
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
File: tPSWmNCOjCg8DfKoLxaZfmJZurY.mft (raw, json)
Hash identifier: eKudxwAswsuJVrHJWMBDQL9+ZCvpcRBVvYhpfO432xk=
Subject key identifier: 5B:DB:CA:CD:8E:23:C0:99:ED:C5:24:E4:06:88:A3:27:15:6C:63:BF
Authority key identifier: B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
Certificate issuer: /CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Certificate serial: 0198D54E3F94BE8B7D52B0BC32E14E18B8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
Manifest number: 0816
Signing time: Sat 23 Aug 2025 05:02:11 +0000
Manifest this update: Sat 23 Aug 2025 05:02:11 +0000
Manifest next update: Sun 24 Aug 2025 05:02:11 +0000
Files and hashes: 1: tPSWmNCOjCg8DfKoLxaZfmJZurY.crl (hash: MZGzGfGVDWlEKc7Je52vKTiWI0aqPN7SeV815Mh0y1g=)
2: xzawIGSZ9gaUq6klJYybOrl_u8k.roa (hash: 1673awjNQrA/kSjVn3AcQmjZN9mvF8MpaJPKmYa0E/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:3f:94:be:8b:7d:52:b0:bc:32:e1:4e:18:b8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Validity
Not Before: Aug 23 05:02:11 2025 GMT
Not After : Aug 24 05:02:11 2025 GMT
Subject: CN=5bdbcacd8e23c099edc524e40688a327156c63bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:a2:14:d3:78:45:2d:f5:7b:1c:67:24:53:
74:36:ca:b7:fb:a0:48:a5:00:59:e6:ea:3f:5f:30:
6a:8d:6b:a6:bb:44:26:f8:06:8e:d8:3f:3a:1e:12:
4d:c5:56:86:0d:bf:22:f7:06:a1:b9:2c:24:3a:75:
ee:cc:a7:1c:1c:27:f3:0a:38:82:84:4e:5f:c8:ea:
9f:8f:93:35:dd:4c:cf:7f:c6:10:8c:9b:27:bb:bc:
d0:25:af:e3:d1:4a:3f:4d:92:01:b0:ad:c4:ed:03:
8e:24:65:d2:be:80:4c:dd:bd:d7:22:24:94:a7:3d:
71:8f:1c:8c:f8:f8:72:cf:b6:f0:7d:fe:c0:98:91:
23:ac:1f:ad:98:c0:ad:5d:0f:a9:a5:e6:c8:f6:92:
90:eb:e7:51:6e:b1:ea:74:8e:9f:36:62:80:c7:fb:
53:1c:e9:d0:8f:8c:69:d5:8b:3c:18:a8:cd:db:d1:
da:3a:a7:97:db:18:f7:04:fd:3f:c2:92:28:60:1a:
38:09:19:d4:4c:3c:6f:f0:a4:95:82:0d:67:04:59:
46:8b:b6:63:db:af:80:e6:46:3f:ca:5f:70:0d:f1:
15:30:ac:45:a7:85:43:2f:0e:8e:a8:44:17:19:80:
67:98:26:37:ce:87:8c:21:69:bf:68:29:86:0a:7a:
24:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DB:CA:CD:8E:23:C0:99:ED:C5:24:E4:06:88:A3:27:15:6C:63:BF
X509v3 Authority Key Identifier:
keyid:B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:df:ce:0e:32:ad:f0:de:87:6a:74:4c:4d:61:e7:b3:68:eb:
3f:36:9a:eb:5e:a5:26:b1:5b:23:dd:0d:f5:43:89:d7:72:ae:
8e:c5:d0:95:8d:4c:e3:03:01:7d:9a:94:dc:0d:6b:aa:f0:52:
06:f0:92:92:92:be:f8:59:cb:35:fe:57:a0:d6:6d:58:9f:e8:
76:85:63:8e:5b:3b:23:c6:a7:99:d5:cd:07:c0:d0:78:e3:d3:
34:0d:e0:a9:c9:a6:46:a9:86:f2:53:03:0e:03:fb:2f:16:08:
2b:e6:f7:be:84:dc:d8:e0:7e:be:fa:26:7c:f8:de:71:fe:25:
7b:71:9b:13:a9:81:ca:8f:b4:f3:08:c3:e2:49:73:f8:7b:be:
af:95:b8:b2:c7:b4:f5:48:54:6e:28:75:42:42:a2:25:a9:70:
f8:23:4d:5b:ab:5a:3d:d6:3a:55:27:92:b6:b7:c6:38:a4:82:
64:f8:7c:aa:35:ed:ce:70:73:a5:a7:b3:81:00:bc:46:65:e7:
02:b9:5b:0a:27:af:d5:40:21:9e:bc:b0:29:ba:65:46:77:53:
92:fc:e8:45:e2:33:07:0d:38:29:0e:10:b1:3e:55:6f:a0:f2:
cb:ad:54:74:c4:38:2c:11:b0:40:ab:96:63:e8:14:a5:b4:87:
b6:37:47:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:06 2025 by rpki-client