Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
File: tPgsjv3jS9meROrwcxtsUltFShk.mft (raw, json)
Hash identifier: z7EVr/LxNY72hKWr2beeFUWERDlXS1XkkOli6kT6lt4=
Subject key identifier: D1:C1:21:B1:A0:83:4F:92:0C:4C:4A:57:4A:4A:E4:94:CF:43:90:CC
Authority key identifier: B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19
Certificate issuer: /CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
Certificate serial: 01987450121E34F3C00B141AA23A9D76420E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 09:01:01 +0000
Manifest this update: Mon 04 Aug 2025 09:01:01 +0000
Manifest next update: Tue 05 Aug 2025 09:01:01 +0000
Files and hashes: 1: qLkt693aVmyKYJQGNdNxcAXdJ9w.roa (hash: D8tW4gMgnbvNPYFRk3OMpyQUNWmp5AcbpxituaqMb+A=)
2: tPgsjv3jS9meROrwcxtsUltFShk.crl (hash: v5ssscLswaskY7d47O7BnQViDpAhXfbdBbsYZJxbqcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:12:1e:34:f3:c0:0b:14:1a:a2:3a:9d:76:42:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
Validity
Not Before: Aug 4 09:01:01 2025 GMT
Not After : Aug 5 09:01:01 2025 GMT
Subject: CN=d1c121b1a0834f920c4c4a574a4ae494cf4390cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c0:a9:85:7e:fd:57:00:4b:3e:02:70:6b:d3:
df:61:51:af:d1:d6:56:eb:7f:a5:b4:e7:d7:fb:19:
df:7d:87:a0:c4:dd:aa:80:ce:5d:e3:f7:22:17:34:
6a:bf:f8:c5:84:a2:81:68:1f:c7:76:d3:46:9d:9a:
64:9e:02:18:1c:5c:a8:01:c9:3a:51:fc:d6:37:7a:
6c:ee:bb:80:07:0f:25:9a:b5:a2:b4:fb:bb:71:d2:
26:49:0d:54:d9:66:44:41:c1:25:fa:c2:67:88:be:
ff:11:69:e0:b9:9b:0e:d1:29:ff:6d:fc:80:35:82:
8e:73:1a:d2:70:67:17:12:47:99:0a:9e:3f:72:98:
8a:88:62:ee:5a:b5:76:75:c7:b7:3b:cc:77:7c:be:
14:aa:98:d3:71:4f:05:31:80:1e:89:7b:49:c3:f9:
ef:25:14:87:b2:ed:8b:58:38:a4:3d:76:f8:9f:e3:
1f:ad:40:9a:c6:d4:ce:5a:3b:18:c8:65:71:9b:17:
01:89:40:f0:f6:82:61:97:5d:da:77:07:12:78:f7:
0f:d9:62:ae:e6:4f:7a:62:ef:5a:3d:62:24:36:51:
02:43:8a:37:8e:d7:3d:24:5a:ae:b4:28:08:c0:e1:
f5:b4:e8:49:50:de:ea:9a:20:5c:1a:78:e5:00:8b:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C1:21:B1:A0:83:4F:92:0C:4C:4A:57:4A:4A:E4:94:CF:43:90:CC
X509v3 Authority Key Identifier:
keyid:B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:bc:63:b6:42:15:7e:22:9a:b2:9f:89:37:da:3a:f9:80:cf:
4a:07:4d:5a:09:eb:77:fe:1e:42:3c:be:d6:56:ca:d0:92:de:
f4:b8:21:e0:bb:18:1f:ce:ed:b6:ba:1a:83:28:81:ce:ae:63:
22:e6:5b:22:b6:7c:c9:4a:38:06:db:41:e5:37:f8:8d:1a:6a:
56:99:cd:ac:30:f9:a8:48:de:8b:09:4b:f2:d3:5d:df:ae:05:
74:ae:91:be:9f:64:d5:7f:5e:c7:8c:be:7c:f4:15:13:02:e8:
15:38:c0:1b:09:68:45:67:06:03:dc:62:1a:08:78:53:38:25:
bd:b6:c3:5e:95:c5:74:7d:5c:04:37:3d:8a:d9:37:a5:6a:4d:
a8:c9:28:35:4c:a7:7a:a1:37:54:44:54:ab:5b:d4:7c:f5:2f:
51:f1:f5:12:5e:49:2c:d2:09:61:11:3d:82:5a:90:66:a4:6d:
da:97:9b:1b:7b:e3:73:73:28:1c:98:01:e0:40:27:e8:c8:8d:
7e:8c:12:17:02:53:d2:c6:c4:1b:25:77:d1:8f:66:6f:cc:8e:
36:87:5e:14:c1:4f:2c:de:77:f9:a9:04:83:ad:74:09:3c:26:
dd:00:01:74:d3:9c:e6:ad:49:ca:a7:ee:67:93:60:9b:49:53:
b3:24:bf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:14:48 2025 by rpki-client