Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
File: tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft (raw, json)
Hash identifier: 350ejJ5Zc4GCyyFIt1P05OaqNy4klao5WBcxS9F8rGg=
Subject key identifier: 51:E8:BF:05:AD:4E:B5:1F:C5:72:63:6F:7E:0B:29:37:84:F2:DC:46
Authority key identifier: B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3
Certificate issuer: /CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3
Certificate serial: 0198D698592DBAD3906B29240E5C8B4FDC13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 11:02:45 +0000
Manifest this update: Sat 23 Aug 2025 11:02:45 +0000
Manifest next update: Sun 24 Aug 2025 11:02:45 +0000
Files and hashes: 1: mAE3_QFYxLK2bxPNIhFbVq5Pufo.roa (hash: 8Db1Fqvg0Iw4fJZLlY1WJu1zNG21SFNmOlpLtn7VYgI=)
2: tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl (hash: QAJGqswfkCULARwAtO0THlisEaAr3bUzgqdRwEZusqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:59:2d:ba:d3:90:6b:29:24:0e:5c:8b:4f:dc:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3
Validity
Not Before: Aug 23 11:02:45 2025 GMT
Not After : Aug 24 11:02:45 2025 GMT
Subject: CN=51e8bf05ad4eb51fc572636f7e0b293784f2dc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:e3:99:28:68:ba:48:58:cc:8b:76:42:b9:
ce:54:8b:f0:d7:25:d8:4f:af:31:ec:e8:43:0b:36:
1a:82:fe:32:13:8c:5f:d4:8e:47:45:87:93:2f:30:
44:d1:12:f0:c1:e7:1f:00:bf:ca:78:d6:a4:cd:06:
97:36:10:4c:f5:6d:5f:87:e7:da:87:97:89:f3:b7:
52:b8:98:21:a0:c8:0c:fb:17:32:53:50:2c:02:3a:
d3:90:b5:13:5d:bc:05:db:2b:50:2f:31:85:d9:2b:
d9:46:7a:f6:79:92:05:8f:d1:32:d3:a3:f8:c6:22:
29:ac:f7:f6:78:2f:08:b9:d5:70:af:a0:59:80:b1:
22:38:0e:3d:61:5f:a1:1d:81:eb:4c:05:22:dc:64:
98:1d:1e:2b:1d:cb:d3:6f:9c:53:dd:cf:dc:9b:65:
06:6c:e4:9a:8b:b5:97:f6:ce:34:d3:c9:e2:d8:9b:
74:bc:df:70:d4:d5:67:fe:eb:7e:3a:b2:0b:ce:54:
0a:f0:bd:1e:6d:7b:06:ea:c2:48:42:89:3f:af:2c:
43:e6:f4:20:68:70:76:cc:f4:05:a1:1a:88:af:4c:
62:5b:26:fa:62:82:92:59:73:82:5c:5e:31:9a:48:
ac:20:44:3c:ae:ab:60:b8:91:c5:d9:22:7d:d8:28:
b8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E8:BF:05:AD:4E:B5:1F:C5:72:63:6F:7E:0B:29:37:84:F2:DC:46
X509v3 Authority Key Identifier:
keyid:B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:b6:6e:61:07:0d:4b:4d:ec:80:e9:e1:69:7a:85:af:2f:b0:
41:76:fc:81:01:5f:19:75:11:bd:80:d9:a3:45:a7:d4:d6:e1:
67:9a:43:f0:98:7c:95:f4:64:9c:b3:ad:6c:c6:8f:27:1c:5f:
da:52:b2:c7:3e:4a:64:5c:ba:f6:f2:50:70:aa:83:50:a6:85:
fb:7a:38:d7:33:a0:e2:b0:e6:64:72:46:e4:97:21:78:1f:37:
b7:49:0f:0e:a2:06:98:3c:94:63:aa:ed:6a:09:54:a5:43:74:
e9:09:c9:37:14:98:6f:52:b2:58:59:14:f1:29:59:08:80:94:
bf:57:86:37:72:a3:31:a7:c3:86:7b:b5:79:14:8d:62:2e:5d:
70:e8:24:1c:08:85:ba:80:0d:c8:a3:58:73:07:2e:67:32:d0:
c6:5a:4d:0e:d7:4f:08:b6:f3:4e:d7:08:ba:7f:30:05:36:30:
e7:f6:3e:99:a7:45:99:ce:3f:61:a3:45:b3:de:71:24:88:f5:
fb:b9:f9:f0:6c:21:24:3a:f3:c9:9c:13:46:28:51:98:2d:51:
11:96:20:66:56:58:82:8a:51:2c:97:b8:33:1e:35:fc:a9:5c:
32:34:3c:06:74:2e:09:b1:c5:0f:c7:2a:a6:d5:dd:e6:35:70:
85:48:1d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:00:25 2025 by rpki-client