Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
File: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft (raw, json)
Hash identifier: +fXWgedc9qqeJcETUIeVmfLzLMuPGE0shWrl3PpemQg=
Subject key identifier: B8:8A:A6:CA:C5:27:EC:E3:1F:47:6C:A1:81:76:3C:6A:5B:76:EB:20
Authority key identifier: 4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09
Certificate issuer: /CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
Certificate serial: 0198D4A8174B1B03CF5CC4D550F8DC4D0A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
Manifest number: 1624
Signing time: Sat 23 Aug 2025 02:00:42 +0000
Manifest this update: Sat 23 Aug 2025 02:00:42 +0000
Manifest next update: Sun 24 Aug 2025 02:00:42 +0000
Files and hashes: 1: PHU8bveJ4V86SqIQTMnWW43DqBE.roa (hash: 3OhBnf8f8HGM5ArwPPNt9UU72cQZdAdKTbSA4Z11k2Y=)
2: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl (hash: 57cs0RZXadezvPdBc9j0xJ9C8y43VYGgFmu7MN7AxhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:17:4b:1b:03:cf:5c:c4:d5:50:f8:dc:4d:0a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
Validity
Not Before: Aug 23 02:00:42 2025 GMT
Not After : Aug 24 02:00:42 2025 GMT
Subject: CN=b88aa6cac527ece31f476ca181763c6a5b76eb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:60:ba:eb:29:ad:02:88:5e:5a:7b:7d:3d:
b6:c6:4b:89:7b:a7:da:c5:57:b6:f2:84:dc:47:34:
9e:3a:e2:0e:a2:b4:3f:8a:d4:a6:da:7c:54:72:ff:
b9:1b:bc:d9:f9:f5:c8:8d:ff:44:2a:cd:d5:d4:6b:
36:bb:c9:ce:ee:82:79:b7:7b:91:17:e0:35:19:1e:
7d:de:88:a9:e4:73:8f:5d:57:0c:13:e5:1b:b3:e5:
c4:85:03:30:35:8f:c7:0e:d5:41:d1:7b:23:82:4b:
c5:06:bf:b1:b5:be:54:83:c9:65:ca:60:c8:f4:34:
2b:f5:76:0a:41:81:a8:a3:3c:68:66:4c:13:6c:87:
4c:6f:28:da:b1:9e:75:07:de:9b:c9:ab:3b:07:40:
ca:88:d3:1c:a3:f1:c9:5f:33:16:95:75:23:83:45:
3d:12:e9:f1:90:27:bd:8c:3c:d4:3d:e1:33:d6:e9:
2a:3a:4d:7a:5e:ef:29:f2:fb:0f:e4:8f:c5:be:41:
73:4d:2d:1d:f1:ec:93:db:ae:89:87:30:57:5f:08:
5e:3b:49:6e:24:b9:f2:fe:5d:55:4c:e9:c7:bb:e2:
4b:d2:99:95:d2:3f:cb:65:0d:5a:15:d4:46:0b:40:
90:57:1e:26:d5:96:11:34:c0:bf:d3:1f:94:df:dc:
da:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8A:A6:CA:C5:27:EC:E3:1F:47:6C:A1:81:76:3C:6A:5B:76:EB:20
X509v3 Authority Key Identifier:
keyid:4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1b:dd:dd:78:89:57:ea:c0:bb:71:dc:c9:23:f8:20:59:ab:
0f:b8:f1:e2:d4:66:fd:2a:20:20:f5:79:13:af:7b:fa:29:88:
81:81:01:b1:bb:7e:77:81:47:39:0a:5d:ff:71:3d:f1:7f:40:
ab:8d:8c:b2:74:cf:86:63:c2:44:0b:e0:fa:02:60:cb:ca:6a:
7c:18:4d:02:3c:8b:29:11:45:fc:15:a6:b6:fb:7a:90:84:63:
84:2c:e5:34:26:2c:d1:27:92:f4:b4:f8:a6:d2:1f:fd:37:64:
a0:1e:cf:f3:56:03:c6:ef:cc:77:67:f7:a3:86:74:8f:d8:e7:
82:a4:81:04:21:d4:1a:72:ef:b0:a2:29:be:b9:85:b2:b7:83:
3e:0a:06:18:99:48:33:a7:69:7c:0e:25:27:60:af:0d:35:a7:
83:61:f6:bb:cb:2f:b5:60:ac:ed:9c:cc:c0:63:27:a9:c0:d3:
72:0c:6d:81:75:5e:57:9a:3e:ec:1c:53:2c:11:2b:0b:af:86:
7c:d9:31:53:df:ce:f9:73:8b:64:b0:66:b4:55:ea:a4:ed:5e:
a5:24:e8:ff:2d:af:ad:85:af:d6:14:ea:b2:89:2a:87:40:3e:
b2:6b:2d:59:73:d6:18:16:10:e2:80:c2:f2:d1:93:df:e7:21:
c2:ee:74:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:41 2025 by rpki-client