Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
File: Ts9hevNfNyTn2oYOv75OwTiuGAA.mft (raw, json)
Hash identifier: 9FKRWTKxaqzokYH1/gCLKAk9uoWUXagwbX5tye+2xgU=
Subject key identifier: 1E:1A:F8:04:59:D4:AF:CD:1E:98:F2:A3:C9:08:96:75:6D:DB:7B:E2
Authority key identifier: 4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
Certificate issuer: /CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Certificate serial: 0198D5BBDEB98612E17B2275E3C9BC394ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
Manifest number: 138E
Signing time: Sat 23 Aug 2025 07:01:55 +0000
Manifest this update: Sat 23 Aug 2025 07:01:55 +0000
Manifest next update: Sun 24 Aug 2025 07:01:55 +0000
Files and hashes: 1: PhMpSawzWF4ex2C_9UJlDInR9Qw.roa (hash: 8Mwytw2cAElmiryd1WCNePGo22yW+hClbYeRH6uFgoU=)
2: Ts9hevNfNyTn2oYOv75OwTiuGAA.crl (hash: MCmfPE9fb14ntyy8CSe8GSmWicqFPZb6sMiJFDXhLlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:de:b9:86:12:e1:7b:22:75:e3:c9:bc:39:4e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Validity
Not Before: Aug 23 07:01:55 2025 GMT
Not After : Aug 24 07:01:55 2025 GMT
Subject: CN=1e1af80459d4afcd1e98f2a3c90896756ddb7be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:27:16:33:cf:78:42:13:6f:61:51:f5:21:1e:
dc:aa:cc:b1:d4:a3:9a:2c:94:82:44:af:12:4c:57:
7a:59:c6:7e:65:31:b0:bc:df:86:90:6d:2d:99:c1:
44:b9:1f:9e:3f:55:25:b7:19:df:00:33:02:5b:05:
f6:bf:4e:05:65:15:8c:f1:8b:34:b2:3b:16:7e:95:
e8:9b:a3:8b:a8:29:b5:8c:c8:aa:a9:89:57:e8:ae:
89:2e:8e:66:bd:6d:e2:90:27:6e:f4:28:b0:16:2f:
6f:40:3c:d5:29:2d:14:74:ec:10:63:3f:4e:05:49:
a5:12:8a:bb:40:42:f0:f5:5a:c1:38:2a:ee:6c:15:
5a:79:5d:ac:8b:73:c3:af:df:bf:6d:98:01:da:2a:
61:45:49:7d:24:6f:89:02:69:68:43:ac:97:4c:8b:
48:5c:16:e1:d1:10:07:26:42:e1:63:86:8f:ae:49:
d9:ad:e7:4b:fe:72:c4:a1:06:b3:39:c5:ac:c2:1e:
f4:b3:a2:b6:2f:ed:4d:32:cf:cf:13:e5:e7:6b:0c:
c9:80:f8:7d:68:76:d3:a0:8d:18:07:96:64:dd:d0:
7a:5e:4e:2e:4d:b9:e7:4c:df:67:96:c0:ed:48:66:
b6:a0:16:e2:97:ec:85:0a:a2:06:a1:6a:ca:ba:bd:
ba:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1A:F8:04:59:D4:AF:CD:1E:98:F2:A3:C9:08:96:75:6D:DB:7B:E2
X509v3 Authority Key Identifier:
keyid:4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b6:ac:9d:da:f6:76:3c:7b:80:7e:ae:b8:b9:66:4d:93:3e:
bf:7a:c4:c2:dd:3f:e9:56:83:0a:6f:3a:e3:33:bb:c8:ee:88:
dd:a4:c7:78:5b:32:d4:99:cd:69:82:d4:d8:f4:c4:67:e2:6e:
24:5e:88:cc:9b:b7:51:9c:04:bb:1a:e3:e2:62:f5:ad:45:ca:
9c:6b:10:c9:f5:fe:eb:ce:10:b0:92:9d:15:05:ba:80:1b:aa:
97:e5:06:46:53:f0:e5:e0:72:e3:3c:07:69:36:94:b5:e7:61:
01:21:85:05:7d:9d:56:38:a9:d4:50:1c:fd:ed:53:11:69:3e:
28:de:3a:84:2d:ea:1f:b6:30:96:a4:bf:0b:60:c2:98:cd:05:
f6:16:07:10:11:6e:3f:22:23:a2:88:11:bd:21:fd:18:9e:d7:
66:52:27:32:34:44:f2:0c:5d:23:a6:36:72:9b:f6:86:93:83:
4b:cd:53:de:f6:b6:63:8a:78:4e:a4:46:08:90:b4:25:9b:7b:
80:f2:35:aa:43:79:28:57:ae:53:f1:b4:25:18:79:23:94:e5:
57:54:2a:16:11:85:3f:51:2b:d8:56:72:9e:cb:cf:3a:42:ce:
f8:9a:1d:be:57:0b:f8:54:50:54:75:16:10:99:21:d7:5f:4c:
e3:f8:53:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:30:15 2025 by rpki-client