Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
File: tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft (raw, json)
Hash identifier: BOzhOQ6b2VzaEApTEKeBcDB5sqI93PCX8nKqvKT8j0g=
Subject key identifier: 73:46:73:41:0A:F7:B8:F5:B2:78:DA:87:6B:BA:D0:A3:FF:D0:92:75
Authority key identifier: B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
Certificate issuer: /CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Certificate serial: 0198D66008156F656BC1F72598F40F8589A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
Manifest number: 0720
Signing time: Sat 23 Aug 2025 10:01:14 +0000
Manifest this update: Sat 23 Aug 2025 10:01:14 +0000
Manifest next update: Sun 24 Aug 2025 10:01:14 +0000
Files and hashes: 1: rgegcxxJ3TsTdq27HR0NAjR9oC8.roa (hash: c0wEsNYvh664VokeqgrZS5bI3twxSLXX7CSRIaVE4Zs=)
2: tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl (hash: GsSd2Agz5XrdfYWdHTYchhghT0pzuMksyFMptIMvwz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:08:15:6f:65:6b:c1:f7:25:98:f4:0f:85:89:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Validity
Not Before: Aug 23 10:01:14 2025 GMT
Not After : Aug 24 10:01:14 2025 GMT
Subject: CN=734673410af7b8f5b278da876bbad0a3ffd09275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:29:02:f2:ad:28:99:e7:8f:a4:8d:9d:69:86:
78:cf:4d:00:d3:ae:74:0c:cd:42:54:41:6b:3a:e2:
88:d1:35:d7:ac:30:cd:7d:82:4a:27:82:8e:54:fc:
86:0a:c6:c3:6a:7f:f2:94:ed:f1:f3:e8:f5:f4:45:
47:2c:ec:6b:82:13:70:4f:d2:7e:f3:4c:d4:4a:73:
99:ea:9e:59:38:a2:24:ee:5c:a3:df:f9:00:0d:57:
1d:1b:1c:27:b5:17:d1:ca:b4:3a:82:66:90:59:c4:
24:07:e5:56:83:50:a2:8d:d9:cb:96:a3:38:4c:4f:
1a:85:26:ba:60:0d:34:f7:65:39:a7:00:81:05:24:
15:9c:92:11:79:ee:40:35:6a:c0:6d:30:6f:62:3b:
f5:d2:14:c8:ea:20:c0:d0:ec:2f:d2:a8:60:fb:0f:
19:88:86:8b:7f:6c:45:c1:69:bf:3e:01:af:8e:36:
98:53:c2:44:05:20:d0:56:c1:31:1b:2f:22:1c:4d:
44:cb:bb:5c:85:03:d6:4f:09:4d:b0:3a:76:26:56:
d2:dc:87:10:8d:a2:2a:69:3a:74:94:44:1a:24:c5:
8c:35:05:62:8c:ef:8e:e9:6a:3a:c7:49:50:44:7c:
a4:40:fe:3b:cf:a3:62:c6:6e:65:a9:ad:87:31:a3:
f5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:46:73:41:0A:F7:B8:F5:B2:78:DA:87:6B:BA:D0:A3:FF:D0:92:75
X509v3 Authority Key Identifier:
keyid:B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:34:20:e5:d6:3d:49:f2:aa:96:c3:17:87:e1:b9:32:05:3f:
8e:48:9b:39:48:05:cb:6f:43:a8:57:5d:9d:17:ef:21:ab:c6:
38:78:7e:f7:f7:ce:17:5d:08:d0:f6:00:02:2f:3f:50:5c:1c:
63:9b:43:3c:8b:d6:42:c5:fe:26:00:99:bf:b0:28:65:87:9d:
b8:8f:ff:66:ad:1c:31:75:f6:bb:5e:80:d4:51:ee:d8:5e:55:
7e:dd:c4:3a:f5:db:c7:03:08:14:26:f0:5b:02:b4:4a:73:1a:
a8:e2:50:03:c8:25:ae:a4:f6:bd:55:57:e9:ca:d7:ba:ff:d3:
53:f4:b7:38:c4:22:fd:56:2b:e4:59:86:f8:56:65:ed:61:da:
67:5b:ce:3a:58:fc:49:9c:86:2c:de:b0:e9:21:27:af:d4:4b:
47:46:ee:4b:57:50:b5:a1:ca:66:5f:f5:46:fc:db:fc:1e:59:
7b:77:8e:4f:ef:0f:30:71:06:cb:95:cb:e6:76:21:ba:eb:5b:
bd:37:0f:a8:17:18:fe:92:4d:ad:f9:fc:3a:9e:09:30:25:ff:
4e:dc:78:d4:97:74:7c:44:a4:b5:32:5e:38:3c:48:7b:01:ea:
0f:d8:76:fb:cd:e8:f9:7d:8c:01:ec:3b:2a:6a:e4:7a:95:c1:
ef:f5:8f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:48 2025 by rpki-client