Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
File: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft (raw, json)
Hash identifier: N9S2cPkRgexvcGdyJnaRvilW/uX4PS6n25yDDRIhRAY=
Subject key identifier: E2:7F:07:C0:7B:FA:BA:EC:5F:7B:38:7F:55:79:66:05:B3:53:61:7D
Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Certificate issuer: /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Certificate serial: 0198D660C195CA7FE2B8009C2A3EA7E8D291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
Manifest number: 0721
Signing time: Sat 23 Aug 2025 10:02:01 +0000
Manifest this update: Sat 23 Aug 2025 10:02:01 +0000
Manifest next update: Sun 24 Aug 2025 10:02:01 +0000
Files and hashes: 1: G4FFwIyiIU29W95QZk9-MWiLljM.roa (hash: iDaSzS67wgh1om9NMNs4mTJZEfMH7AGf6ifeuTsPDRg=)
2: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl (hash: ug2qXCvxnQYQeACF8xPZTd2OpzXQsgASX6iaz9MhFmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c1:95:ca:7f:e2:b8:00:9c:2a:3e:a7:e8:d2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Validity
Not Before: Aug 23 10:02:01 2025 GMT
Not After : Aug 24 10:02:01 2025 GMT
Subject: CN=e27f07c07bfabaec5f7b387f55796605b353617d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a4:92:6e:f7:b6:d3:e5:eb:6f:64:60:a3:ab:
a6:d5:12:6d:ec:88:36:d4:94:d5:e1:2f:83:74:04:
05:15:ea:f1:bc:e9:2b:bd:1e:df:a1:a8:a9:e1:c3:
35:83:69:74:5f:b3:76:37:cc:0a:3a:7f:a4:6a:87:
7d:bc:f9:4a:34:a9:57:08:0b:01:8d:29:74:c2:a0:
ec:75:03:1b:78:06:39:3d:25:7a:6b:49:2f:7b:a7:
3a:82:49:03:bc:d4:38:13:21:2e:88:e4:3f:49:df:
6b:56:ca:93:84:55:5a:60:e6:02:95:7a:cf:1f:d9:
77:c1:b9:72:5b:f0:00:d4:73:41:3e:33:f3:64:d7:
86:79:9f:95:70:b2:50:2e:af:71:be:e3:f5:34:1d:
12:cd:a4:96:65:b3:9a:93:17:8b:3e:6c:70:ca:e6:
cf:29:89:2f:54:40:35:fd:a3:0a:17:f7:9a:d3:b4:
8d:c4:32:92:bd:12:88:e9:92:8e:90:03:d7:29:40:
8b:ff:76:bf:62:bb:42:d3:ba:61:03:b5:5b:de:2b:
79:de:15:6b:54:d1:0b:af:4a:30:7a:e0:ce:92:88:
74:3d:89:2c:2e:7f:ff:81:f3:1f:8e:71:06:4d:89:
9a:25:ed:6f:f8:f5:4d:68:9c:40:77:63:9b:96:25:
e2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7F:07:C0:7B:FA:BA:EC:5F:7B:38:7F:55:79:66:05:B3:53:61:7D
X509v3 Authority Key Identifier:
keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:31:f3:1c:2c:b4:13:79:c9:4b:a2:ac:8b:85:9d:42:85:4c:
ed:21:ba:86:de:87:88:5a:98:4d:58:3a:34:bf:35:11:82:1f:
3c:f9:38:17:97:75:c4:2e:e4:3d:7b:12:b7:cc:91:39:37:8f:
b6:df:b8:58:fe:14:7d:da:ff:42:6d:08:c4:1a:d7:03:fa:4e:
34:bc:4b:bb:c1:f7:11:1f:db:ce:cc:13:dd:ba:50:ce:16:e2:
d3:d0:1c:fb:ed:db:03:98:e3:4d:90:28:b2:6f:42:21:9f:23:
dc:ca:e1:88:27:f2:21:f9:35:6e:f0:4d:f5:06:8b:5c:98:18:
5e:04:2c:7a:cf:f6:92:65:9e:33:ce:5a:8f:a1:55:7e:6a:85:
f3:c2:a3:53:0e:46:d4:6e:e8:41:c0:e2:b9:e0:99:05:2c:8d:
45:98:c2:41:c7:d9:0f:9f:3a:59:86:47:a2:66:35:82:27:5a:
b8:f1:1c:a5:06:f5:a9:a5:ee:7a:c0:ba:16:19:56:82:aa:1e:
74:c0:3a:0a:56:85:a0:b2:bd:5c:a1:ad:fa:e3:e9:ff:e8:39:
58:0e:a7:6b:63:1d:25:4b:3f:f5:36:4d:4f:b8:28:ae:f9:c7:
14:84:96:44:2c:ac:bb:20:43:43:e9:aa:14:25:5d:1d:f7:e5:
f9:c8:1c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:36 2025 by rpki-client