Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
File: tDJYoYz00SKOXHkHDfpjMRaDIMU.mft (raw, json)
Hash identifier: 2v+TNxx161gCfFVCQTN+ohmDaJ4d7rMRgJPMeMFJESI=
Subject key identifier: 21:D9:8F:88:E7:FC:A6:04:B0:18:5D:75:EA:45:78:6C:BF:94:DB:BB
Authority key identifier: B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
Certificate issuer: /CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Certificate serial: 01987E2EC78D8678B67F471713F8B31E5455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
Manifest number: 145F
Signing time: Wed 06 Aug 2025 07:00:51 +0000
Manifest this update: Wed 06 Aug 2025 07:00:51 +0000
Manifest next update: Thu 07 Aug 2025 07:00:51 +0000
Files and hashes: 1: 28g4Blr7nuSyJeVmwy4cGLK9eb8.roa (hash: Q3uRjW4ymMVkt8l5TduM8mGnhXb4GzyvEHZ5j93is8c=)
2: psNnDsOb3MJQFpyT8HfsVNSnwog.roa (hash: KJkUgz1VxvV5lZj00xJ9seKTuebHbMbR6MJlSYq/h5Q=)
3: tDJYoYz00SKOXHkHDfpjMRaDIMU.crl (hash: MGXyDipN+3c96uxdE/hq9FxLNTez1uOOh1Dwvo8WJBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:c7:8d:86:78:b6:7f:47:17:13:f8:b3:1e:54:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Validity
Not Before: Aug 6 07:00:51 2025 GMT
Not After : Aug 7 07:00:51 2025 GMT
Subject: CN=21d98f88e7fca604b0185d75ea45786cbf94dbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0c:17:60:b3:ae:81:e2:2e:70:c1:34:7d:61:
86:08:55:9a:eb:6e:bb:38:7f:b0:84:d1:d6:6d:f9:
09:58:c9:d6:c2:aa:b6:aa:d9:48:f6:55:61:5a:a6:
9b:da:c7:5c:a5:b6:4d:1d:bd:5e:3d:d4:d4:e4:1e:
2c:9a:6f:34:d3:18:55:bf:e1:c2:05:2c:50:8a:01:
07:18:83:60:00:f5:44:a3:b9:99:a7:2d:79:65:ad:
78:6c:9c:fa:fb:eb:07:4a:98:da:1d:d0:18:13:18:
76:78:d8:dd:2b:8d:11:5b:c8:9d:16:a0:6a:56:af:
cc:77:e8:5d:53:b6:39:8d:9a:c8:d9:fc:32:5f:0e:
97:f4:48:10:a6:9f:6c:46:53:06:78:fc:d1:83:f4:
ec:59:29:f6:96:eb:fa:6f:41:fc:6c:e4:44:d1:25:
71:a9:47:5c:cc:2b:f7:80:a6:56:11:99:c6:53:6e:
4b:27:f9:f4:16:5d:3c:c1:09:ff:c7:96:83:4f:a9:
3e:f2:bd:96:6f:16:b9:64:1c:42:69:a1:b1:ba:d9:
6e:9f:5b:80:1d:ec:04:ec:56:32:3f:58:9d:e4:a7:
38:a8:66:2a:37:3d:eb:02:60:b6:bb:e2:6c:41:9f:
3c:73:91:25:03:c5:ed:90:64:a9:93:be:ce:11:c6:
96:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D9:8F:88:E7:FC:A6:04:B0:18:5D:75:EA:45:78:6C:BF:94:DB:BB
X509v3 Authority Key Identifier:
keyid:B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b0:8c:6f:4f:d3:a4:ad:06:90:1d:c9:ad:88:29:86:d6:29:
6a:53:1b:85:b8:5e:db:4c:3d:8b:db:d9:10:2a:be:07:30:b6:
7b:13:1b:da:a8:2c:7a:48:5a:f8:65:d2:a0:cc:7c:04:73:6c:
f8:76:26:38:d5:61:74:96:7a:43:4e:2e:66:9e:b5:34:49:a4:
3a:ec:77:4e:7c:1d:d3:69:65:d6:ca:0b:b1:da:bc:2b:15:45:
25:e2:f4:a7:24:12:df:d8:c6:7f:11:73:0f:83:e8:28:58:f9:
76:81:46:be:98:e2:20:8c:88:e9:26:e8:d3:ca:7a:ab:5c:34:
64:81:85:e9:70:f4:ac:99:69:2d:0f:01:4b:f3:0a:cd:db:e5:
8e:6f:97:10:53:35:32:e3:d8:49:fa:81:c4:db:af:05:00:78:
78:a5:d8:b7:c3:9e:63:da:a9:0a:33:fc:bb:27:b8:82:8d:d4:
cb:1a:30:cf:d9:80:45:17:b6:c0:e3:ce:08:07:d7:e9:ef:6d:
3f:95:c3:42:52:e6:63:25:79:20:c7:55:52:0d:50:21:94:24:
17:83:57:8d:67:8b:54:de:2a:01:d2:0e:16:7a:5f:e4:90:f8:
20:52:cf:20:03:d3:76:6f:09:56:da:67:35:6e:cc:74:85:4f:
20:de:ae:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:08:41 2025 by rpki-client