Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
File: tPgsjv3jS9meROrwcxtsUltFShk.mft (raw, json)
Hash identifier: NoBJMcK6nzFSQZpm4y/5Hm3uZmT69uGgeE2k8SB3Tps=
Subject key identifier: E5:54:32:0A:75:1C:84:65:07:25:4D:57:2C:1F:DC:99:B7:A1:5F:97
Authority key identifier: B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19
Certificate issuer: /CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
Certificate serial: 0198D6CD4E37E8A7B9786B7D0CF3BFA4B50F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 12:00:35 +0000
Manifest this update: Sat 23 Aug 2025 12:00:35 +0000
Manifest next update: Sun 24 Aug 2025 12:00:35 +0000
Files and hashes: 1: qLkt693aVmyKYJQGNdNxcAXdJ9w.roa (hash: D8tW4gMgnbvNPYFRk3OMpyQUNWmp5AcbpxituaqMb+A=)
2: tPgsjv3jS9meROrwcxtsUltFShk.crl (hash: lyqARZnCHY5vDyjT2akn4hbWN8KQdqF7JqTc97daYd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:4e:37:e8:a7:b9:78:6b:7d:0c:f3:bf:a4:b5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
Validity
Not Before: Aug 23 12:00:35 2025 GMT
Not After : Aug 24 12:00:35 2025 GMT
Subject: CN=e554320a751c846507254d572c1fdc99b7a15f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:91:9a:e7:2d:79:18:6c:93:a6:3f:1e:00:a1:
07:7c:f5:87:4b:22:62:a0:40:b1:94:5b:7d:95:78:
da:3a:fa:04:cc:f7:5c:3c:83:90:7c:d6:a2:0b:a2:
5c:b6:8b:58:70:21:e2:54:ba:05:15:a5:0c:72:8e:
87:55:25:c5:61:b5:33:1e:ba:f5:2e:66:5b:51:53:
98:a1:70:7b:d8:af:f2:0b:b7:96:13:64:fa:fa:e2:
8d:e3:f6:bd:1b:58:ff:6e:8d:7a:d7:b5:ee:01:60:
e3:61:81:53:17:99:8d:b1:1e:87:d6:f7:60:7b:ac:
57:f2:05:6f:e4:a8:66:a8:13:82:94:72:e9:0e:22:
57:43:a1:9b:40:7e:ad:8e:20:93:d9:1a:5b:06:d5:
04:69:5c:f2:f3:5e:9d:92:06:d3:03:1b:51:ef:fe:
33:52:41:b3:ab:42:0e:42:c7:b0:d1:b7:07:61:8d:
35:ad:8c:bd:d9:74:27:c4:1d:b5:91:10:2a:5f:c2:
ac:fd:bf:33:fe:22:f6:d7:87:27:1c:26:a2:fa:e0:
71:e4:1d:86:e5:6e:bb:8a:dd:5f:26:bf:96:25:ff:
1b:32:c3:49:2c:0b:ed:25:de:ac:c1:61:87:bc:38:
2f:43:2b:75:b0:de:3a:f2:76:de:1e:fd:2d:c2:ba:
26:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:54:32:0A:75:1C:84:65:07:25:4D:57:2C:1F:DC:99:B7:A1:5F:97
X509v3 Authority Key Identifier:
keyid:B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:09:d4:b9:d0:9f:df:af:57:f3:11:6a:c6:1f:88:78:7f:af:
2d:82:8c:1d:0c:b0:4e:a5:59:c6:7d:f3:ec:62:95:81:f7:7b:
d7:85:3b:97:8d:ee:fe:f3:75:fc:16:6c:5b:05:75:19:45:18:
e9:34:58:a1:dd:8b:af:f2:f5:a7:ca:d6:ec:24:24:cd:47:59:
4c:dc:54:7e:07:09:af:ed:2b:0c:6d:39:1d:5d:64:ac:84:c7:
c2:03:3e:43:11:4a:b2:6e:f9:85:8d:87:24:e3:53:eb:8f:04:
62:ad:92:81:a0:81:45:ea:7f:88:22:aa:d5:b5:bc:a5:b5:eb:
48:e4:89:c2:e4:09:37:6e:8a:3b:c6:1f:76:10:5d:20:cd:36:
a9:81:7a:b3:17:7a:69:22:a8:27:e0:6a:ff:a3:91:1a:19:ff:
21:03:81:ca:4e:85:b1:dc:48:7f:a3:67:06:b4:d7:0a:04:70:
5f:b1:e4:78:9d:1f:a0:81:6a:18:35:33:2b:41:b9:4e:a5:1d:
57:bb:5b:50:4c:15:de:a4:81:72:77:1b:eb:78:36:4a:27:d8:
53:6f:11:72:dd:cd:f1:12:cf:35:c3:a4:56:b7:c1:06:52:f7:
ab:0f:32:1c:be:3f:e4:28:4a:39:9d:36:a5:e7:08:d3:74:96:
ca:f9:7f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:39 2025 by rpki-client