Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
File: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json)
Hash identifier: LHIU7dcpA57pJkDXfPhIU9WQbH9qOJuWlisPvLbvh5A=
Subject key identifier: FA:27:76:20:BF:F5:1F:F4:0B:85:AC:21:E4:FD:C6:4B:F7:A6:9D:FB
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 01983FF3EF00919DA73ADE01059EED72A8BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
Manifest number: 0863
Signing time: Fri 25 Jul 2025 05:00:07 +0000
Manifest this update: Fri 25 Jul 2025 05:00:07 +0000
Manifest next update: Sat 26 Jul 2025 05:00:07 +0000
Files and hashes: 1: 1QmmbYJZZWZoqiWNQVq4wZmhLNg.roa (hash: gVkThpG7tc6UKYu6nfIrbCxYB1OnM75XNE9Zf3BxXSE=)
2: Gm9NfecPR-RUq_slL2NKmzGqQ1c.roa (hash: tkU2/2KHzDAlfUyxsnryBif6WpEicFze6N39RJoBTkM=)
3: IdcqQLaLPNCQJzdTXpACnqYscnI.roa (hash: H+1S4n+OyXlFrQgh9A84gwVt0xMSOKKs5oiKIXtOgjU=)
4: OVQ5uPkYukiV8dv56D7X8vrwp8E.roa (hash: OWeiLtMHum8JXxqxvdWPi5crevEaVFFy1EtOqegV6tI=)
5: P8VDh_9fdYN8xXLvtJMOKaqZaBs.roa (hash: nMTrg+lyYaQ59OMP8FwWXirKWOtKtrNaOkuqtu/tSjc=)
6: Pq__l0a6HrBOcCXhEDnn7AV0g54.roa (hash: A1mBB7bcRpMOwkOKXDY7TtCFDZr1ayBKUG0wvvr/Zlw=)
7: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: ePKEBBSXDCWv4tY/JiaO1cvgAKj4/m3yWvmIRc4MsWc=)
8: qqV4lt6FTPnmuHdRaoUeaEC2b8U.roa (hash: HtCD/Cd4hhljqddcvUw+6pkmRGrV8qPj/FjkfpsV+Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:f3:ef:00:91:9d:a7:3a:de:01:05:9e:ed:72:a8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: Jul 25 05:00:07 2025 GMT
Not After : Jul 26 05:00:07 2025 GMT
Subject: CN=fa277620bff51ff40b85ac21e4fdc64bf7a69dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:6d:dd:12:58:31:cf:4d:f6:c0:9e:bc:e9:
6f:5e:ae:94:77:4b:1b:a7:b3:6f:d2:11:9b:c5:f6:
e5:da:32:0c:9d:43:5d:5e:68:28:11:e9:13:39:28:
d8:61:37:c4:bd:b4:b2:f1:0d:35:f0:36:43:35:88:
2b:ad:8d:0d:c3:02:8f:e3:9a:7a:b0:47:7a:74:f4:
63:e8:2d:e1:3b:e5:61:a0:0e:5b:4c:0c:4a:45:f3:
f0:bb:f4:1f:42:c2:e9:02:75:8e:89:28:1d:45:29:
ae:14:ff:4c:cf:34:0d:6e:96:cf:a7:87:2b:08:dd:
67:be:2b:00:4a:77:eb:34:e3:ef:87:67:59:57:96:
d4:36:8b:6e:b3:a1:01:08:c1:8d:45:0e:2e:21:4a:
06:ea:4a:02:a8:2b:3d:b0:6d:31:82:e5:98:a1:8c:
55:8a:da:8c:a9:51:48:b2:c7:e8:82:63:39:47:c6:
8f:3a:ed:13:95:c9:91:ba:d3:69:f7:61:26:2f:16:
23:c0:b0:35:9a:bd:6b:ba:99:23:1e:02:22:7f:06:
62:00:9f:c6:85:cf:01:7e:b8:3c:3d:55:9f:d3:39:
80:07:ec:55:35:c0:3f:5f:e7:1b:aa:52:99:db:b4:
d5:44:a3:7e:34:67:8a:a8:dc:2a:52:6a:b7:78:66:
b1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:27:76:20:BF:F5:1F:F4:0B:85:AC:21:E4:FD:C6:4B:F7:A6:9D:FB
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:79:0f:28:93:3f:1f:be:b1:09:52:b8:28:96:26:67:e7:9f:
f8:39:db:83:67:6d:81:5d:c2:02:69:88:52:8e:a1:a5:d2:2b:
23:71:1d:1e:0c:bc:31:01:29:17:8b:e2:d2:f5:fe:6e:71:4d:
2a:f7:38:1f:f9:7e:03:0e:58:f1:c9:10:bc:91:ea:58:41:4a:
b2:c0:12:67:4f:13:80:4b:89:da:ae:d5:68:3f:e6:88:08:70:
1a:e2:96:df:ec:a0:ee:8a:f7:0e:ba:59:df:47:fe:f7:5f:21:
00:80:b6:71:60:58:e3:c1:dd:5f:a1:be:69:0a:c2:84:cd:f1:
c9:21:a1:60:f6:1f:99:e2:94:fd:90:15:d2:ea:96:f4:63:4f:
f0:0b:27:be:0d:a6:9a:4d:79:26:30:5f:69:08:f3:6c:3d:99:
e5:ec:a7:4d:e2:2e:4b:ac:da:7a:c3:ed:f6:34:cc:9a:91:92:
22:56:dc:c0:aa:a0:5d:d8:c9:6c:1c:6f:46:cb:11:27:f7:e4:
76:a9:b8:ec:15:ea:b2:17:a8:86:3e:a9:ac:0f:1d:b0:5a:ba:
f5:35:ba:e1:c5:f6:04:da:d6:05:f4:fe:c4:87:2a:c6:cc:61:
a2:98:91:71:b9:c6:83:3b:66:6d:2d:2d:d9:50:19:73:ae:e3:
66:70:c9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:02:26 2025 by rpki-client