Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
File: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft (raw, json)
Hash identifier: qiXMASWD19Z9Rh7VkPBVhrUzS0hG3c5fIILp1GEMCf4=
Subject key identifier: 8B:1D:64:50:2D:31:9B:6A:7A:16:DE:6F:A9:BB:F6:92:A5:7F:59:15
Authority key identifier: 4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
Certificate issuer: /CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Certificate serial: 0198745021F1766580806A15B59450A8C920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 09:01:05 +0000
Manifest this update: Mon 04 Aug 2025 09:01:05 +0000
Manifest next update: Tue 05 Aug 2025 09:01:05 +0000
Files and hashes: 1: 88NNjHCiX9_36_Ap90bLZBoJu2g.roa (hash: ZT80OMK3BXF8ZC1FoGfNRJbcIwwVIXvLAOficLJgVoc=)
2: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl (hash: G4Py0T74eq+cN/KGYeRTBqguLDcDXuKrwRzPENXmdnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:21:f1:76:65:80:80:6a:15:b5:94:50:a8:c9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Validity
Not Before: Aug 4 09:01:05 2025 GMT
Not After : Aug 5 09:01:05 2025 GMT
Subject: CN=8b1d64502d319b6a7a16de6fa9bbf692a57f5915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:63:5c:65:29:c8:2b:06:cb:90:20:ff:65:d6:
63:77:26:90:f0:1d:d0:6b:5e:f0:bc:6d:9c:02:40:
66:0c:14:55:3a:04:14:3f:e3:11:a0:0e:bb:48:9c:
1a:55:c6:22:37:b1:c6:b7:2a:41:42:4f:59:55:09:
34:05:23:6b:41:39:2d:0a:c9:0f:14:0d:3e:f3:df:
f8:55:d2:46:e2:ea:8f:2f:c7:37:68:7d:49:91:b9:
25:32:8b:78:01:76:9d:e4:ea:40:12:e8:e8:91:f6:
8b:83:fb:08:66:70:c0:14:21:86:8c:18:a8:a8:ae:
fa:fc:21:e7:22:41:83:15:e2:77:80:c0:b0:41:63:
e6:b8:cc:12:f7:a0:e3:fd:fd:eb:02:19:a1:ef:f2:
59:4e:af:a3:65:4f:cd:59:00:16:d5:b2:9c:c3:0d:
00:8c:58:d8:9f:26:f7:8b:5c:81:db:17:03:b4:10:
d6:2f:7a:32:39:d1:22:0c:2b:b2:a1:1e:1b:a7:05:
01:b7:04:d0:01:85:b3:ae:b0:7b:73:81:40:87:af:
53:9c:5a:d4:7d:0f:30:bc:cf:70:87:95:21:ca:32:
b9:80:ee:c9:26:59:7d:23:73:63:d8:9d:6e:44:f1:
3f:0c:be:75:2d:b1:f7:67:b6:7a:f9:53:ab:25:b4:
d8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1D:64:50:2D:31:9B:6A:7A:16:DE:6F:A9:BB:F6:92:A5:7F:59:15
X509v3 Authority Key Identifier:
keyid:4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a2:c3:91:c2:8b:74:b6:51:00:f7:4f:d5:b7:54:42:f5:87:
45:d4:f7:28:2f:82:0d:55:b4:6a:32:3f:6e:c6:ac:ea:1b:6c:
39:d7:f1:0d:e5:98:20:2a:75:90:c4:56:5d:19:2a:57:21:fe:
a6:ba:00:17:bf:62:83:ed:38:32:34:fd:4f:f0:b9:75:c9:c6:
8b:10:a9:97:38:a3:42:66:a6:b3:48:6a:dc:93:6c:a5:79:65:
00:7b:4c:0d:1f:63:c6:f5:c9:dc:c2:59:c2:9f:2d:58:ce:04:
69:bb:88:f3:c9:f6:e0:31:8c:2a:d5:7b:b5:cb:96:f2:80:84:
51:a3:20:36:0e:d0:6a:a8:1f:08:08:44:73:d2:c7:37:7e:8a:
4d:8b:40:10:93:4b:e3:34:f0:85:37:06:63:8a:fe:49:f7:f4:
3a:cc:f6:38:fa:33:9d:d7:a4:aa:df:c4:7d:b6:34:1d:68:c1:
1c:9f:bb:01:cb:76:49:b3:bd:3b:d2:a3:c6:dd:7d:f5:08:58:
d4:47:8c:d3:50:ac:4a:74:5b:63:8d:0d:ee:95:90:3f:4a:c2:
77:f2:f0:72:73:48:64:be:c3:03:fb:31:8d:e0:12:79:10:2f:
88:a6:32:7c:5d:34:06:a5:42:39:09:a6:d9:0e:cd:0f:77:85:
eb:ef:ca:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:30 2025 by rpki-client