:bd:3f:ff:cc:09:3f:e0:05:5d:91:8d:3d:95:ea:d0:0a:8a:
4d:37:7f:04:63:28:f2:61:1f:a2:dd:d0:8b:b7:23:7e:c3:7c:
76:0f:87:98:46:c0:8d:a9:8b:95:df:c3:ee:e2:88:42:93:fb:
3e:9e:3b:1f:7b:8e:72:f8:ae:61:f2:1e:74:a6:e7:0e:cf:7a:
51:fa:fe:70:90:65:df:62:05:c4:c1:7a:21:09:d3:81:df:26:
50:68:09:09:1f:d8:67:75:1a:4e:29:52:e7:5d:b6:bd:8a:b4:
b1:8e:8f:d9:f3:03:6d:63:18:d6:a8:5b:c3:24:6b:41:12:80:
e8:f3:ed:45:06:b7:ce:3a:b9:f6:5f:a2:fa:ae:cc:66:ca:1c:
3a:6a:0c:a7:24:5b:91:57:0b:82:64:f8:6e:08:6c:c8:a5:2e:
02:cb:d3:92:1d:6d:25:77:bf:a0:1f:61:7f:85:9b:e5:3d:a9:
be:7c:9a:dd:f7:76:31:06:32:62:6f:76:69:86:df:ed:1f:36:
e5:25:53:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:50:37 2025 by rpki-client