Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
File: tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft (raw, json)
Hash identifier: Cmnz0wOx0bGlwLqV4ShR6z5GIUUm8YqA8dtEp9qp3dM=
Subject key identifier: EB:47:5F:03:A9:B7:65:37:E8:03:B7:91:B7:9E:D5:10:A0:B8:83:2F
Authority key identifier: B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
Certificate issuer: /CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Certificate serial: 0198D2842F2EC70B56F082446116668F5736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
Manifest number: 0C0D
Signing time: Fri 22 Aug 2025 16:02:14 +0000
Manifest this update: Fri 22 Aug 2025 16:02:14 +0000
Manifest next update: Sat 23 Aug 2025 16:02:14 +0000
Files and hashes: 1: sEcAqep2NyLTkuYW41YUgHA9f4w.roa (hash: 3/7vZf5AuYQ6PDHss1zXReAWYubN+OUgtUWtMk8fZcY=)
2: tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl (hash: oLNNSFdRXVO6JT2ji/h6jarIM1a+UeH6WA6LyRAijoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 16:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d2:84:2f:2e:c7:0b:56:f0:82:44:61:16:66:8f:57:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Validity
Not Before: Aug 22 16:02:14 2025 GMT
Not After : Aug 23 16:02:14 2025 GMT
Subject: CN=eb475f03a9b76537e803b791b79ed510a0b8832f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:3c:9b:f9:95:f4:5e:47:68:3b:39:6b:9a:
88:4e:80:c2:2d:76:f7:7c:df:0e:49:b6:18:c5:d1:
bc:08:23:63:06:45:2e:08:56:be:3d:7e:ff:52:c9:
c1:80:f3:e3:69:7d:83:43:a5:66:61:e4:1c:26:7c:
0b:b9:04:47:db:32:34:6a:cb:24:2a:cb:e6:6f:d5:
4d:70:59:86:0b:30:91:10:78:6d:0d:dd:2c:83:8b:
b5:52:2a:14:49:06:db:cb:b1:68:e0:90:e3:8a:8a:
87:b7:78:79:c4:53:ef:16:da:9a:a5:db:13:d7:23:
2d:ea:87:81:7c:ef:ee:b0:86:ba:31:f6:61:f5:70:
24:49:84:c1:88:6e:0c:8b:5a:87:47:9c:1e:23:f5:
ae:6b:ca:a0:71:9c:3f:b7:6d:10:df:84:26:df:ba:
d3:ec:f5:09:84:c6:46:9d:23:82:a6:54:2c:29:b2:
20:dc:7d:e0:d4:4c:4f:05:63:2d:a8:5b:2d:6c:d6:
0d:bd:69:c7:c0:18:82:83:d5:bc:7f:4d:5c:36:87:
b7:f1:94:88:8e:4e:b8:66:83:34:e8:58:08:40:60:
c8:66:a6:64:31:cb:fe:ba:0d:44:02:20:30:f6:92:
19:7c:57:b2:2d:2b:8f:e8:e5:2f:e8:59:3c:1b:22:
16:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:47:5F:03:A9:B7:65:37:E8:03:B7:91:B7:9E:D5:10:A0:B8:83:2F
X509v3 Authority Key Identifier:
keyid:B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:77:73:c2:42:a1:3a:ae:04:94:3b:a4:38:d1:06:ab:08:7c:
9a:a3:62:db:d3:0c:15:03:f2:be:60:b5:f9:eb:0b:93:72:9a:
dd:33:f0:19:66:d3:e0:8b:e5:d4:b1:60:15:f4:9f:2e:30:63:
6b:c0:19:59:ff:43:08:44:74:00:23:b2:db:d5:59:54:77:fe:
92:f1:c9:33:7b:fa:ce:0d:ea:c2:46:78:6a:cf:07:b0:1b:6c:
21:ad:78:20:0f:a1:4d:f1:93:37:63:e8:95:42:93:e9:6d:1f:
21:9f:dc:ea:d2:b7:c9:29:cb:b0:b6:a3:75:68:81:b5:9b:1e:
49:f1:14:8b:21:b8:dc:92:ca:c4:5c:b1:a8:5e:1c:1a:ed:17:
8e:68:db:42:56:c0:b9:32:c4:7d:ed:4c:b2:f5:80:a7:b0:51:
c1:c0:7c:db:e8:82:1e:97:3e:c5:a6:e1:c3:c3:9e:e9:6f:17:
09:68:f4:39:1f:6d:dd:40:18:f0:ce:64:69:7e:20:27:f4:bf:
5c:94:94:19:a7:58:87:a1:02:13:cb:85:1b:10:b8:4c:33:30:
b5:68:31:04:24:1c:2c:de:c0:20:a7:46:c0:6c:ce:f7:3a:f6:
66:be:10:47:3f:95:d9:0b:d5:7d:0f:26:29:66:4f:24:40:1b:
44:0f:41:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 01:34:05 2025 by rpki-client