Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
File: t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json)
Hash identifier: 4lXALPmqdDNp7Q4eeEXPsA2Zaiza1P+QmRAfrVQbt6s=
Subject key identifier: A3:04:40:A1:18:4D:05:DA:CC:38:03:E6:A7:2C:E3:87:44:8F:EC:6A
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 0198D515F9DF88710807DAE65A4223B99B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
Manifest number: 0F32
Signing time: Sat 23 Aug 2025 04:00:43 +0000
Manifest this update: Sat 23 Aug 2025 04:00:43 +0000
Manifest next update: Sun 24 Aug 2025 04:00:43 +0000
Files and hashes: 1: HO5kHHVnIPEFaMxltsULzo8s2Vc.roa (hash: Pi2xNmIKaW+pbH3+gTOC2OW0sYYGJ1NWu+Za1hJg9Rk=)
2: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: ZnsG0XrWe6i9er7Ev94Ewp3NNNadLmlltifKYbVpLBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f9:df:88:71:08:07:da:e6:5a:42:23:b9:9b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: Aug 23 04:00:43 2025 GMT
Not After : Aug 24 04:00:43 2025 GMT
Subject: CN=a30440a1184d05dacc3803e6a72ce387448fec6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:8f:8e:79:f9:85:20:97:76:5b:6e:01:19:
b6:76:e4:a8:ab:55:87:2c:95:36:88:d3:25:5b:b9:
4a:4b:45:eb:51:87:df:33:d5:cf:ad:83:aa:75:9d:
d9:3a:3c:41:76:f5:50:30:27:42:03:3e:9d:03:da:
ca:14:87:2c:74:30:ba:3b:0e:88:d8:98:e8:fb:c2:
7f:5d:9b:56:78:33:4f:2d:ff:99:ab:c0:cf:c2:67:
8d:0d:9e:4d:27:76:1d:8d:43:15:28:ba:fa:76:ad:
a5:f2:4c:42:9b:8d:31:69:88:1a:0f:56:5d:7d:7f:
7d:54:da:9e:f6:8c:30:9d:09:47:8d:c3:49:e5:db:
08:39:6e:6a:1c:17:ee:f0:4c:8c:01:93:32:d6:46:
b1:c0:d2:70:0c:c2:81:17:e5:95:29:82:6e:00:12:
b0:90:c0:78:4d:95:f5:e5:ac:50:33:1b:10:6d:fc:
a2:1f:df:15:ab:5b:cf:d0:ab:97:fb:ff:d8:a6:40:
2c:f2:c3:17:8b:b7:01:ba:07:03:f4:4a:c6:03:49:
b3:26:25:06:9f:d5:cd:e0:6a:72:ac:32:46:35:37:
93:d2:46:90:41:28:89:2a:9f:45:6e:31:85:bd:b8:
c7:da:c0:36:79:27:3b:83:d5:29:e4:96:fb:3b:5a:
f0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:04:40:A1:18:4D:05:DA:CC:38:03:E6:A7:2C:E3:87:44:8F:EC:6A
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e8:82:63:ce:ad:3b:38:a1:c1:d0:1c:54:c3:b7:08:c3:99:
77:06:47:52:9e:c4:24:70:43:1c:5a:be:4d:f1:69:c9:99:9b:
63:00:f7:88:66:a5:47:fc:e2:05:4a:1a:3b:d7:57:40:0e:18:
0e:ac:bc:73:d6:77:8c:5c:29:ed:cf:d0:2a:3a:fa:62:59:c8:
5b:c2:7c:65:81:49:80:d2:bb:28:f7:fc:36:bd:32:d3:85:37:
7e:5d:5f:2a:88:67:d0:e2:92:55:97:c9:fc:f2:b6:1c:c6:9c:
80:e7:4a:43:ba:8d:44:b4:1c:2a:83:d0:b0:d1:25:6e:a1:1b:
bb:98:bd:36:89:24:bc:b8:f9:98:19:47:bb:fd:e0:03:38:e3:
df:6a:41:81:85:94:8f:c1:d9:4d:21:64:4a:62:4c:75:55:dd:
a7:a0:a6:0d:7b:6e:e3:8f:09:c3:44:23:1d:bd:07:a8:83:02:
53:4d:a5:41:5a:86:8a:b0:08:3a:a0:f1:8b:97:54:3a:41:d1:
fd:1f:aa:3f:a3:8a:f2:29:1d:e7:ac:55:d9:5a:1a:25:8a:c9:
9d:46:76:0d:38:b5:e6:24:79:e6:ce:34:5f:09:c9:dd:72:9c:
d5:1f:fc:84:54:82:c3:89:12:c8:7a:bd:47:7b:fc:a4:e8:69:
2d:65:0d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:51 2025 by rpki-client