Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
File: tgcVWH7cyzJajXwPWkLY8EOHHbc.mft (raw, json)
Hash identifier: SQfq8CdvuSJGJd49mnJYyleAbMYHrJ/KmrXp1hseZGQ=
Subject key identifier: 2A:60:F9:49:D4:F0:F1:4B:7E:D6:90:48:D9:D5:DF:93:BD:3A:22:9D
Authority key identifier: B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7
Certificate issuer: /CN=b60715587edccb325a8d7c0f5a42d8f043871db7
Certificate serial: 0198D661354A46A6044FF91401BE705E877F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
Manifest number: 016F
Signing time: Sat 23 Aug 2025 10:02:31 +0000
Manifest this update: Sat 23 Aug 2025 10:02:31 +0000
Manifest next update: Sun 24 Aug 2025 10:02:31 +0000
Files and hashes: 1: tgcVWH7cyzJajXwPWkLY8EOHHbc.crl (hash: MBZ0pBVLYExyzlic5pOgcvzkcZh7vrZV7EGoG/sjntU=)
2: zAVl6KN24j-HKETuiZlV3hao63U.roa (hash: djF473q/t5BuBhPbvFB06yhsIPQKmfmJ61GIeE/TTOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:35:4a:46:a6:04:4f:f9:14:01:be:70:5e:87:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60715587edccb325a8d7c0f5a42d8f043871db7
Validity
Not Before: Aug 23 10:02:31 2025 GMT
Not After : Aug 24 10:02:31 2025 GMT
Subject: CN=2a60f949d4f0f14b7ed69048d9d5df93bd3a229d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6a:e6:94:a3:72:88:fa:2a:96:7d:ec:65:a1:
5d:04:3c:97:59:00:2e:92:23:0e:10:da:5b:60:5d:
16:c8:f0:5e:8d:04:fb:21:99:0b:14:4d:c2:ca:66:
90:58:d5:10:f1:e3:73:88:d1:f9:13:14:b1:61:7f:
6b:7b:98:f1:f1:3d:fe:00:c6:47:63:c4:a1:80:cc:
22:50:22:c8:08:a3:01:ce:c2:8f:53:24:e5:8c:76:
99:fb:30:e8:9f:3a:a6:78:a5:e7:01:cb:54:31:42:
e0:30:e1:a4:5a:6d:d0:76:86:8a:1c:aa:1a:a7:fb:
4a:e4:45:47:14:e0:c3:66:3f:61:75:fd:96:ee:83:
92:4f:0d:92:d5:8f:44:38:7c:9e:94:f9:f1:e9:ed:
db:db:59:ce:8e:1b:3b:b8:24:ad:34:c8:d4:61:35:
44:f8:7a:73:30:25:6b:58:eb:74:fd:24:72:b0:b4:
41:1b:a9:07:89:bc:a4:b5:3b:ac:a7:9b:dc:25:d2:
98:ad:63:b7:36:ad:e6:03:b3:cb:8c:56:e4:aa:db:
58:2d:73:d4:2b:fc:d2:42:a4:55:17:2b:1c:38:71:
4d:38:5e:a6:36:d4:8d:90:17:a6:2b:42:a9:22:71:
2f:69:d6:15:49:cf:b6:de:d6:15:4e:07:c2:ab:16:
30:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:60:F9:49:D4:F0:F1:4B:7E:D6:90:48:D9:D5:DF:93:BD:3A:22:9D
X509v3 Authority Key Identifier:
keyid:B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f5:c8:af:5e:2c:5f:31:df:4b:e7:0f:7e:b4:25:b6:58:5b:
fd:35:21:b4:ec:02:18:62:57:00:82:54:24:2e:63:cb:3a:88:
d7:dc:22:c3:5f:32:80:f9:20:63:cd:98:47:dc:0e:4e:2a:e7:
1f:2f:48:c9:e5:f9:9a:86:94:d5:c3:1e:b2:47:78:fb:d9:ad:
23:ec:94:f3:e5:42:b7:dc:4e:52:94:2d:ae:17:29:4b:d1:25:
af:b3:af:92:6a:7b:c5:4e:20:d5:86:1c:44:56:42:a1:0c:b7:
4a:ec:41:67:39:9d:4f:4b:bd:e7:5e:e6:96:25:0f:0c:de:84:
a9:5a:83:ba:c6:3a:65:ad:51:9b:31:9c:18:c3:46:63:23:12:
3f:d1:66:f1:56:7f:94:67:99:bc:94:2c:aa:0f:b9:8f:f9:e6:
de:7f:99:26:7f:b4:a7:d9:b4:68:da:7b:5c:03:41:9b:6b:ca:
d4:22:82:45:a5:75:b7:32:ac:10:8b:b5:b9:ac:a0:8b:17:69:
b7:f3:bc:0f:6c:3c:23:68:53:81:8b:0a:95:3f:4b:13:be:53:
97:be:20:f9:2a:73:ee:0d:99:db:7f:15:08:46:93:67:d4:16:
9d:55:6c:56:74:5c:c1:af:39:e3:71:d2:de:7f:60:fa:72:5a:
ab:4a:63:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:39 2025 by rpki-client