Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
File: taJj0Y61xUD3R4glu3LvrG8o-Cs.mft (raw, json)
Hash identifier: qC3yeqw7HO7BtuTH7Uuv2SXIS/q61FhSd4h+S9gbNQI=
Subject key identifier: 74:7C:8D:01:21:28:A4:30:80:A5:89:F6:4F:09:0C:EF:94:2E:36:69
Authority key identifier: B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B
Certificate issuer: /CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
Certificate serial: 01987486E7B359EE2DF3671EE30A63ECABA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
Manifest number: 15A8
Signing time: Mon 04 Aug 2025 10:00:54 +0000
Manifest this update: Mon 04 Aug 2025 10:00:54 +0000
Manifest next update: Tue 05 Aug 2025 10:00:54 +0000
Files and hashes: 1: FxOU5mcs5zu6It7tyYPtggiNpMw.roa (hash: HYzosP3W6gjE2lC2/EeCUTPjqHpatsBGbz79rZD00GQ=)
2: taJj0Y61xUD3R4glu3LvrG8o-Cs.crl (hash: O2tWEUbhq0uMdjLxFBa9XANdk1l0v6Pn8AFIrjVQzFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:e7:b3:59:ee:2d:f3:67:1e:e3:0a:63:ec:ab:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
Validity
Not Before: Aug 4 10:00:54 2025 GMT
Not After : Aug 5 10:00:54 2025 GMT
Subject: CN=747c8d012128a43080a589f64f090cef942e3669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ea:b2:74:c7:69:89:df:2b:cf:45:ed:0f:80:
f3:33:de:d5:08:34:ed:d3:23:5e:ba:f0:29:0f:05:
ab:b6:94:51:5c:38:46:21:15:13:44:a0:14:28:97:
05:94:90:f3:3d:d6:af:03:4d:4b:9f:69:a1:ba:8f:
77:fc:fa:d6:5d:c9:46:45:79:c9:7c:66:86:b8:d5:
74:45:dd:89:8b:b3:2c:c8:a4:03:8d:96:92:21:37:
87:d4:f4:d8:2a:5e:62:9f:08:9a:cf:95:c0:25:a4:
fb:2f:ce:7a:5d:12:3b:e4:a6:22:4b:82:69:dc:db:
f1:37:e6:ef:3e:a2:0f:0f:e9:99:e4:99:a8:79:7a:
a4:fd:48:01:e2:68:78:7d:7b:5b:52:b4:e9:92:9e:
10:8f:11:c5:b5:88:be:4d:6a:1b:ab:2b:38:3a:88:
b8:7f:85:1c:a9:55:eb:72:0c:c6:ab:e1:a0:b3:5e:
c4:d0:8a:31:b7:33:de:20:d2:04:19:51:8b:87:92:
81:69:2a:ed:00:f6:e5:65:3d:30:8f:2c:b5:ff:f1:
c7:e3:be:51:17:01:8f:7f:e8:af:d2:09:08:d2:42:
68:1e:38:1e:dd:bd:70:5f:51:10:25:8e:2f:9f:a0:
34:10:2f:58:65:45:b4:ff:ea:f8:ec:42:4c:48:c6:
7c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7C:8D:01:21:28:A4:30:80:A5:89:F6:4F:09:0C:EF:94:2E:36:69
X509v3 Authority Key Identifier:
keyid:B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:c4:88:56:af:9c:fa:2d:d7:8d:01:da:18:4b:17:03:67:be:
94:b6:23:1e:35:ad:af:cc:68:e5:8c:d5:e1:01:a4:bf:db:8e:
39:68:76:0c:d6:21:01:92:17:12:2d:8d:a9:e6:84:2c:7e:5b:
8a:5c:64:cb:82:61:6c:99:59:af:88:01:9d:ce:77:e6:8e:b7:
17:90:c8:08:51:bb:47:14:bb:c7:18:20:bf:1d:4e:7d:cd:65:
e8:35:aa:69:ed:43:6c:cc:9c:1a:ba:1d:d0:f5:9d:e9:5d:61:
1f:5a:82:a7:91:91:8c:2f:da:99:88:68:46:55:5a:65:5b:f0:
cf:5f:07:f2:86:1a:85:9b:1f:5a:b8:5c:e9:27:c9:ec:c1:f1:
f6:75:d5:5a:a6:c3:34:e5:18:44:4c:4f:89:af:82:5a:2b:a4:
38:5b:e1:ff:29:3d:b9:b5:18:06:4a:f9:73:57:20:18:ce:ae:
c2:df:d2:11:23:a3:e5:e1:22:ba:6d:e7:44:81:3b:b0:4b:7e:
10:07:40:c1:3b:b8:b1:0c:ec:2d:76:45:50:24:26:4a:5e:46:
c8:82:99:bd:a1:f1:93:ce:f2:d4:dd:e9:6d:9c:f3:e5:fa:4d:
05:e6:0c:fe:8c:68:76:9c:ec:a1:bb:81:03:c6:53:6a:ba:16:
bd:1f:24:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:12:22 2025 by rpki-client