Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
File: tE-FORdNAL-ov95JBD9IXDpYdSU.mft (raw, json)
Hash identifier: or7nvE0FkLTAl+r9TqnpkFla+Cu4dbWLUul1lRO3TyA=
Subject key identifier: A8:1F:56:CB:71:BE:5F:22:04:CF:74:38:7D:B3:8F:9B:02:6A:59:17
Authority key identifier: B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25
Certificate issuer: /CN=b44f8539174d00bfa8bfde49043f485c3a587525
Certificate serial: 01987D8B56F6A2301073375D3CD3E3A62C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
Manifest number: 161A
Signing time: Wed 06 Aug 2025 04:02:20 +0000
Manifest this update: Wed 06 Aug 2025 04:02:20 +0000
Manifest next update: Thu 07 Aug 2025 04:02:20 +0000
Files and hashes: 1: tE-FORdNAL-ov95JBD9IXDpYdSU.crl (hash: kpHSvo3ZTnsgVJphnnWfry+esngG//lg583uiktYbDk=)
2: xUV-1OBQ9tZ_Xv0-wwfyT7s6w0s.roa (hash: kyqwYkE6bzY0EYwjT0bnHVarYHy1IZctjgwIpdkE7zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:56:f6:a2:30:10:73:37:5d:3c:d3:e3:a6:2c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b44f8539174d00bfa8bfde49043f485c3a587525
Validity
Not Before: Aug 6 04:02:20 2025 GMT
Not After : Aug 7 04:02:20 2025 GMT
Subject: CN=a81f56cb71be5f2204cf74387db38f9b026a5917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f2:01:67:da:73:98:52:cd:da:1a:e5:bb:09:
7b:14:b4:41:86:b7:47:d5:45:2e:df:50:78:b5:d8:
3d:a5:3e:ec:ce:82:4a:93:e2:4a:f6:ed:55:9e:01:
0d:d4:50:fa:52:6a:73:94:8b:88:84:5b:ef:a9:b2:
f2:65:52:88:49:79:4b:93:71:8d:89:d8:c6:a8:52:
63:eb:af:ad:93:91:98:4a:65:98:ff:b2:6a:3d:bc:
f3:03:f7:6d:7d:16:e8:08:f1:63:9f:c1:aa:11:95:
d2:5f:4d:eb:45:66:1c:dd:dd:95:82:da:84:de:8c:
bf:a0:d9:c2:80:b1:ff:9f:96:2a:ac:1d:98:4e:51:
0f:eb:36:90:b7:fe:87:a9:a4:14:10:80:ea:ba:5d:
2c:2b:c4:48:db:f0:7f:e5:0e:0b:ab:d0:ca:d7:94:
0b:8c:68:20:ce:78:0f:69:9e:4d:48:77:9b:61:d8:
ea:7e:3e:6e:33:f6:75:59:cc:69:4e:58:bf:b1:74:
64:66:1e:a8:19:4e:1d:d8:17:df:35:7b:84:41:80:
b9:a9:b6:e9:7b:49:af:4c:a3:f7:d9:ca:26:8f:5f:
30:9d:30:25:7a:11:c4:ed:f8:e1:be:21:52:98:70:
7a:ef:5f:f3:c4:de:20:b7:e8:a8:cd:a1:ac:c1:e9:
16:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1F:56:CB:71:BE:5F:22:04:CF:74:38:7D:B3:8F:9B:02:6A:59:17
X509v3 Authority Key Identifier:
keyid:B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:97:f3:f3:fc:97:f9:df:19:25:ad:05:d5:6a:b5:7d:e7:16:
5b:a0:6e:b6:65:95:1a:ea:02:33:27:02:b4:50:e1:6e:fe:7c:
bb:52:88:d9:e7:54:de:60:d7:cd:12:63:f2:02:79:58:9b:05:
39:6e:02:a2:a6:6f:93:55:78:3e:d2:94:72:17:14:89:1d:9a:
35:aa:cc:f9:9f:99:77:a3:7b:75:35:8c:e2:36:e5:1a:12:19:
4e:90:fa:b3:87:a0:93:fc:f8:c3:5a:e9:45:18:34:37:85:7f:
97:83:13:82:f1:7b:e2:ef:a3:41:3f:c5:70:da:3f:b9:bb:88:
1f:39:fa:fb:e9:8d:5d:d3:c7:8d:2d:79:4b:ff:1a:46:5a:8b:
82:d2:90:eb:65:f5:7a:8b:02:a6:44:b3:01:52:2c:bc:35:6b:
35:3e:d5:55:af:81:21:60:09:cd:ea:80:8a:58:74:10:ac:00:
2a:90:63:b0:2f:ee:e5:ac:e1:94:6e:fb:7c:a6:b9:ed:3b:94:
9c:2c:71:97:ab:13:2a:28:73:30:27:4e:4b:33:10:19:f1:d1:
02:f3:88:91:a4:aa:f4:c5:f6:13:a1:91:e6:a2:fb:66:0e:fe:
17:e8:2e:c9:24:66:d5:73:2b:3b:e3:d7:6f:e8:61:25:ce:7f:
06:e5:ec:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:08:19 2025 by rpki-client