Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
File: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft (raw, json)
Hash identifier: I6cM/xRg9fJnTWnVi1WPjPoSHa7U/Zl71o4LitywmLI=
Subject key identifier: 9F:A0:68:F5:8B:9A:55:EB:E3:04:15:B3:7E:65:47:83:CB:4E:56:06
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial: 019880F927C60E207151B63B3B25750232C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
Manifest number: 0978
Signing time: Wed 06 Aug 2025 20:01:08 +0000
Manifest this update: Wed 06 Aug 2025 20:01:08 +0000
Manifest next update: Thu 07 Aug 2025 20:01:08 +0000
Files and hashes: 1: ZFlE4CwGV5oXv28o6nsvolZlI_Y.roa (hash: S5Q4DAjjTKxkiafJ6he6yLpO30RXNUCaXjGnLWKadCQ=)
2: a3EraYk05VPEffLc6KjCZtg0uOM.roa (hash: MkXr1kaZ6Jwr9qIlXjAkJ2Xml1hQyvkyv9rct4pH8co=)
3: fJY20OuQ1IuJYeyVIHU1EBJ0rFM.roa (hash: +X81MlM0oUdVo08v6gDJj1EWTtIWJ/ia51w5FCk6+3U=)
4: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl (hash: TFAvxszZe+/WUCTB2pYulLS3yRA6VyMOFwiyaiRb6UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:27:c6:0e:20:71:51:b6:3b:3b:25:75:02:32:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Validity
Not Before: Aug 6 20:01:08 2025 GMT
Not After : Aug 7 20:01:08 2025 GMT
Subject: CN=9fa068f58b9a55ebe30415b37e654783cb4e5606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f0:36:9b:3e:8f:eb:6e:c0:b9:9e:af:a1:b1:
f4:ab:d1:c8:95:de:9a:08:95:2c:27:4c:9b:65:43:
40:ae:7f:3c:89:0d:68:57:7b:7a:85:25:ae:52:7f:
24:bf:c9:bd:96:a9:0f:5c:76:8c:44:a5:86:37:a2:
0b:da:6a:ff:6e:d0:b0:97:70:d2:54:6b:24:2f:31:
24:8a:7a:34:b7:19:eb:04:dd:9e:5b:15:23:2b:c0:
4d:01:8a:16:60:51:17:4b:2e:63:2a:b4:9c:b1:60:
34:66:f5:42:ab:da:47:d0:6d:fd:9f:c2:ac:a9:9c:
b2:fc:3a:78:15:40:f5:88:2b:7a:08:ab:c2:22:c2:
3d:44:bd:09:5a:e6:43:e1:61:6c:21:25:03:43:04:
64:63:e9:55:08:b6:25:c3:4d:57:f3:34:49:e3:c7:
91:e9:fc:34:f4:da:1e:9b:69:80:76:92:4a:12:b8:
0a:0f:9f:ba:62:40:0d:08:b0:6e:7b:af:29:0e:94:
88:85:7d:2e:4b:d8:41:65:2c:df:5d:f2:2c:27:77:
f4:77:81:36:8e:15:a0:18:38:01:47:7d:47:bc:ad:
71:ed:e8:9b:36:30:99:44:37:bc:90:08:8f:bd:f0:
04:7e:cf:f9:53:e8:9e:68:81:fa:af:d3:17:d9:0f:
51:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A0:68:F5:8B:9A:55:EB:E3:04:15:B3:7E:65:47:83:CB:4E:56:06
X509v3 Authority Key Identifier:
keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:56:6a:35:53:ee:ba:eb:bb:d5:c2:e3:d8:4f:29:ac:11:6b:
b5:bd:9a:80:9c:75:16:18:ec:99:75:bc:cc:42:4c:1d:06:20:
97:08:75:eb:0b:ce:ba:e7:a3:1a:b7:5c:e9:28:63:be:16:48:
9d:03:a3:9f:0a:2e:9f:00:c8:22:45:fe:59:80:6e:fd:6a:e8:
3f:40:2e:a4:7f:5b:83:d0:3a:22:d3:8f:5d:d0:6d:6c:f9:fc:
c6:45:12:ad:a4:27:7b:62:e4:25:0b:b2:be:c5:52:b7:4d:d9:
61:6a:63:66:c4:b4:0c:d0:12:ef:68:6c:85:e9:f2:29:b1:c6:
38:62:db:b3:7a:6d:82:ed:6d:9a:5b:8e:7e:9b:44:83:2f:5a:
5a:ca:99:46:e5:db:db:53:36:bc:cd:a2:ff:84:36:ec:a7:78:
87:4c:bb:09:2f:49:dd:dd:fc:a7:94:4d:74:e4:9b:3c:a8:7a:
dc:e3:4a:71:2b:3c:dd:3e:69:e1:3c:8e:33:6b:46:f0:7b:c2:
62:04:d5:c2:65:7f:fc:1c:44:98:bb:0d:d9:0a:65:bc:f3:86:
c3:11:3b:74:f0:ba:ad:0a:62:63:24:1d:f9:14:56:31:00:43:
e5:a5:7b:79:c6:bc:ec:fa:67:c1:57:18:02:ac:29:66:50:9d:
7c:a1:bd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:08:26 2025 by rpki-client