Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
File: tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json)
Hash identifier: qcGiM3qzTBadx40mwuqv+E1aDSS21mrSiulGrycG39I=
Subject key identifier: BF:A7:1E:AA:C6:81:28:E8:2D:E6:9A:5B:F2:29:4E:1E:69:64:D2:4C
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial: 0198D40471709711A485CE745F666417711C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
Manifest number: 1649
Signing time: Fri 22 Aug 2025 23:01:57 +0000
Manifest this update: Fri 22 Aug 2025 23:01:57 +0000
Manifest next update: Sat 23 Aug 2025 23:01:57 +0000
Files and hashes: 1: dMyCW0_TBkO1nYNBL_n11IKNaBI.roa (hash: WTKaBFp1QPSs1ROafjR4WJfZR1PRtcVHfjnPURoJWEQ=)
2: iWujOO5h_XVMHY2nSFxBko0o46E.roa (hash: hfZ0O6pRdbOdpr8hVRCYtXgEcI0jSP4lHjfs8kAt2hk=)
3: qrrQR7WuIleyYS2sO7I0VvjROUo.roa (hash: 4JE74Aq/xmpPqZIRbZrMja/xvjU3RSpM11pAC7vf4sE=)
4: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: 248NghVo8rY8j/Idvu0x+ZUg7olyTxHMO5g0b+hy18A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:71:70:97:11:a4:85:ce:74:5f:66:64:17:71:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Validity
Not Before: Aug 22 23:01:57 2025 GMT
Not After : Aug 23 23:01:57 2025 GMT
Subject: CN=bfa71eaac68128e82de69a5bf2294e1e6964d24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:c8:b5:6b:85:f2:58:64:1d:40:a7:d7:0e:
63:2e:33:e8:4f:1f:07:7f:0b:da:48:ce:c3:ae:c2:
8f:e6:b4:5c:64:fc:67:35:47:b6:95:eb:e8:9d:a5:
77:85:f6:79:d4:63:d6:28:11:87:5e:cd:cc:d8:bb:
b0:b8:1e:d5:f1:19:0f:2f:09:bc:f0:ec:ff:f1:fd:
89:09:6a:27:0b:4d:12:e8:f6:85:02:c6:11:70:cf:
86:91:f1:39:55:73:d5:47:bd:1f:66:ea:9b:af:4f:
4a:fa:8b:d9:93:1b:15:b7:93:de:fb:0a:ce:3e:de:
7c:4c:f1:99:cc:c8:17:62:3a:89:10:d4:36:c4:7d:
85:c1:0b:28:9e:79:06:4a:9d:03:e5:f4:cb:42:76:
49:ee:5c:4a:54:ba:f4:76:1b:98:1b:12:61:f5:a4:
65:61:73:a8:1c:a2:4a:b4:f0:07:ba:e1:ef:49:9e:
41:34:b9:0a:2a:43:93:7e:23:32:77:6f:5a:c3:dc:
c4:82:78:31:42:ec:47:02:8b:03:6c:08:1f:df:69:
1f:0d:21:fd:df:e3:5d:7e:44:25:74:24:d1:18:c0:
35:44:cd:7c:72:35:3e:7a:a5:96:4d:bf:ee:a1:76:
d9:7e:1f:e1:e2:a9:ab:b0:c6:3a:1f:c8:74:5f:20:
1b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A7:1E:AA:C6:81:28:E8:2D:E6:9A:5B:F2:29:4E:1E:69:64:D2:4C
X509v3 Authority Key Identifier:
keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7c:85:15:da:12:e4:0b:94:3e:46:72:6f:25:2d:89:83:06:
2e:d9:14:98:27:68:0a:66:81:ca:f0:cd:14:8e:37:61:8f:1e:
9e:7b:39:0f:f7:20:16:46:42:d3:0f:72:86:06:2b:e2:48:09:
d5:5f:75:38:99:65:d1:c6:09:79:7e:76:5c:10:9a:d4:37:c6:
55:0a:3c:2e:2d:17:77:4b:e9:e8:2a:13:cb:78:6c:72:f6:2e:
c5:be:7b:e4:31:5e:43:05:de:03:61:61:ce:6e:86:63:35:65:
8e:4d:b1:f9:32:b6:7f:53:16:b4:25:66:23:51:7f:f0:8f:c9:
27:b1:7f:12:82:a8:9e:25:71:a7:9c:80:c6:c6:b0:3b:a7:aa:
f4:d1:f2:6b:45:f7:49:82:ef:bc:ca:73:e0:82:3b:64:93:b6:
f7:c4:bf:a4:4b:0a:cf:14:84:6c:80:09:48:2c:14:43:f4:6d:
59:1c:96:30:ed:a9:43:3d:f5:87:bf:7c:d5:ab:87:cd:1d:01:
70:35:55:e5:4a:bb:70:83:2c:d3:58:99:43:dc:df:d1:db:84:
8f:49:85:8c:11:9d:be:28:f8:03:bc:67:b0:2b:f8:ce:5a:00:
99:09:3f:58:a1:46:08:76:d9:1f:89:f8:15:4a:40:9d:58:fc:
c3:4a:16:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:04 2025 by rpki-client