Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier: LB/gEYakVsntpatY6XojSHxgUIcNjOGa7czho+FLPqI=
Subject key identifier: A7:AE:A6:52:CA:A8:C0:63:AE:47:B4:A0:2B:4A:AB:35:18:EF:6A:DD
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 0198D54E135A04793C1C2E2E4B54AB8AC9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number: 0593
Signing time: Sat 23 Aug 2025 05:02:00 +0000
Manifest this update: Sat 23 Aug 2025 05:02:00 +0000
Manifest next update: Sun 24 Aug 2025 05:02:00 +0000
Files and hashes: 1: JboF5duYkSjIw0cFCDow2D7hhYA.roa (hash: 5ee85IvEdLLZLBu0IK/0DK9QgLyt71g8oPTMmxnM7ss=)
2: bPHOfPhRt9UxNoPYUZyx6NkEcPE.roa (hash: l5CD77LRDYrviJN2I+kUm6dy7C8YOi2kiqH568j84ZE=)
3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: /pefFY6K9bv7J8iDaoAMGuU0ohF6eHcezWZA1taT38s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:13:5a:04:79:3c:1c:2e:2e:4b:54:ab:8a:c9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: Aug 23 05:02:00 2025 GMT
Not After : Aug 24 05:02:00 2025 GMT
Subject: CN=a7aea652caa8c063ae47b4a02b4aab3518ef6add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:51:d7:33:5f:43:8b:e2:6e:f9:47:fd:e7:
43:ab:bb:b5:e5:1e:12:9e:f7:70:55:4b:23:12:df:
b7:ba:62:03:d0:fa:c0:d8:df:68:21:09:0f:99:00:
d6:6e:36:83:53:d7:69:4a:0f:8a:92:bb:26:ab:aa:
c7:9c:13:3a:4d:92:4a:1c:ce:21:51:f3:55:c0:b9:
4c:60:3a:34:10:1e:7e:c9:a9:6e:30:15:fc:a1:b9:
61:64:65:88:dd:e6:ee:3f:4b:70:f3:2d:27:62:86:
a3:44:dc:38:37:4a:78:83:ea:a3:4b:53:a8:3e:fb:
af:a5:71:98:a0:0d:4e:2b:6f:94:89:3b:3d:83:7d:
1e:d3:f6:06:82:16:4b:79:a2:6e:57:78:d3:86:c2:
08:e8:85:46:4e:71:d9:45:c9:62:f4:1c:50:c1:b3:
c3:09:d1:fc:2e:88:9d:99:12:3c:81:e2:f6:48:0d:
02:27:1c:d0:55:f1:db:dc:b8:dd:d5:dd:3f:64:b0:
01:2b:c2:83:a7:e3:0c:4a:4e:11:72:0e:89:c8:1a:
24:02:65:50:97:3a:67:bf:1e:82:b6:5f:1c:49:f0:
08:12:eb:e8:ca:b1:d5:d4:e4:85:80:c1:4b:46:a0:
a4:b2:5a:a5:83:86:6e:f6:d5:b2:a1:55:ed:bb:c5:
2b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AE:A6:52:CA:A8:C0:63:AE:47:B4:A0:2B:4A:AB:35:18:EF:6A:DD
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:42:ff:f7:a4:81:91:d6:22:2e:1a:37:63:a1:58:04:dd:a7:
b3:c1:af:27:b3:f0:72:97:f0:12:fd:f8:7b:7e:e5:e8:e1:02:
59:bc:37:c5:c9:35:b3:e6:c6:31:ff:62:53:ac:57:d2:6f:7e:
a1:9f:93:96:2c:83:44:ad:56:88:a8:7c:0b:3d:f9:30:8a:a0:
d3:95:b0:b0:6f:d8:c0:f6:22:5d:7e:f9:9f:16:51:e6:39:2d:
76:a9:af:b5:51:d2:79:53:37:c2:e8:76:e0:ef:4b:4f:58:70:
55:89:7b:85:24:83:c7:2c:cb:0b:95:1b:e8:7b:94:b1:e2:e3:
44:cf:19:bc:e9:e0:0d:18:96:f4:6f:3e:9a:eb:a7:6d:5f:81:
16:3f:97:cd:9c:90:95:7e:01:9a:78:9c:8b:62:75:58:35:ca:
79:ab:ab:c5:1c:94:3f:b5:13:b4:88:10:eb:93:b0:1f:ab:d7:
3e:46:e7:c0:7a:ec:19:bf:e6:08:9d:d9:40:f0:77:57:af:a8:
95:6b:05:d1:41:ec:87:8f:80:54:02:7c:54:ed:07:0b:25:25:
a0:f0:41:24:fd:90:e8:1c:63:86:88:6c:6f:61:e8:32:e7:0d:
26:e7:3b:34:ed:91:9c:54:23:5d:f1:a1:15:19:b7:3d:97:56:
87:82:f6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:09 2025 by rpki-client