Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
File: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft (raw, json)
Hash identifier: 7Fw00/y2hi5R56K82JxhZfpZOyR6nJ00vP4bgy2XywM=
Subject key identifier: 41:B5:C9:80:F5:46:47:55:1F:C4:E1:6E:27:9F:28:84:8F:B2:CD:E2
Authority key identifier: B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
Certificate issuer: /CN=b522787599f1798e245f993f8cb8182f99cfd104
Certificate serial: 0198D4A7B419F23A834E6D0CE736971FB236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
Manifest number: 0DC6
Signing time: Sat 23 Aug 2025 02:00:17 +0000
Manifest this update: Sat 23 Aug 2025 02:00:17 +0000
Manifest next update: Sun 24 Aug 2025 02:00:17 +0000
Files and hashes: 1: 2o-thtsUmdvMYHtv9qjNUTl4ar8.roa (hash: lFf88qPAFyfJ0i5OxU8GOvf0pF7V0Wi7poD5MDkBh2U=)
2: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl (hash: AoVbQtYryLvLja0jpsFHb8zx/GxUJR79uHFQt9txe1k=)
3: xzr06xbQWPKGyePi4W8ezv0xyXU.roa (hash: r6Ttugun2Irp6PGhhAikFJmsuU2fRdTtE284A/50Ue4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:b4:19:f2:3a:83:4e:6d:0c:e7:36:97:1f:b2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b522787599f1798e245f993f8cb8182f99cfd104
Validity
Not Before: Aug 23 02:00:17 2025 GMT
Not After : Aug 24 02:00:17 2025 GMT
Subject: CN=41b5c980f54647551fc4e16e279f28848fb2cde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:33:39:28:9c:38:51:b0:15:ba:42:c3:27:9d:
bb:9e:f7:fe:25:f1:bc:3f:be:b2:32:0b:6d:4e:9b:
76:a0:6a:6b:36:47:b0:db:8e:27:6a:73:b0:89:79:
c3:7f:16:0b:47:51:c8:88:df:54:55:86:04:c3:bf:
bb:0b:c6:90:27:e1:30:09:b4:ff:e6:10:a4:60:5e:
d2:78:fb:c7:2b:48:83:10:70:ed:e9:12:f5:d4:6e:
5c:02:7e:ed:e4:5f:97:4a:f3:9e:62:99:0b:da:bb:
7b:52:5f:55:d5:15:88:19:28:90:a0:f2:44:82:fb:
85:e7:a0:af:b1:26:36:67:bc:32:8d:c9:0b:89:29:
b0:0d:c4:7d:2d:7e:42:c1:02:58:05:05:af:78:2e:
93:7e:04:bb:c3:0e:3c:21:44:17:eb:b6:a7:a5:0f:
80:b0:d8:95:c9:e6:5d:70:ac:29:6f:29:9d:5e:7b:
22:b5:f4:8e:f8:f4:9f:74:b2:ea:6b:0b:a7:ca:22:
bf:83:73:85:9c:c3:e8:62:ef:b4:35:f9:5c:78:66:
8e:f8:10:3b:3b:1c:e9:ea:c2:ef:cf:d5:f1:9e:7b:
e4:54:b8:8b:29:ec:28:95:e9:de:a0:d6:8f:65:88:
70:6b:0d:df:d0:97:6d:34:3e:75:e6:ce:b3:9e:d8:
b7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B5:C9:80:F5:46:47:55:1F:C4:E1:6E:27:9F:28:84:8F:B2:CD:E2
X509v3 Authority Key Identifier:
keyid:B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4a:95:66:71:17:55:e9:e6:36:0d:77:43:48:0c:67:79:b1:
28:86:a0:cd:64:f9:c6:16:4f:19:c8:c8:62:b3:9a:5b:14:af:
40:2f:f7:3f:70:62:38:2c:84:e0:cd:47:7b:5b:95:2e:5c:cb:
30:71:fa:39:92:6c:33:e7:89:f0:94:84:e5:4b:a7:31:89:67:
26:14:06:c8:5e:71:58:9a:01:61:f3:3f:76:68:10:39:ea:c4:
4a:9c:42:a2:c1:03:58:fc:3f:57:4d:16:fd:09:40:6d:e5:44:
d1:02:aa:88:94:22:71:7a:72:09:fc:af:98:54:d3:9a:29:16:
14:24:a5:8b:74:53:11:01:1e:b4:3a:ea:da:81:df:47:d4:11:
09:93:fe:ed:06:4e:c6:9b:52:33:cc:64:ef:9e:22:3b:4f:05:
2e:cc:e6:9c:27:89:74:38:44:f6:16:43:ef:05:64:b6:d4:a1:
9f:02:e5:1c:49:8c:25:07:b0:6e:61:92:59:da:9f:bd:34:75:
f5:13:54:a6:95:5c:91:df:9b:7a:d0:b6:08:92:16:de:62:ac:
0c:8c:3f:19:dc:49:09:c8:88:c2:71:32:10:06:48:fd:41:1b:
6c:5a:96:4d:95:af:d2:b8:d7:88:ad:90:8e:11:83:76:fb:c3:
69:2b:97:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:54 2025 by rpki-client