Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
File: TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft (raw, json)
Hash identifier: p10QCJnyE3E43Ouv/yr+BzOw6n2DP6kCOJKzfwCLU/4=
Subject key identifier: 18:99:0C:36:F5:E7:EE:CC:81:8E:2A:3A:69:40:13:D4:19:D8:CE:F2
Authority key identifier: 4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
Certificate issuer: /CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Certificate serial: 0198D583E7477DAEFBE2C20335C900158E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
Manifest number: 07E1
Signing time: Sat 23 Aug 2025 06:00:48 +0000
Manifest this update: Sat 23 Aug 2025 06:00:48 +0000
Manifest next update: Sun 24 Aug 2025 06:00:48 +0000
Files and hashes: 1: TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl (hash: 39wXw/sRElf0cTG9IAK/Ul1fqHGf8/4YWvbUD+R0otI=)
2: a1_YaYttWjaGLYAOwTU1B124_ig.roa (hash: r1QqFsjfIV7t/B0W29ko76bqFlpVUWuotDIF0AI7bKM=)
3: mcfk8AZWJCya46yWT4YFR-sBsBY.roa (hash: DDVJwmENIX53nxHmEPzaa9E/O7ROXFrfozoXEjZkIC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e7:47:7d:ae:fb:e2:c2:03:35:c9:00:15:8e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Validity
Not Before: Aug 23 06:00:48 2025 GMT
Not After : Aug 24 06:00:48 2025 GMT
Subject: CN=18990c36f5e7eecc818e2a3a694013d419d8cef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:52:57:b8:e8:87:cf:b6:f0:e0:ba:f3:7e:bd:
06:2a:e8:db:18:a6:25:e7:cf:a6:41:32:8f:23:87:
2a:1f:a1:c8:2a:84:61:2c:4e:12:53:5d:41:37:08:
e9:05:15:21:e0:bb:96:54:86:f2:22:ce:9b:0f:2d:
02:16:35:d6:14:23:1e:cc:96:34:47:87:ce:cc:7e:
8c:f9:af:c2:e6:b0:e0:78:f8:85:10:d5:fd:97:f5:
57:57:9a:ec:a6:98:67:7f:9d:c1:7f:5f:03:39:1c:
b5:69:63:fc:10:84:1f:34:8d:5a:ff:22:c4:06:5a:
6a:55:c2:7a:1c:48:09:5b:7d:7a:83:22:c4:cc:43:
74:77:c3:b3:57:63:8f:cb:9e:d9:97:47:0e:8a:dc:
41:ce:fe:e7:c7:1e:ca:0f:84:b8:82:24:fb:8f:6b:
a9:12:c8:b5:74:4b:93:e2:01:a1:37:fb:a2:20:a3:
df:8e:a4:10:a0:32:05:4c:c8:0a:ac:1b:e1:20:c6:
21:7c:09:f7:a2:68:46:ef:cd:f3:3d:02:35:98:19:
58:a3:20:8e:07:72:8a:ea:03:5e:54:46:97:93:0a:
7f:f1:0a:16:4c:5a:61:a5:3f:1a:d2:8f:b3:67:ac:
cd:f6:8a:28:1f:a3:59:62:1b:91:bb:b2:71:e1:7d:
a4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:99:0C:36:F5:E7:EE:CC:81:8E:2A:3A:69:40:13:D4:19:D8:CE:F2
X509v3 Authority Key Identifier:
keyid:4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b9:7e:fd:b5:9f:7d:d2:31:e8:ce:ae:05:92:1e:8c:bd:ce:
88:91:93:1d:68:d0:75:d9:17:ea:bc:2e:93:ed:5c:04:a0:05:
62:b3:b5:92:8f:f8:9e:65:02:cc:bd:b1:57:af:21:e8:24:3f:
79:77:e0:15:9c:8c:f6:48:24:4f:b1:5a:ba:91:57:09:f8:30:
35:f1:4d:5e:12:83:f0:0a:2c:fb:c8:ba:5a:5b:67:89:8e:b6:
1b:a3:eb:de:88:b0:9d:f9:73:8f:4a:3f:a4:32:f1:02:04:c7:
3c:3c:b1:e5:a0:92:8f:e0:19:1a:90:76:7e:6b:ad:c4:57:87:
61:61:7c:c9:20:52:b6:d3:64:8e:d3:15:e5:cf:37:12:9b:43:
a9:64:d4:44:54:43:6b:47:77:16:f9:ec:da:72:bd:d2:35:bd:
f9:8f:01:0d:51:73:01:b2:a0:9a:c7:c7:c9:e4:45:de:5f:cd:
97:99:ba:1e:87:1e:35:2c:75:5a:76:d3:17:d3:3d:f4:ad:d4:
7e:8b:65:cd:c3:32:a1:e1:62:1a:8e:f6:a8:69:56:d0:c1:49:
11:49:a5:ee:f2:47:cf:1a:9a:98:eb:d2:97:2f:b1:3a:a5:f6:
c0:a3:04:11:39:d0:df:d9:eb:70:b4:08:e1:50:ff:9c:d8:01:
ee:49:cf:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:16 2025 by rpki-client