Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
File: tVNDqiHHSjn81Rg_T99V3EZ56D0.mft (raw, json)
Hash identifier: woxz4q19UEU9z5qmHDJprQGhGq+ksGB6YLPNyxObrKU=
Subject key identifier: E5:63:6C:F3:2C:8C:D3:49:3C:D2:33:B3:7B:A3:16:03:16:80:8F:7A
Authority key identifier: B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D
Certificate issuer: /CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d
Certificate serial: 01987450AA3681EB25F464B6E4FA6F098936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
Manifest number: 014F
Signing time: Mon 04 Aug 2025 09:01:40 +0000
Manifest this update: Mon 04 Aug 2025 09:01:40 +0000
Manifest next update: Tue 05 Aug 2025 09:01:40 +0000
Files and hashes: 1: RXmLcd13ajoTVlcEirVukYVayjY.roa (hash: VMYnLhwMDYwO9ah7mzCKDLgq1vs8pRSHkOzi/+9nkdg=)
2: tVNDqiHHSjn81Rg_T99V3EZ56D0.crl (hash: fMuK9fbHEUJ/yU1OC4tZmuDr2SCZak6dDQ3srNiF8Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:aa:36:81:eb:25:f4:64:b6:e4:fa:6f:09:89:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d
Validity
Not Before: Aug 4 09:01:40 2025 GMT
Not After : Aug 5 09:01:40 2025 GMT
Subject: CN=e5636cf32c8cd3493cd233b37ba3160316808f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:fd:03:75:36:c1:a9:8c:c3:c3:6e:d1:d1:
63:33:ea:67:c1:bf:3e:05:b7:85:7c:8d:0a:c1:6d:
22:34:73:a8:f3:00:19:4d:77:fb:e1:82:0d:09:f7:
4c:18:bb:46:fa:15:15:8f:a8:c7:57:23:4d:92:e7:
d0:a8:f8:ed:b3:b6:8b:1d:2b:6c:41:24:fa:1b:bb:
fd:d5:b9:82:b0:26:7f:0b:ff:b2:7b:95:bd:17:e4:
d3:57:b6:e2:4b:b0:5f:82:dc:74:de:32:5d:28:18:
46:4d:ff:e3:dc:8c:69:47:04:35:63:8c:15:54:5b:
d6:51:93:33:d2:09:8a:82:df:9d:32:67:2c:fe:39:
e2:e2:6f:76:0b:70:c1:0c:56:98:ad:9e:b0:38:a8:
f4:40:8f:19:21:7d:b2:cb:ae:6d:24:6f:f8:e7:1d:
03:04:f4:42:9d:1b:3e:fd:c0:c4:66:0a:61:c3:73:
a7:d9:f6:ad:67:06:62:09:f1:94:0b:85:99:6a:69:
6b:4d:db:4c:2a:7b:74:bb:7a:53:11:a5:9d:ea:7d:
ce:d5:3f:c5:e9:88:02:7f:00:15:38:48:9d:b1:c3:
30:e2:1c:cf:bd:15:e9:aa:9c:6a:35:05:ba:b2:43:
18:75:09:21:10:cf:fc:6e:ca:09:db:07:8c:e9:89:
74:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:63:6C:F3:2C:8C:D3:49:3C:D2:33:B3:7B:A3:16:03:16:80:8F:7A
X509v3 Authority Key Identifier:
keyid:B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:16:7a:db:a5:38:6d:ec:e5:3b:eb:29:10:ed:21:93:0c:30:
1e:d9:49:20:3d:54:d2:57:24:77:91:c7:0a:3e:de:89:d9:c7:
ef:fa:30:3f:7f:3b:ff:ee:d1:c7:df:fd:4a:62:28:0c:a7:3a:
4e:f3:3f:2e:0f:24:20:4d:79:2f:e4:e9:bf:83:7b:02:7f:03:
9c:68:fa:33:b3:22:20:18:cf:f7:77:12:c8:d4:01:69:80:88:
3c:d1:b0:1f:7e:ac:c0:67:d7:18:7c:fb:46:a8:c1:cb:6a:20:
a6:4e:6f:a6:76:3b:05:ae:18:27:97:2f:22:32:26:00:4a:23:
06:8c:f6:bc:a3:63:66:af:42:36:a4:ec:46:ec:4d:87:d0:80:
8c:d2:9b:55:79:39:c5:b8:a3:49:46:99:a3:77:f5:0d:da:2a:
9b:19:0e:fc:08:88:b8:4b:66:96:f5:6e:63:40:09:c2:ef:19:
85:18:b5:6e:bd:a3:db:5b:e2:8c:60:ec:36:e2:d4:fc:43:cc:
37:1f:46:9f:a3:9e:16:7f:c0:4b:09:27:17:4a:24:b7:6d:eb:
ad:e5:01:90:c8:a4:a2:2a:da:db:07:e3:ef:dc:e8:60:e8:6a:
fa:cd:8b:63:ea:07:04:fa:01:47:aa:91:58:7c:be:8e:9d:da:
2c:0c:0c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:29 2025 by rpki-client