Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
File: TGtjcblFo16d8wj_Q4A-JheFEGk.mft (raw, json)
Hash identifier: EJ+gWgz/oGV3AYy9r9/NyoU4+2td2qKAlcZHDCuR8QU=
Subject key identifier: B3:62:17:2F:FB:47:E2:FC:CE:61:B2:9A:CF:C7:F7:97:A9:14:DC:5B
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Certificate issuer: /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial: 0198D515C68072965EFAE33DE5139DD9AE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
Manifest number: 10FF
Signing time: Sat 23 Aug 2025 04:00:30 +0000
Manifest this update: Sat 23 Aug 2025 04:00:30 +0000
Manifest next update: Sun 24 Aug 2025 04:00:30 +0000
Files and hashes: 1: NETt5LyS--lV9_ycDBmp9TmpxP4.roa (hash: rz60bepxWIT7kbaafyZ48rHU8Vmg6Vvtzt7Ebp5hgDU=)
2: TGtjcblFo16d8wj_Q4A-JheFEGk.crl (hash: jVuNBsMyMhnp0UbgClq4n67T4HZ8Ksj2kq5NlI0Lo60=)
3: YU0ymXaczDxniPQtB_xa4RTEU2Q.roa (hash: +3YrNwFP0+tuTgevzTw2FGRwOLOaLfupz3GSxL5OXLE=)
4: e99v7pEfrFm4Dg1SnIaNO39I8Ws.roa (hash: GWy1k4OaIi0pC/Ap0hgLnIy0Gp664zirmOTGWdfBTaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c6:80:72:96:5e:fa:e3:3d:e5:13:9d:d9:ae:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
Validity
Not Before: Aug 23 04:00:30 2025 GMT
Not After : Aug 24 04:00:30 2025 GMT
Subject: CN=b362172ffb47e2fcce61b29acfc7f797a914dc5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:cb:f1:39:c1:03:cc:6c:f0:1f:40:75:15:
68:84:28:bd:ea:d3:3b:dd:3c:ae:2d:80:c3:38:6b:
1b:d8:05:c8:7c:04:19:3e:09:b8:1c:40:b4:e5:31:
bc:0c:a3:77:96:31:8e:5e:94:cb:46:df:d1:78:e9:
bf:51:fb:2f:80:ed:67:48:b6:3c:6a:e2:40:5d:c0:
78:28:aa:2d:66:81:7c:2c:88:c0:31:65:3e:a5:bd:
13:e8:4a:75:5b:85:3f:e2:e7:3d:92:c4:5f:87:cc:
8b:37:aa:65:cb:5a:cd:1e:a1:7b:10:84:f0:c9:79:
c1:8d:48:71:63:f8:a2:ff:37:83:de:5b:dc:e3:f8:
9e:16:af:d4:11:bb:5e:d8:cf:51:f6:b2:c2:2d:14:
00:59:24:4b:20:94:dc:fa:7d:44:b3:fa:22:38:66:
44:d0:c1:06:64:3d:1b:e3:22:f5:68:19:bd:34:f2:
12:c5:e8:5b:ad:ea:ce:bb:77:f6:c7:be:3c:9b:95:
43:b2:14:ad:23:f6:b4:20:70:9d:29:bd:a0:15:c1:
58:f6:ec:0e:fb:54:8c:71:bb:c6:72:d5:66:3f:ee:
c3:ec:eb:38:50:a0:5b:5c:93:7d:ad:bb:c7:b9:46:
03:b9:83:73:7a:c4:fa:f9:86:10:f1:aa:70:87:39:
72:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:62:17:2F:FB:47:E2:FC:CE:61:B2:9A:CF:C7:F7:97:A9:14:DC:5B
X509v3 Authority Key Identifier:
keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:89:6a:b0:62:23:f9:3e:f9:6b:7e:e2:66:c5:36:af:fd:3f:
a2:35:f2:03:25:bf:15:f8:2c:d6:81:3e:2d:d7:d3:cd:10:4f:
f7:b7:34:cb:a4:56:03:42:62:1a:e3:65:e7:22:23:5f:10:57:
f7:65:f4:5f:f1:4f:fb:d5:f8:d3:e0:1c:d1:3d:82:64:cf:5e:
80:84:bb:ef:4f:d3:5b:60:1b:72:eb:e0:54:b2:27:a9:82:9d:
40:7c:c8:84:e8:b7:30:14:00:e1:53:d2:2a:e1:39:e1:c0:8f:
61:83:92:44:74:ce:cf:73:31:16:2b:27:7c:a4:06:8b:cc:6d:
d6:74:65:2f:36:8f:f2:1b:70:01:35:aa:7d:0c:80:49:72:70:
54:19:9f:35:1b:cc:1a:4e:6c:88:15:96:fc:ee:5e:b4:71:05:
3b:17:83:fc:30:c9:1e:3f:48:f8:d9:cf:b1:4b:d0:1f:3d:f5:
f6:0c:fc:2c:d7:12:2c:ed:88:b8:0e:db:75:e8:21:97:2d:c1:
16:fb:1e:1b:6f:ff:79:cc:89:c6:f5:2d:97:35:46:0f:69:ee:
7c:bf:54:e4:76:af:d8:1d:0f:65:b2:fa:2a:36:a7:57:c2:3f:
b9:fe:34:61:4f:5f:cf:e0:40:6d:45:45:b9:9b:5f:a8:65:49:
17:22:8c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:19 2025 by rpki-client