Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
File: t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft (raw, json)
Hash identifier: 06715CeqJEkFf/5uA6ylcWz1o2o/rJFsA8YmLrs1ACY=
Subject key identifier: 36:64:A2:3B:D8:35:B2:EC:46:1D:59:9F:D8:3D:D6:BE:88:65:BA:7D
Authority key identifier: B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94
Certificate issuer: /CN=b795aaf033004c92d7a26c236c14d32552d78d94
Certificate serial: 0198D54DED2D49CA52A9DB48E268B77B00C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
Manifest number: 1015
Signing time: Sat 23 Aug 2025 05:01:50 +0000
Manifest this update: Sat 23 Aug 2025 05:01:50 +0000
Manifest next update: Sun 24 Aug 2025 05:01:50 +0000
Files and hashes: 1: oAZxYtQ4Og3cgsl-3lYamhsa7e4.roa (hash: 3ae/XOyTNvdp+V+oKgkV4BxFv5zwWxKjx15ZyehKjvA=)
2: t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl (hash: Y+Vc4ZZ6WZHEgxmGZTqwHpQYGdF4rffSnJg4f3+add4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ed:2d:49:ca:52:a9:db:48:e2:68:b7:7b:00:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b795aaf033004c92d7a26c236c14d32552d78d94
Validity
Not Before: Aug 23 05:01:50 2025 GMT
Not After : Aug 24 05:01:50 2025 GMT
Subject: CN=3664a23bd835b2ec461d599fd83dd6be8865ba7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:91:5f:20:75:80:83:b6:30:0f:cf:d1:53:
02:2d:a4:87:74:55:37:42:87:be:30:10:c2:c8:6c:
66:e9:78:7e:d5:fd:ce:aa:3e:42:08:37:f4:c5:54:
5f:a6:8e:ba:04:5a:1b:01:09:af:3b:c9:8e:b7:de:
e2:ce:36:95:53:10:19:f5:89:c6:0b:4f:c3:86:75:
f2:63:c3:39:7e:e6:af:66:67:b6:b2:86:2f:6a:8e:
2e:8c:6e:d1:a9:bd:5a:b1:92:94:ef:a3:8a:92:94:
d6:c6:79:1e:f4:fe:34:8b:3b:3f:39:c4:d5:7f:e7:
1a:50:78:8d:af:0f:e6:38:69:ce:e3:88:f5:6b:0d:
71:b8:0d:c5:e4:ef:d8:c1:72:fc:91:ed:2c:b6:15:
f8:f5:72:9d:3e:2c:21:b5:bc:c7:44:c5:ff:08:0e:
f9:fe:19:26:1c:14:8f:47:89:b6:ff:1d:a0:dc:dc:
0d:1b:7f:cd:78:fb:4d:ee:2c:23:13:93:6d:b6:9c:
85:32:26:c7:38:8e:59:47:30:4a:6a:1f:60:4c:e5:
9a:9a:20:28:52:a7:9e:38:8f:24:52:e6:64:30:a0:
b8:fe:d7:5e:f9:95:7f:36:f0:4d:a4:bf:94:5c:ed:
f3:bd:4f:0b:35:e9:4d:58:e6:cf:11:2a:42:eb:89:
e2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:64:A2:3B:D8:35:B2:EC:46:1D:59:9F:D8:3D:D6:BE:88:65:BA:7D
X509v3 Authority Key Identifier:
keyid:B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a8:07:d4:fa:d7:96:5b:ef:ac:b6:1b:eb:95:8c:f7:09:25:
73:bc:f6:ce:d4:61:3d:b4:b1:17:70:ce:43:76:5b:db:72:2e:
c1:88:a2:84:56:d1:e1:25:34:15:d1:bf:7b:c9:c0:11:d9:3c:
ed:5b:1e:ac:eb:e6:f3:8f:7d:f9:cd:fd:bf:78:55:86:79:c9:
f5:b3:21:32:d5:8e:4d:49:75:90:43:60:0d:8b:34:b5:32:92:
20:01:2e:7d:8b:b5:8a:a7:f8:03:3d:09:04:52:72:eb:72:3b:
d7:20:3a:8d:ff:45:9d:dc:49:25:d8:08:70:9a:8a:c7:f1:ee:
8a:41:c9:f0:e5:2d:f7:66:a2:74:8f:70:0d:23:38:76:1c:43:
6c:fd:67:47:63:d5:89:87:24:8a:51:46:ba:ea:fa:cc:3c:10:
5e:5b:c5:64:b7:84:7e:8e:71:0e:55:4c:3b:5e:04:04:a1:b5:
f8:1c:0d:11:52:b9:92:2f:b8:57:9b:43:74:b3:e2:54:d0:22:
57:fe:d5:b0:60:3e:85:31:70:b8:ac:87:45:f9:cf:3c:66:97:
ad:e7:78:b8:40:d6:e9:9c:45:b2:f4:8a:53:27:90:e6:74:1e:
12:a4:7b:39:13:ec:93:0d:fb:4b:f7:02:2d:b5:60:cf:38:e7:
47:a8:14:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:30 2025 by rpki-client