Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
File: tpJFTBZpZIbPBx7Rjnl240BJCfs.mft (raw, json)
Hash identifier: Usxk3mZqm0Wq8C3lm3u1gwPppytGQUkjdN03mieqyLc=
Subject key identifier: 67:22:C0:C6:A3:C1:33:27:7C:95:3D:03:8A:CA:F2:2E:11:A3:90:02
Authority key identifier: B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
Certificate issuer: /CN=b692454c16696486cf071ed18e7976e3404909fb
Certificate serial: 0198D7A8EE9B0BE7A75B010C046F9D4A7A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
Manifest number: 0A99
Signing time: Sat 23 Aug 2025 16:00:29 +0000
Manifest this update: Sat 23 Aug 2025 16:00:29 +0000
Manifest next update: Sun 24 Aug 2025 16:00:29 +0000
Files and hashes: 1: 5czF8Od9k1lGzWbwlN6JD9EQv3o.roa (hash: xQiXSp/PKEr54Bt774G49z92F24A1eFshYT3vR6Fw2c=)
2: tpJFTBZpZIbPBx7Rjnl240BJCfs.crl (hash: y1nb3KaEAqRC9tYwnkcsv7IId5bF2mjwKlZ5nyk2cE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:ee:9b:0b:e7:a7:5b:01:0c:04:6f:9d:4a:7a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b692454c16696486cf071ed18e7976e3404909fb
Validity
Not Before: Aug 23 16:00:29 2025 GMT
Not After : Aug 24 16:00:29 2025 GMT
Subject: CN=6722c0c6a3c133277c953d038acaf22e11a39002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:98:a2:5f:b3:d4:8e:bc:c2:16:2b:4a:e2:
56:86:61:0e:c7:6d:44:06:80:62:9c:d1:ce:97:31:
2c:93:7c:24:eb:de:2d:ec:13:ba:19:b9:61:f3:13:
4e:b4:2b:8a:69:4c:4d:28:ca:03:e6:1f:f9:ac:28:
a4:8f:a5:d4:26:7a:11:56:ce:18:19:2e:11:85:4e:
b8:0b:e8:ef:69:cc:cb:2b:b8:b6:80:8a:c9:42:04:
be:f0:1f:9b:c1:61:ac:8b:1b:88:6d:b7:b1:30:83:
1c:ef:0a:6a:c7:63:83:61:f6:98:ff:d8:df:5a:8c:
cb:91:b3:7b:bb:60:fc:c7:f4:90:bc:67:18:ab:db:
60:a6:60:0b:6f:80:99:9b:97:c4:9b:2c:78:fd:a3:
15:c9:76:74:0c:87:0c:e5:d5:1a:a5:98:f4:1c:08:
ba:fa:9e:05:a8:4a:42:d8:7d:79:f4:13:df:d5:7f:
4b:17:2a:10:5c:00:ce:3d:17:61:fa:66:ae:a0:6f:
37:8f:69:74:43:96:88:be:26:4d:8e:db:d0:27:bb:
e2:20:01:df:0d:d7:8e:cf:91:6e:22:98:16:10:80:
57:3d:a4:70:11:11:07:16:87:5a:47:2c:ac:35:38:
46:9d:61:5e:10:fb:d7:e1:5b:0e:12:68:7b:0c:84:
46:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:22:C0:C6:A3:C1:33:27:7C:95:3D:03:8A:CA:F2:2E:11:A3:90:02
X509v3 Authority Key Identifier:
keyid:B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:99:8d:3e:4d:8e:0e:26:80:c3:0d:6b:26:e2:1a:17:86:23:
ab:66:62:6e:ad:53:7e:82:0e:fb:33:76:4b:44:3b:ef:3f:46:
a4:6d:c3:9d:f3:6c:ec:fd:a5:c1:5a:8d:d5:2f:be:cb:8c:99:
03:4e:e0:4a:0c:e7:92:b6:1e:87:51:68:b6:fd:e7:cb:50:b3:
5f:72:3d:87:dd:a0:ed:b3:eb:51:eb:98:b5:8c:05:cd:7a:ad:
b1:75:9b:5a:e2:b8:bb:a6:04:10:76:94:d8:34:cb:3a:d2:d8:
4e:cf:cb:23:c9:fd:6d:99:fb:a0:50:ed:22:c0:dc:b7:c1:e5:
bb:e2:c4:52:4e:da:1e:e5:b7:7a:f9:a3:53:04:03:22:d4:05:
01:54:16:61:dc:f4:50:3b:ec:53:8c:7a:51:8b:40:50:ed:45:
9f:6c:3f:6e:d1:8b:35:5c:65:8c:4e:1b:71:3e:04:83:7d:cc:
91:30:43:68:b8:08:ea:18:09:0f:2b:65:0c:6a:e3:a1:38:7e:
bc:6a:21:b9:27:4b:75:08:80:c6:66:2f:a8:21:8c:ad:7a:c0:
72:5e:cb:b0:d6:1a:03:e8:53:04:d2:69:34:42:6f:ba:b8:6a:
c3:a9:3c:d8:af:1b:40:67:a1:b7:d6:ab:81:a6:53:d7:a4:91:
81:03:d4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:43:10 2025 by rpki-client