Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
File: tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft (raw, json)
Hash identifier: PAJ1qtZNhhykDcV3MQaeqSnPrYjuB03pBbUljXiv5jg=
Subject key identifier: 41:42:D6:80:01:E3:07:DB:39:A6:6C:97:07:1E:65:65:CB:B8:BA:EE
Authority key identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
Certificate issuer: /CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Certificate serial: 01988F5917601D7F9B2B3CF4A4E5EBCC7B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
Manifest number: 0D4C
Signing time: Sat 09 Aug 2025 15:00:37 +0000
Manifest this update: Sat 09 Aug 2025 15:00:37 +0000
Manifest next update: Sun 10 Aug 2025 15:00:37 +0000
Files and hashes: 1: 9FStBrS0NlZ9f0JDPC2m90a8BCY.roa (hash: xw+KW2Ni2Cd+C3tg5Q5Vf8DrtdT917ZQWwgX4LJaEm4=)
2: NcymNU3Ex55jeE07rsjVQP17Yc4.roa (hash: rqRVyPcE0vuZ2ea448N6H2EJDC40DdbDXkISgXkK53E=)
3: XUHwJb1I3gkKMlf7v2dTxFe6360.roa (hash: Gm/rvLP3jZuTC48xJtdoJ5/c1V7BDKST3JSzW3p7S08=)
4: tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl (hash: dAYra/TV8tmgBZ9216JYKzdce9w4D4OqrTh9NStHorQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:17:60:1d:7f:9b:2b:3c:f4:a4:e5:eb:cc:7b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Validity
Not Before: Aug 9 15:00:37 2025 GMT
Not After : Aug 10 15:00:37 2025 GMT
Subject: CN=4142d68001e307db39a66c97071e6565cbb8baee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4e:13:cb:b2:9c:78:f0:e0:18:57:ce:da:a7:
8c:ce:23:6f:15:fd:fb:83:01:02:49:3b:d7:68:bf:
4b:60:59:b5:49:b8:e6:83:9a:b7:90:95:82:2d:e7:
ac:9e:26:ce:15:2d:31:3f:11:ec:c8:65:f8:77:d8:
90:9d:c0:f8:46:a9:72:b0:b5:0b:ca:9c:50:5e:2b:
19:22:8e:1d:12:ec:61:7d:37:e3:08:2f:07:f4:fa:
c6:c3:93:71:5a:b7:47:3e:7f:ab:5b:52:2e:a5:81:
94:78:d8:6c:ed:55:64:10:43:03:86:69:d9:5b:ca:
a0:9f:17:ab:99:f9:80:6e:07:db:50:68:2e:8c:84:
d0:5b:58:d6:f7:3d:7d:b5:17:9f:b3:35:8a:5f:11:
7e:38:91:4a:a8:1f:f2:7e:3a:f4:b3:c1:1d:77:d2:
51:fe:4c:84:2d:1d:ee:5d:89:8c:83:51:26:bd:d6:
6a:2d:71:27:3e:c0:90:2a:f4:e5:9f:7e:17:44:43:
6e:b0:6e:b9:18:13:84:8b:a0:3d:e6:5c:73:44:3c:
be:4d:d7:90:21:36:56:d9:a0:a1:95:c9:8b:a2:76:
b6:5b:23:95:03:14:1b:6f:e5:e6:64:21:64:18:2e:
d0:fa:84:ca:2a:e1:59:4e:d0:d5:eb:39:6f:7c:56:
a5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:42:D6:80:01:E3:07:DB:39:A6:6C:97:07:1E:65:65:CB:B8:BA:EE
X509v3 Authority Key Identifier:
keyid:B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:02:36:21:5a:29:1e:48:3c:11:4d:35:6d:42:7a:d7:53:82:
b9:89:3f:b2:cb:34:bc:ac:e4:2d:3b:08:56:00:af:6f:f1:49:
f8:a6:46:d6:08:df:20:e6:af:ea:0b:22:c2:06:a8:b5:78:c9:
50:37:d6:18:8a:0a:84:19:27:4e:bd:de:26:f1:36:1f:02:65:
5d:0c:73:29:dd:1c:6a:f3:58:d0:f1:13:ea:89:1d:15:5f:5f:
cb:7c:3c:ff:37:39:49:69:ce:bc:0f:88:70:4e:12:54:0d:32:
70:4a:46:ec:06:8e:aa:06:17:ae:b5:7e:c3:d4:c0:e8:d8:ed:
36:cb:e8:fb:d0:06:4b:85:9e:18:e5:f3:69:96:3c:32:7a:28:
29:95:2f:87:ac:e8:3b:dd:45:e9:8e:c2:f9:14:93:cb:7e:28:
da:55:d6:dd:6f:f2:5c:e7:90:fb:f6:1f:e1:17:81:0a:62:69:
f5:af:2a:07:7f:be:81:53:6b:55:07:0c:14:64:09:aa:db:5c:
27:2b:6f:55:a3:6d:e6:0b:31:f0:80:47:35:4e:4d:d8:86:18:
d0:72:d7:2f:64:4e:af:da:07:d3:41:8c:60:aa:cc:3b:60:b2:
de:29:b7:6a:9b:08:55:7b:66:7d:0a:8b:e5:f3:bd:11:b4:67:
88:25:de:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:50:51 2025 by rpki-client