Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
File: tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft (raw, json)
Hash identifier: 8AiMLPHlInJykRHbUogIwWZquJ2M/jsysAUPdrrrTbo=
Subject key identifier: 18:82:D9:26:13:B7:AD:FE:73:5D:91:82:06:94:5C:ED:75:26:92:A8
Authority key identifier: B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9
Certificate issuer: /CN=b61b7974e97ab93791240734a19fb9ae7445cbd9
Certificate serial: 019848529331455986D077D849098ED8A005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
Manifest number: 1053
Signing time: Sat 26 Jul 2025 20:00:27 +0000
Manifest this update: Sat 26 Jul 2025 20:00:27 +0000
Manifest next update: Sun 27 Jul 2025 20:00:27 +0000
Files and hashes: 1: KS8RslAPEYL2MOaeQ2coeWMc0Gs.roa (hash: Lm70YO9Qmcp4xR0fEfPDxvBSHKReqF8+K4qP2dqdms8=)
2: tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl (hash: wUWRoNlYpjW0L6jcg4bDCwOGNsxYPorzOtfojxBfCrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:93:31:45:59:86:d0:77:d8:49:09:8e:d8:a0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61b7974e97ab93791240734a19fb9ae7445cbd9
Validity
Not Before: Jul 26 20:00:27 2025 GMT
Not After : Jul 27 20:00:27 2025 GMT
Subject: CN=1882d92613b7adfe735d918206945ced752692a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:dc:40:4b:69:27:6a:72:18:38:d6:c3:b2:
ac:e7:a9:6f:ca:28:9c:c1:4b:7d:0b:b8:0b:32:6a:
d6:fc:fb:2c:b4:52:2b:22:9b:b9:17:cc:28:95:6b:
46:b8:4a:c0:a4:af:43:97:54:8a:09:b3:87:61:35:
ae:73:1f:7f:24:66:f3:0c:22:53:6c:02:70:07:ac:
b2:0e:7c:d0:04:7e:e5:4d:83:16:9c:61:77:0f:f4:
14:33:2e:67:45:3c:6d:ab:b4:30:a3:7c:9c:64:d3:
af:e4:71:81:f9:3a:53:7d:a3:95:0d:57:5f:18:60:
5c:d9:99:32:10:70:04:33:9a:46:30:d9:fe:28:cf:
33:69:0e:d1:68:d5:99:b3:02:a7:03:f4:8f:43:0f:
1a:9e:f8:88:e0:9d:8c:e3:cb:a7:0d:91:5d:2b:c3:
fc:cb:c1:cf:32:03:42:89:1a:be:4d:ff:3c:f4:6a:
ed:70:ce:8d:16:6b:90:ad:8d:99:b6:19:7c:32:69:
3f:f7:fd:33:95:cc:b1:12:c9:cc:3c:76:9d:f9:6f:
07:6d:ad:53:30:8a:22:60:47:63:a1:e3:5c:0c:55:
de:38:49:ad:5e:05:d3:f7:67:a8:38:75:78:02:1b:
bc:49:90:02:7d:c8:26:82:ac:37:f6:05:26:b1:54:
1d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:82:D9:26:13:B7:AD:FE:73:5D:91:82:06:94:5C:ED:75:26:92:A8
X509v3 Authority Key Identifier:
keyid:B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:48:84:92:3b:2e:84:55:bd:ed:db:d7:4b:5a:9a:41:da:76:
09:c9:90:f4:9a:8a:5d:9a:25:b3:79:7f:7d:f2:be:33:a3:a3:
e4:f7:19:76:74:9f:f0:80:fc:ab:43:65:6a:b1:58:75:64:b2:
af:f4:0f:39:99:de:a4:38:c3:8d:8d:e2:56:a1:77:79:a1:82:
c2:52:fa:a6:54:df:59:a9:b9:2c:13:53:0f:c2:84:e4:37:29:
57:a5:7a:03:8f:86:6b:12:0b:d8:e4:ab:c2:94:59:95:74:17:
77:f3:a8:cd:5b:f9:00:8d:f9:ef:40:9d:60:a5:ca:c4:4b:7f:
75:70:b4:97:3f:be:f3:3e:5e:8c:8e:1d:53:3d:ab:25:79:2d:
b9:90:65:a2:9f:1a:ee:e6:ca:37:ac:6e:27:2c:a0:61:a5:f7:
ef:8c:c4:f4:2f:84:92:72:2d:72:aa:69:16:98:4e:ab:3e:22:
17:11:6b:c0:36:fe:a6:2e:71:19:83:9a:5e:b1:92:04:63:06:
c8:9e:3d:35:29:f8:9f:0d:d2:5d:8f:37:04:2a:b9:63:32:48:
45:92:0b:70:12:5b:56:ec:69:24:3b:9f:05:2d:08:0a:12:1d:
44:a3:97:2d:59:c1:eb:df:80:1e:d5:4c:3a:98:80:22:6f:bc:
f9:e2:81:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:08:11 2025 by rpki-client