Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json)
Hash identifier: 9H7XWpwsmoY09SZQK65/64wKZaKLmnlt0C3wRplRXvQ=
Subject key identifier: B6:EF:F2:A7:F2:2C:B0:7B:E0:A9:A8:D7:BC:9D:0E:E9:F3:91:EB:81
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 0198D960AE49F9AD2713BB0149683DBB46D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
Manifest number: 1653
Signing time: Sun 24 Aug 2025 00:00:48 +0000
Manifest this update: Sun 24 Aug 2025 00:00:48 +0000
Manifest next update: Mon 25 Aug 2025 00:00:48 +0000
Files and hashes: 1: F0xtYGfQ_s_LJkUkk89IHcL9J5M.roa (hash: JVjlGGRIJlPuTdOW/N8SfdRvr3fAH3HHybxJ5aP4RD0=)
2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: VzY62lLqj1LT6+lJJ4BVlLHiDgzRxBojnV0MKTgqfL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:60:ae:49:f9:ad:27:13:bb:01:49:68:3d:bb:46:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: Aug 24 00:00:48 2025 GMT
Not After : Aug 25 00:00:48 2025 GMT
Subject: CN=b6eff2a7f22cb07be0a9a8d7bc9d0ee9f391eb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c2:36:61:2f:89:01:03:f8:39:3e:be:cd:e2:
c1:9b:a5:fe:2b:3b:22:1a:cd:5c:cb:fe:4b:30:a9:
d7:4d:c9:64:b5:cb:c0:67:69:d1:ea:c2:12:69:60:
01:cc:83:67:b5:83:16:4e:73:ce:93:c4:94:39:6d:
84:53:e0:fe:18:67:26:94:30:21:43:46:fd:f8:70:
8e:0f:5a:b2:80:be:e7:a3:e3:0c:e2:44:ea:bc:14:
67:2d:30:5e:94:73:5a:bf:58:78:52:34:da:6d:39:
f3:8b:1c:eb:a5:a3:03:48:84:26:ac:34:ae:98:d7:
1e:86:9b:2f:a8:9c:42:1e:a4:2a:4d:9a:02:72:79:
9b:9c:8c:d0:ca:2b:fd:2d:ba:fe:8d:76:a4:74:bf:
f4:df:41:7f:94:b8:38:eb:7f:c9:fc:da:91:2a:47:
95:bd:d2:ed:07:64:bc:41:c1:61:4d:a4:19:95:2f:
2a:3d:53:0b:36:33:ff:1f:9a:41:c0:b2:02:14:98:
86:e0:56:07:06:fa:7a:ea:b0:52:59:5c:3c:31:bc:
81:fc:27:3f:bd:3f:51:1b:6f:c7:80:1f:e9:da:ce:
4a:64:37:b8:59:c9:08:56:b7:8d:ae:d7:b9:a9:74:
ad:59:40:81:ba:58:ea:17:9e:2e:36:9a:3e:d1:8e:
2c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EF:F2:A7:F2:2C:B0:7B:E0:A9:A8:D7:BC:9D:0E:E9:F3:91:EB:81
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f8:9d:9a:84:c6:c3:f5:92:8f:a0:69:f3:9e:4b:5c:08:bc:
f3:4d:56:ea:93:92:4a:d1:82:41:e7:aa:22:00:5a:96:50:b0:
8b:8a:6f:aa:b5:d6:51:f2:dc:c2:25:24:bc:2c:7c:8e:8c:ad:
5e:5a:e9:2a:f7:d1:ec:3d:ae:1e:aa:ee:0b:0d:ec:8e:6f:9e:
2f:f6:24:a7:c4:d1:3d:60:89:99:86:43:a4:e3:cf:ec:7d:29:
78:42:0b:8b:5c:38:9d:1a:7d:fa:d1:b2:01:56:fa:bc:dc:e8:
8c:3f:bb:83:43:81:cb:ff:2d:9c:cf:6f:4f:e7:31:1a:a5:ab:
22:9b:5f:50:a1:8d:90:d3:a1:e4:41:03:a8:0a:e5:bf:fe:fb:
dc:b0:55:a9:43:03:67:c8:fe:d3:06:d2:b4:e6:e2:a4:1f:f2:
0a:80:3b:54:00:83:a5:31:82:16:06:2e:1e:70:1d:91:5a:ed:
d2:87:ee:82:d3:db:22:c3:43:b2:61:30:3a:25:ea:60:55:04:
e0:d0:b0:5f:af:19:97:7c:17:b6:94:dc:f3:95:e2:11:6e:f0:
c4:25:6d:85:60:d5:b8:5e:33:59:61:90:7e:01:63:0d:1d:97:
41:7e:b6:d1:5e:44:7e:f7:38:17:8a:5d:5d:87:79:77:12:0a:
06:4f:0b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:39:35 2025 by rpki-client