Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
File: Tk9mXUbWoqvwUh5csffEUcozeoc.mft (raw, json)
Hash identifier: dkUr04vl2bZEvgOTTMcVM8EmesJJVD9NNjvFsxW4Pl0=
Subject key identifier: 6B:B0:8A:DE:4C:92:7B:60:0B:53:0D:A9:83:7B:E5:86:04:08:40:24
Authority key identifier: 4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
Certificate issuer: /CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Certificate serial: 0198469B401B9B8A530858A0090209264ECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
Manifest number: 01E1
Signing time: Sat 26 Jul 2025 12:00:36 +0000
Manifest this update: Sat 26 Jul 2025 12:00:36 +0000
Manifest next update: Sun 27 Jul 2025 12:00:36 +0000
Files and hashes: 1: 1KxZYvxri1sxva3r2G7KLnG5z_Y.roa (hash: 9JXmyyV6BbeWSwFTBJAUkp5UHelZgOhj8wsWM2RqVyk=)
2: HrSejbS-39NivWEqBB6_ezmUBgQ.roa (hash: 8T3MTXu6asTJ46RNeuQMt6iMOXHZ2zW1uZEJeSesDDw=)
3: Tk9mXUbWoqvwUh5csffEUcozeoc.crl (hash: zNAU4qBffyvPByl6JVgTlwnHU1IxvPa5PhG4gR36IHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:40:1b:9b:8a:53:08:58:a0:09:02:09:26:4e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Validity
Not Before: Jul 26 12:00:36 2025 GMT
Not After : Jul 27 12:00:36 2025 GMT
Subject: CN=6bb08ade4c927b600b530da9837be58604084024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9f:a7:5f:55:20:a5:08:1a:01:da:76:46:c8:
35:3d:3b:37:12:04:43:0c:55:39:e3:03:5d:34:be:
9d:04:3c:71:75:6d:01:2a:65:8a:64:55:8f:32:98:
2e:24:bd:88:f2:69:c0:60:02:d8:22:e6:34:61:2e:
d0:74:d0:a2:ac:8a:2a:51:74:95:06:ca:24:b8:7b:
ef:20:d1:26:43:24:1a:c4:b1:fb:88:e5:ee:f5:9d:
d1:94:d4:67:9b:6d:8d:2f:f8:eb:b0:da:bd:e9:78:
5d:96:09:d1:13:af:3c:11:da:50:79:a7:15:50:32:
44:7e:d0:45:e5:50:98:2c:60:3c:b4:dc:cf:4d:9f:
90:9e:a1:fa:64:74:f2:04:09:c8:c2:14:e0:1b:09:
d9:97:2d:6b:a1:45:73:05:f7:74:5a:82:33:f3:f1:
b7:45:0f:e6:3b:84:86:f5:e9:f3:49:22:0b:8c:7a:
d3:c5:a6:5e:5f:b6:a4:59:92:98:0c:f3:c5:34:d7:
61:ab:c4:3d:23:62:74:64:e4:2f:17:cc:3d:cf:0e:
dd:d1:21:a0:d2:3b:64:9f:38:1c:5a:74:80:81:41:
8c:f1:47:f1:7e:33:6a:ba:74:cd:62:6c:9a:6c:8c:
f2:f2:78:7a:6c:eb:d3:20:ab:df:0e:75:f4:f0:68:
41:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B0:8A:DE:4C:92:7B:60:0B:53:0D:A9:83:7B:E5:86:04:08:40:24
X509v3 Authority Key Identifier:
keyid:4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:69:77:16:d0:55:a6:82:24:3b:10:c4:9b:2f:9f:63:0a:cd:
8b:03:53:11:7c:51:4b:0c:f7:75:de:37:80:2b:55:f8:42:7b:
5e:9d:b7:0d:00:26:3b:86:e5:48:27:c7:ed:b3:c1:34:14:b8:
0a:8a:52:86:ec:c9:c9:52:02:f7:9f:c0:1b:e4:eb:fe:cc:44:
02:7e:b1:a8:05:ef:06:cd:e0:43:3f:88:81:77:56:e8:20:6d:
a1:83:29:88:a6:ba:b4:51:58:32:33:f7:a6:da:98:3a:41:7a:
67:90:b9:50:02:a1:98:44:91:0c:4e:a1:41:95:dc:7a:73:e5:
99:49:7c:21:43:be:fe:ed:b4:4e:4b:87:6d:5b:b0:a5:a6:86:
3b:1d:5d:02:b2:6c:ae:25:56:f3:8b:c6:fa:dc:95:76:bd:8f:
f8:81:5c:a7:11:fb:9c:99:80:b7:f8:2e:dd:78:26:b8:2b:04:
75:05:36:24:d2:4b:c9:8c:37:c1:1d:e0:c7:30:ce:b6:18:86:
7f:5e:af:07:e1:62:46:16:c5:72:be:a9:f1:21:14:13:e2:a1:
18:06:64:b0:88:3d:b4:b1:46:3c:d1:4f:2d:d5:0d:1b:c3:46:
5c:e4:c2:db:a9:ef:1d:07:60:68:49:07:fc:b0:9e:ed:94:ef:
a2:00:aa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:10:09 2025 by rpki-client