Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
File: tKIIXH3jtZgha4n7Dysdkw3mbBk.mft (raw, json)
Hash identifier: 7V1gAD9Co7ddjw84/oI7Cc4o96UIZb88L9eJn/4nfvs=
Subject key identifier: 03:E6:0E:6B:5D:A8:F5:96:F4:2F:49:94:0D:8D:DD:8C:41:B7:93:8F
Authority key identifier: B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
Certificate issuer: /CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Certificate serial: 01987D1C17020EEB0F8F19D64F0399556E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
Manifest number: 15F1
Signing time: Wed 06 Aug 2025 02:00:49 +0000
Manifest this update: Wed 06 Aug 2025 02:00:49 +0000
Manifest next update: Thu 07 Aug 2025 02:00:49 +0000
Files and hashes: 1: Bm5UACtbnF-zdFYjA8vPOBqvgzc.roa (hash: TLMH3v0yPGvBQf4sp02A0ciC7nkIzxuyV+cC5oHQvcg=)
2: KygTuxQFGUD5ATwC-VI56P0_KW8.roa (hash: +kPqhnKnrFZGjWfktqCyP4orZXjdv9+6M6sRVLgaUrA=)
3: kH7H7auuv6q7VTDiT7be_vcY-1Q.roa (hash: M4+McdjIhgE1/SI8bKbvFu1HsdzjwaQszRqVGjqa+wM=)
4: tKIIXH3jtZgha4n7Dysdkw3mbBk.crl (hash: zawAeJJzuuhI/RmsQ8YGjU6q6Sb3yDg65kchrbtgAXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:17:02:0e:eb:0f:8f:19:d6:4f:03:99:55:6e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Validity
Not Before: Aug 6 02:00:49 2025 GMT
Not After : Aug 7 02:00:49 2025 GMT
Subject: CN=03e60e6b5da8f596f42f49940d8ddd8c41b7938f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:30:ae:59:e1:8a:db:26:d5:08:02:f9:e6:
bd:e9:f1:ab:bf:4a:ad:75:1c:06:cc:08:d7:94:d5:
f5:a6:7c:4a:90:eb:da:ab:9e:a2:8e:f1:ad:06:75:
45:59:f2:9e:c0:83:f1:6f:fa:0f:ba:17:6d:40:ca:
a4:90:47:99:69:88:74:08:01:56:32:bf:65:a3:83:
af:fb:2e:bf:fc:1c:7e:d5:c1:03:59:29:76:ed:18:
70:22:2f:33:78:94:cf:bd:68:10:39:eb:be:40:b3:
eb:b0:c6:e6:99:a7:29:6f:7e:fd:df:ae:e5:22:b5:
e4:ea:a3:16:e3:24:7d:88:51:87:30:dd:f8:f9:63:
5b:47:71:fd:9b:88:c8:fa:ed:6d:79:c0:a9:6a:7a:
2c:a3:40:4f:55:98:77:b7:c7:09:df:9e:9b:b7:61:
d2:66:fd:5f:bd:ed:4b:ba:fc:38:cd:19:03:90:d4:
c5:e8:11:e7:b9:05:25:a3:46:74:02:e6:ed:10:b2:
62:c7:57:b9:d4:3f:16:cb:45:9e:5c:0e:f5:c3:1f:
24:2b:67:df:43:74:88:c1:3a:82:4d:05:3a:f4:7f:
26:ee:b2:43:4e:6f:b6:40:90:da:8f:26:32:9d:8a:
57:44:09:97:46:a4:d9:ac:7d:b1:9a:97:e3:fa:3a:
1c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E6:0E:6B:5D:A8:F5:96:F4:2F:49:94:0D:8D:DD:8C:41:B7:93:8F
X509v3 Authority Key Identifier:
keyid:B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:92:90:1a:a8:ad:2f:79:78:c7:0e:e3:7a:74:c8:67:8b:cc:
f7:5a:86:43:73:51:8b:8a:75:77:5c:29:15:00:82:fb:24:e2:
a3:95:91:e4:ad:62:50:e8:98:28:3e:5b:d1:06:58:53:75:a0:
c9:8f:55:35:f9:35:89:81:25:02:6c:10:5d:31:f3:81:8d:17:
33:be:f5:be:85:e2:63:19:2f:ea:1d:28:62:f3:9e:a4:b3:1f:
08:18:5e:c2:75:5d:e8:41:b7:6f:ea:e4:8e:df:24:72:dc:40:
cb:57:9f:0d:ec:4e:91:dc:c8:85:c2:90:e1:20:67:05:60:26:
88:15:28:77:1c:7a:8e:44:a1:f4:21:0b:b2:f1:50:c7:34:39:
ef:5e:3f:97:18:89:2b:84:22:2a:d6:3e:4d:a2:76:3c:de:8d:
82:cb:64:fd:09:d4:05:8d:4f:9b:1e:e7:fc:0a:98:be:14:c9:
40:5a:a3:e0:7c:07:e6:37:94:de:ee:09:e6:f7:a5:5a:9e:a1:
c1:bd:52:8e:c8:c2:78:a1:6e:b9:36:06:ed:96:dc:d7:72:0a:
a1:a5:f0:74:86:e4:e7:cc:9e:f7:fd:10:8b:66:96:be:5a:8b:
4f:bb:1c:8e:c3:75:50:1b:af:c6:ff:4e:c2:81:23:49:86:09:
7f:9f:e1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:17:10 2025 by rpki-client