Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
File: tTVrOmd4voxhFK2H2q_NB8pV2AA.mft (raw, json)
Hash identifier: u7+qI2+7BDEImEOkYCFhmlu3F9mogL40pf1R/oUQCX4=
Subject key identifier: EC:C4:CF:35:41:76:C5:EB:A1:95:F7:02:B3:A6:08:40:02:B8:2D:58
Authority key identifier: B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
Certificate issuer: /CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
Certificate serial: 0198733DD4939C2D5E89AB266AEE7686F1F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 04:01:28 +0000
Manifest this update: Mon 04 Aug 2025 04:01:28 +0000
Manifest next update: Tue 05 Aug 2025 04:01:28 +0000
Files and hashes: 1: NQNYc6fmHLA_NSQLy1429x1Q7Rs.roa (hash: 9fkXQ4KSWlEupj10JS2rCXdqinSmRcwnxokumXbhroc=)
2: QbjMGccKG5d5ZKbesdYHgP5_B94.roa (hash: 4D93Q+Whu8oYfv+HOP7uP002kldwgOYc75DA0DhrTb4=)
3: tTVrOmd4voxhFK2H2q_NB8pV2AA.crl (hash: QPtXHHhusB2AK9QrSVdyQzW+MhaArr9HrfZmcQZbNLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:d4:93:9c:2d:5e:89:ab:26:6a:ee:76:86:f1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
Validity
Not Before: Aug 4 04:01:28 2025 GMT
Not After : Aug 5 04:01:28 2025 GMT
Subject: CN=ecc4cf354176c5eba195f702b3a6084002b82d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b2:0f:6c:c6:41:e4:aa:dd:a0:28:c7:a2:89:
98:d8:bf:68:1b:cb:a0:01:e1:59:db:13:a6:51:29:
40:c8:81:57:ba:ec:30:33:52:f2:cf:10:03:0d:02:
3a:f6:a8:4f:fe:b6:34:68:2f:3e:6c:9f:b8:ae:13:
32:64:6c:8e:39:0a:bc:87:22:b3:0e:b9:a3:ae:c8:
21:1c:42:40:06:52:87:fc:0b:7b:c8:3f:da:15:88:
0b:e0:af:a6:49:b5:7c:24:61:e5:b0:1c:e5:fc:05:
8d:8d:69:22:de:4c:92:23:12:a2:87:0d:be:eb:cf:
56:6e:fc:5f:1e:24:31:bf:73:b3:df:7f:99:05:32:
a4:98:a3:26:04:88:9b:01:bc:10:af:77:0b:89:de:
2e:b1:ee:a7:a0:12:ee:e5:81:f3:0b:e5:51:92:aa:
b5:a2:08:6a:03:df:88:28:4c:f3:92:dc:79:19:96:
af:28:1b:e4:b3:37:0b:c0:ae:4c:5a:af:1e:40:52:
04:2d:06:10:67:69:55:8d:f6:b6:1c:7f:42:e8:fc:
ce:c3:f9:22:23:f8:03:f9:eb:3a:2b:d9:f3:1b:2a:
b9:61:13:c7:d7:b6:b1:1b:4b:41:91:a6:50:73:38:
5a:8c:46:ba:f8:4f:87:0d:1b:2d:30:f4:69:76:7d:
11:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C4:CF:35:41:76:C5:EB:A1:95:F7:02:B3:A6:08:40:02:B8:2D:58
X509v3 Authority Key Identifier:
keyid:B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4e:33:bf:a7:4b:b1:bd:7d:dc:de:7f:4d:2f:43:27:75:57:
bc:f2:06:3d:73:cc:bd:10:c4:dd:20:46:14:2b:52:2b:af:dd:
f9:85:2e:07:b8:a9:ff:01:99:1b:0e:95:03:66:7a:0f:ae:a1:
6f:34:0a:da:6e:0a:1e:a2:93:3f:14:dd:bb:5e:cb:96:e3:ab:
50:2e:b4:dd:40:07:f6:d0:42:2f:bc:81:55:ed:77:61:6b:cf:
25:05:47:7e:22:2a:b1:79:a1:cb:b3:27:ef:22:f0:c3:dc:1a:
b5:35:01:b6:d0:d1:ba:1a:ea:7d:de:7a:27:e9:79:34:6e:9f:
1c:b5:be:73:55:06:b5:2d:91:43:e6:d4:89:60:b1:82:66:73:
47:0f:d4:c5:27:1d:00:0a:65:b1:b2:86:54:3c:d9:59:61:bd:
a1:d4:ed:b5:53:22:5d:59:4f:ae:10:8b:a7:dc:91:93:de:c6:
2e:d1:02:80:4a:3b:07:e2:df:f5:02:6e:86:bf:7c:02:a9:16:
0b:a2:8e:12:2e:eb:37:ce:6a:aa:e0:05:db:b2:c7:8a:04:00:
81:98:04:75:0a:c3:3d:8d:ba:c2:f1:1a:4c:0f:e2:42:a8:e4:
af:dd:d4:67:69:9c:89:97:00:bd:da:5b:9f:88:46:c8:74:15:
71:76:31:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:30 2025 by rpki-client