Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
File: tgtXTwPZiBVfRLossHvH37RXzw8.mft (raw, json)
Hash identifier: G+gJbmLlAowgR+9SJm3OuZRnSPiNQXrOJzNfVYkt5/Y=
Subject key identifier: 50:4E:BF:0F:57:9C:01:70:4E:E2:75:00:03:72:DC:EA:1F:01:78:01
Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Certificate serial: 0198D473DF2CC4F5FF270E581F25290D7A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 01:03:40 +0000
Manifest this update: Sat 23 Aug 2025 01:03:40 +0000
Manifest next update: Sun 24 Aug 2025 01:03:40 +0000
Files and hashes: 1: BeOIJLd8_MIXUGufXTnw_YPsJgs.roa (hash: UFekJjmZxy4vjH3dPZliRBeAZT4NRRq/0IMLKsXu0f8=)
2: tgtXTwPZiBVfRLossHvH37RXzw8.crl (hash: tvdZ8q6jNaaaD10qsorMSatnydh3e7uf7S3UJg45RmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:df:2c:c4:f5:ff:27:0e:58:1f:25:29:0d:7a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Validity
Not Before: Aug 23 01:03:40 2025 GMT
Not After : Aug 24 01:03:40 2025 GMT
Subject: CN=504ebf0f579c01704ee275000372dcea1f017801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:10:a4:87:70:54:21:91:6a:91:bf:d9:5b:
9d:0d:d5:d0:ab:a1:54:29:8e:6b:bc:b6:e3:97:54:
d8:da:5c:35:54:7d:0b:4d:b5:cd:dd:70:f9:dd:31:
6c:84:3f:c6:54:21:82:24:08:fb:8c:54:49:92:1f:
f7:9f:ae:73:9f:3d:03:43:4a:08:71:2d:b8:8a:fe:
93:e7:fe:0d:62:82:79:32:25:c1:75:06:9f:73:fa:
3c:1a:f7:41:6f:9d:18:95:59:63:6d:68:4b:01:9b:
80:98:47:a1:cb:05:ac:42:31:9d:4a:aa:d1:b1:2a:
c0:08:3d:a7:dc:ba:32:b8:63:c8:76:2c:5b:2b:60:
b2:bb:a0:30:a8:89:79:41:ed:ec:92:d7:f8:5b:ca:
b8:99:37:5a:fc:28:73:9a:c0:1c:65:72:54:a7:6d:
a2:d8:de:dc:bd:92:73:ec:71:67:6f:ac:85:8a:d0:
d8:38:11:44:50:37:07:b4:8a:50:85:20:93:9a:70:
40:3c:14:45:f0:e2:70:46:f7:10:2f:02:b9:7a:ed:
eb:97:5a:c3:0f:87:9a:22:13:f2:5f:c9:24:11:e5:
1c:87:df:fd:10:4d:6d:99:de:7d:d5:15:47:9b:59:
97:dd:a6:ee:cb:9b:49:80:64:0e:98:59:e4:87:1a:
97:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4E:BF:0F:57:9C:01:70:4E:E2:75:00:03:72:DC:EA:1F:01:78:01
X509v3 Authority Key Identifier:
keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:09:af:b6:6f:04:9c:df:d3:1e:95:d1:ba:e0:b6:ae:36:63:
c5:49:8a:f0:88:46:49:cc:2f:36:79:eb:b5:7f:90:e6:22:19:
04:a7:a4:14:c0:62:e4:60:0d:df:70:5b:f3:9a:7b:37:a1:59:
cc:96:8d:a8:0e:55:b6:f3:fe:b8:82:30:69:4c:5c:22:54:b6:
48:92:1b:c9:c0:3a:13:27:03:51:5c:3f:5f:cf:71:bb:4c:51:
31:e1:b7:b3:1c:34:64:44:42:12:2f:da:a5:82:39:f0:af:71:
ab:f9:ad:60:67:42:7d:8c:26:7a:db:05:f4:2b:2a:20:b5:8e:
30:87:c7:8f:b2:56:98:48:29:7a:d2:a2:07:1c:5e:a2:58:d3:
58:e0:01:35:da:cb:7c:92:21:22:12:6a:8c:ab:c9:ef:9b:7d:
66:8b:ae:fa:2d:7f:50:b7:88:6b:60:4e:26:5e:e8:67:e6:9e:
38:02:05:ad:90:c9:06:a8:26:83:24:1e:7b:4a:da:d6:bf:60:
9f:0f:73:12:b9:f4:ea:a8:fb:bc:07:4b:62:c8:5f:78:d1:7f:
30:73:31:b9:03:f6:78:65:0c:63:9d:d5:6a:10:a7:7b:c0:a1:
29:bb:69:44:2e:f8:31:6a:8b:58:25:9c:07:37:99:6d:17:d4:
68:a1:f0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:16:00 2025 by rpki-client