Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json)
Hash identifier: Q0ZXJ4lEo0vlS7QPnLh9xXYyg2Miqs1eYkIwz8eQNtY=
Subject key identifier: 01:E3:03:99:7B:E3:66:D5:48:37:F6:71:3E:77:7A:3C:60:13:69:C7
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 019881D4850403D4AD4B992C2E5B8594D5EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
Manifest number: 0F33
Signing time: Thu 07 Aug 2025 00:00:45 +0000
Manifest this update: Thu 07 Aug 2025 00:00:45 +0000
Manifest next update: Fri 08 Aug 2025 00:00:45 +0000
Files and hashes: 1: VYJ9qKilNSj9Z30pGpYaNAGU4Z0.roa (hash: j29BGrdUX9gZWLn/MqLu3C1IYATOJG6BtpBREfenzkc=)
2: dek1yBz9hU9Sw_jKA33of_zM9K4.roa (hash: yub3ufVUEc3WS+XkUJMCp9euptnf3DjONJgSPtRCvNQ=)
3: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: 9nQyZzlQsQt2P4xhA3qqnQAJUU5CEqk6vWeec0x3DvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:85:04:03:d4:ad:4b:99:2c:2e:5b:85:94:d5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Aug 7 00:00:45 2025 GMT
Not After : Aug 8 00:00:45 2025 GMT
Subject: CN=01e303997be366d54837f6713e777a3c601369c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:39:de:60:55:04:92:b2:10:cc:e4:fc:1d:
d6:49:d0:49:75:71:ee:e0:6a:9a:e8:b0:71:c5:9c:
2d:45:8b:ac:85:96:77:a9:22:0a:99:6e:ff:ad:cc:
0a:3f:f2:f4:04:17:8d:b7:f3:85:53:93:98:88:78:
be:65:ce:95:c9:29:da:63:38:f9:38:fd:c5:dc:c2:
16:79:e6:73:1a:c4:86:e8:53:44:b7:df:3e:cd:74:
1d:ff:3a:b8:ae:df:2f:ed:11:34:42:25:5f:6c:fd:
49:a8:f7:5a:59:9d:22:24:d6:87:11:df:64:5c:f4:
ab:0a:f9:f5:ef:f6:7a:28:4b:06:70:4c:23:cc:fd:
9f:66:a8:54:b8:1c:ac:3f:07:5d:aa:6d:49:30:9d:
6a:34:c6:fe:d8:2d:8a:c6:a3:a3:a9:00:61:4b:28:
81:94:62:82:42:eb:5f:5d:1a:b6:d8:92:63:ed:69:
ba:ac:32:de:eb:4d:3c:b6:a0:19:e1:ed:fd:7b:43:
3b:ca:04:43:e5:04:be:46:15:3b:af:c1:16:bd:08:
55:00:12:c6:8c:b3:16:a2:5e:16:6b:21:1f:68:c6:
af:28:d0:1b:e1:ac:a1:cd:12:aa:21:db:d3:74:3c:
ee:4a:9d:22:f9:8c:22:60:47:17:18:f2:b5:36:38:
de:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E3:03:99:7B:E3:66:D5:48:37:F6:71:3E:77:7A:3C:60:13:69:C7
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e7:62:ba:b3:48:16:63:72:5f:e5:97:51:bb:ae:1d:f9:11:
a6:63:b3:df:25:bb:9d:06:d4:88:7b:5d:1e:70:53:23:52:11:
83:65:ab:7f:99:03:58:6f:9d:36:ab:7f:3f:b5:0a:95:e3:ae:
35:ac:56:15:a1:e6:d8:22:d1:11:11:f0:f4:12:b7:7a:d4:19:
aa:c1:7d:a0:bb:b7:34:47:00:de:b6:77:06:5e:12:6c:4c:68:
43:85:95:ce:8d:1f:c3:a0:a1:55:0d:36:d8:74:65:1c:b3:cb:
5e:dd:a1:3e:69:df:63:fd:4a:ba:be:e7:fd:28:af:dd:bb:41:
72:04:fb:0e:6d:58:1d:ff:7c:84:bb:5c:82:d4:23:de:37:98:
7d:05:f8:04:84:62:ba:45:3a:83:97:3b:d1:70:22:1b:92:d1:
76:8c:2b:b0:d8:8b:e9:3d:dc:a3:1a:af:40:ce:ed:4b:f5:9c:
16:e9:fd:24:35:27:c1:f2:56:1d:cb:09:7f:ae:63:58:9f:f6:
58:0a:75:78:bb:48:61:9d:ad:62:bb:99:bf:64:5f:24:d8:ac:
71:0c:17:e4:e6:39:bc:f4:25:9b:8e:7a:ad:28:0b:b5:4b:aa:
5e:f9:08:f5:28:89:b7:dd:d7:22:67:04:fe:7b:cb:00:b9:5e:
17:7b:14:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:29:39 2025 by rpki-client