Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
File: tEJc9VATRKxazDB6vQrwE_rGcHM.mft (raw, json)
Hash identifier: BvjbsizFFDWd/edyJZfce+LdDGsIAUVDnzw96du4TDo=
Subject key identifier: D5:35:4A:5C:53:5C:98:1F:35:B6:E5:16:89:99:B9:24:E1:EC:B5:75
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Certificate issuer: /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial: 0198D4A7E00008B7BDF7F4F86C3C488604FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
Manifest number: 1253
Signing time: Sat 23 Aug 2025 02:00:28 +0000
Manifest this update: Sat 23 Aug 2025 02:00:28 +0000
Manifest next update: Sun 24 Aug 2025 02:00:28 +0000
Files and hashes: 1: H053Wy1QhrY8__zrTCLE21aJSR0.roa (hash: XFp0BCIN9PEU3N2q5lPY5D5IjnQztsPMN//9DZ1mPWQ=)
2: kj9rgsBpPLepIKPHD5eAEuwwvw0.roa (hash: EHHLSrODdY/NFx0Xqw8ficGV0VFf608vkoi6uBTcBb0=)
3: tEJc9VATRKxazDB6vQrwE_rGcHM.crl (hash: 8H5+CA2L3IQW8iZIRhDoV0wwJ5OT+UXKwL+sCVCKZ7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:e0:00:08:b7:bd:f7:f4:f8:6c:3c:48:86:04:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
Validity
Not Before: Aug 23 02:00:28 2025 GMT
Not After : Aug 24 02:00:28 2025 GMT
Subject: CN=d5354a5c535c981f35b6e5168999b924e1ecb575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:90:92:de:82:52:f2:4e:75:08:14:0a:e1:87:
8f:fc:3b:fb:cb:9b:f8:97:71:01:e7:43:18:29:18:
7f:6d:e6:28:46:39:5b:13:69:e7:53:71:d3:07:3e:
1b:62:99:64:70:7f:be:39:f4:61:06:45:84:47:25:
ba:6c:23:4a:ee:f5:62:9f:04:fa:67:cf:40:ba:ff:
52:10:32:03:7b:13:2c:4a:32:f8:32:e7:d9:0a:1b:
4d:36:10:f5:c4:8b:c7:61:6f:fe:ae:8e:8c:90:72:
4e:dc:98:da:e1:65:4b:7b:89:78:24:25:ae:7b:e3:
5d:13:2d:92:42:42:f6:36:b0:3e:d3:93:3c:62:cb:
5e:79:65:25:23:a4:c9:dc:f2:7b:2f:16:b8:86:d0:
a6:a3:c8:fa:53:b8:cc:39:7c:0f:0b:46:95:cc:87:
39:6d:da:ea:13:2b:d1:27:80:08:c6:33:c4:2a:62:
8f:8e:1f:62:2b:e7:ca:27:31:34:df:10:c9:42:72:
f9:7c:f2:04:b4:73:4d:20:3b:13:31:89:f9:0c:57:
26:c3:4c:0d:53:39:2b:c4:02:15:f7:cb:05:99:04:
a2:e6:a7:d0:6e:61:eb:08:d5:10:4b:11:ab:35:01:
15:4f:d4:83:6a:fe:8f:ce:3e:e0:ff:4b:2d:74:40:
bd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:35:4A:5C:53:5C:98:1F:35:B6:E5:16:89:99:B9:24:E1:EC:B5:75
X509v3 Authority Key Identifier:
keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:19:de:f3:c4:43:8a:e8:fd:14:ed:ac:c6:58:0a:1a:e5:92:
ee:33:99:8f:82:41:aa:97:8d:9b:97:a7:65:f6:be:e7:3d:72:
15:50:56:b2:1f:a2:39:5e:cf:b3:cf:62:4a:5c:14:c7:9c:5a:
04:15:ff:c9:ee:fb:da:c7:9a:c6:49:3e:a0:7d:79:83:ff:2e:
9f:8b:8c:48:a8:de:90:72:b4:ed:ea:04:ce:4f:ba:a8:06:33:
22:e5:38:04:00:4b:a3:7b:d2:30:02:2e:08:0b:94:29:c6:7e:
a9:29:18:9a:76:05:4a:39:43:fe:df:4c:ca:9a:3b:f2:21:fa:
3c:96:61:eb:d6:97:23:50:ef:70:ac:9e:94:43:46:cd:41:5c:
3a:7b:13:34:7b:ed:8b:7a:a9:77:16:6c:01:f5:a2:d2:ff:c6:
48:3f:0d:00:47:4b:19:68:a1:20:ba:52:80:c5:b5:d1:9e:23:
e2:11:fd:96:79:cc:84:ad:70:66:36:de:68:cb:ea:62:68:bd:
1b:8c:be:10:fb:d0:84:72:de:e2:29:ca:df:30:b9:f1:e7:66:
c3:94:80:d5:59:38:1b:02:56:7b:8e:04:0d:58:39:b9:8a:35:
58:ce:de:2c:0b:a3:61:fa:63:b6:31:06:e4:82:51:cf:07:0e:
36:a9:68:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:38 2025 by rpki-client