Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
File: TIEnPcsDw0V7eSUL4Qnhml508P0.mft (raw, json)
Hash identifier: NhwdMJO9TNf/aOxrLwcKhEqxfhSvF4s7sfrYvFpDhTg=
Subject key identifier: 3D:E6:68:A9:BE:8F:0A:56:D8:21:21:59:E8:61:11:83:22:69:67:90
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Certificate issuer: /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial: 0198D4E0BC75B21DAFEA003B501FBA3685ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
Manifest number: 0843
Signing time: Sat 23 Aug 2025 03:02:34 +0000
Manifest this update: Sat 23 Aug 2025 03:02:34 +0000
Manifest next update: Sun 24 Aug 2025 03:02:34 +0000
Files and hashes: 1: 09h3HegSzHCmBBBWGcTWBjEqm-k.roa (hash: e2MlTegDWzHw8Qc0vpcn4p75pDoA+fAb45rhwd6sZ2c=)
2: 2H-bW8UZI3iJgi7-SD7ICzn-6yE.roa (hash: 6BFAD/kuUp8ggYQ5Z6VEt8Ffgu906xvZpM65LYf/A40=)
3: Nrmj7OZr3VRqV-mPGEt59p2belk.roa (hash: qKP+VMvb5X+LyJaWae51YmN4HE54Q3kw6hy8LaIxSiU=)
4: TIEnPcsDw0V7eSUL4Qnhml508P0.crl (hash: pwng/wJebszN0F1OspDUp5+7geDwrD7WkA+zfGqeAFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:bc:75:b2:1d:af:ea:00:3b:50:1f:ba:36:85:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Validity
Not Before: Aug 23 03:02:34 2025 GMT
Not After : Aug 24 03:02:34 2025 GMT
Subject: CN=3de668a9be8f0a56d8212159e861118322696790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bd:70:53:1e:89:d8:75:8e:e3:d0:f9:8b:e5:
70:87:f2:c4:6e:79:56:56:df:ee:b2:dd:08:4a:bf:
28:9e:ba:20:a3:97:1a:05:2f:b0:0d:a8:73:48:72:
32:aa:f9:0a:b4:2e:87:b7:d7:e4:c1:d4:c6:b3:36:
c7:2d:05:62:a1:38:49:ba:f3:25:4e:ec:86:67:d9:
aa:db:dd:ca:09:84:36:0a:ed:bf:c2:89:fd:31:02:
0d:a0:30:b7:fd:a4:80:b5:a2:ea:92:50:1c:d8:a6:
55:e3:49:9a:b2:84:69:72:43:26:3d:45:8c:7d:f3:
25:77:ca:c9:cf:86:a3:57:f4:6d:4a:87:a9:a2:ca:
f3:b7:b7:0d:55:27:69:d6:d8:d8:09:3c:0e:88:c8:
db:46:b6:60:99:3c:d1:78:fc:1c:b0:d3:d8:37:f3:
d6:30:46:57:75:40:cd:b2:16:72:de:23:2f:26:6f:
c6:dc:f7:fa:a5:86:1d:83:4f:82:ee:32:13:30:2d:
96:e2:05:80:01:89:d8:46:19:3f:01:7e:0e:57:66:
44:2e:b2:a5:bb:72:9a:ef:2a:70:4d:62:70:b7:ee:
cd:c0:09:62:3e:29:21:74:79:ce:ff:b3:51:9c:c6:
0c:a6:48:84:84:df:50:0d:1a:6c:5a:5d:a3:87:4f:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E6:68:A9:BE:8F:0A:56:D8:21:21:59:E8:61:11:83:22:69:67:90
X509v3 Authority Key Identifier:
keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:33:8e:7b:94:53:48:fc:ee:fc:03:e1:a8:8d:c5:62:57:5e:
83:68:16:78:e1:92:d3:ea:d7:d2:d6:82:88:a5:4d:9a:1e:8a:
28:32:b0:c2:1a:3e:0a:0b:ae:21:62:d3:fe:b5:a4:2d:f5:e4:
cb:80:75:f9:46:3f:eb:2f:9e:89:17:8d:74:5b:0d:1d:a4:1f:
0b:77:f3:b0:7a:a2:f0:8c:9a:8b:c6:51:d6:97:c9:f9:76:a4:
95:35:14:20:82:bd:76:1c:35:c0:07:99:83:74:ae:73:12:8a:
8b:6a:f8:1d:78:91:ed:f4:4c:47:ec:69:a6:21:93:f1:07:8e:
da:3b:fd:a0:94:e3:dc:e2:a2:34:24:05:ba:8c:66:e1:a8:2c:
fe:39:2a:9a:4e:73:a1:47:b3:92:79:1d:0c:39:8c:42:95:1c:
11:2c:b2:42:45:ca:b3:01:73:01:54:68:22:c3:23:b3:46:7b:
23:42:20:3d:07:4c:e8:95:4e:51:c4:eb:01:fb:4b:01:16:22:
92:91:47:03:92:a8:85:44:ac:fa:c8:1e:36:9a:c4:1b:b4:00:
50:81:6c:82:cb:55:4b:5d:98:ab:96:bf:8a:21:63:1b:6c:02:
16:6d:6b:f9:ab:5c:de:59:fa:21:aa:28:36:a4:1f:39:04:04:
c7:66:78:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:49 2025 by rpki-client