Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier: 5lWj4QLKLWdfN8NQnt84csrFL75pEiSQ8vkZXomYN2U=
Subject key identifier: AE:11:FE:D0:0C:28:2D:F2:46:9B:02:DD:E5:20:D0:DE:9D:42:5C:E7
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 01984A40F00BAB1575D39FC8C3A119A2F783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number: 054B
Signing time: Sun 27 Jul 2025 05:00:26 +0000
Manifest this update: Sun 27 Jul 2025 05:00:26 +0000
Manifest next update: Mon 28 Jul 2025 05:00:26 +0000
Files and hashes: 1: JboF5duYkSjIw0cFCDow2D7hhYA.roa (hash: 5ee85IvEdLLZLBu0IK/0DK9QgLyt71g8oPTMmxnM7ss=)
2: bPHOfPhRt9UxNoPYUZyx6NkEcPE.roa (hash: l5CD77LRDYrviJN2I+kUm6dy7C8YOi2kiqH568j84ZE=)
3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: HsaAKjhyFbUt01LPWa1ZUOvDGZAtl3XUHFyNctoAS0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:f0:0b:ab:15:75:d3:9f:c8:c3:a1:19:a2:f7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: Jul 27 05:00:26 2025 GMT
Not After : Jul 28 05:00:26 2025 GMT
Subject: CN=ae11fed00c282df2469b02dde520d0de9d425ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:62:78:f4:9a:bc:2e:dd:5a:71:b6:ad:9b:7d:
83:4f:d6:ca:c6:cc:b0:46:6e:92:2b:6d:29:18:13:
8d:59:f1:d7:cc:c3:1f:f1:8f:9c:dc:8e:06:1d:ff:
57:62:38:35:9a:a9:d7:9b:c0:00:bb:d1:ac:b2:f6:
0f:23:cb:14:cc:a5:19:b0:5a:b8:b8:03:1f:4d:7f:
5d:40:8a:aa:1b:c0:64:cd:c4:c9:e9:7a:ef:a1:ec:
f1:55:d8:cd:ad:da:40:fb:d4:c2:82:82:41:1a:fa:
e7:19:d3:7d:54:20:a3:01:fc:d3:2f:98:26:78:2e:
f0:db:86:67:db:59:a2:8b:cc:b2:23:cf:08:e0:c9:
eb:45:33:c8:fe:6f:c3:b5:bd:47:9a:a5:9f:c5:46:
95:b1:9d:03:57:69:6a:b8:02:db:81:a1:83:ec:5c:
96:73:39:ea:fa:15:9a:aa:e5:d9:c8:ee:5e:8a:38:
fd:94:fd:98:9a:8b:b1:54:bd:0c:d7:6e:22:38:66:
66:da:3a:b2:a7:e1:8a:a6:91:f7:78:6a:f5:53:a4:
1a:bf:61:0c:fd:76:f2:12:99:26:80:0a:dd:15:42:
bd:4a:f3:ce:8c:79:3c:9d:13:61:21:a9:ac:22:1d:
36:09:a6:90:c9:9a:bb:d4:38:5b:dc:eb:db:a7:00:
f4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:11:FE:D0:0C:28:2D:F2:46:9B:02:DD:E5:20:D0:DE:9D:42:5C:E7
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:37:48:3e:23:3a:6c:49:f8:6d:13:4c:db:3e:6f:c6:c6:d9:
fc:13:95:e6:50:fb:fc:37:d0:c7:8a:77:34:7e:9f:66:40:6f:
49:15:df:91:60:1b:5d:97:e2:34:76:d0:32:b9:e1:3c:63:f6:
f4:55:b1:e9:f3:12:0f:36:11:82:5d:c6:85:bd:30:0d:14:96:
09:53:e0:33:f8:0c:19:38:3b:a2:2b:2a:7b:b9:3f:49:c4:a6:
f3:1d:d0:e7:3c:0d:6e:50:1e:10:7c:75:3d:60:af:cf:7b:16:
1b:df:cb:ca:31:12:08:9c:7f:91:ed:ab:66:d7:5a:ce:90:3b:
45:1e:e4:2d:09:60:29:a2:39:97:fa:94:fc:5a:e1:fc:8c:c4:
e7:9f:d6:46:34:69:bf:7d:df:52:b6:b3:76:33:52:e2:a2:1d:
b1:94:59:93:a8:f8:66:10:b5:84:54:9f:80:ba:10:0c:ad:6d:
20:07:aa:3f:fa:72:65:68:79:61:71:52:a3:e4:64:d6:d6:a3:
ce:aa:e0:39:fb:45:ad:85:68:d9:13:c8:2a:89:d2:bb:ad:10:
44:18:68:19:4f:e2:df:24:8f:1e:c0:e7:ec:27:91:89:0b:e9:
5f:e8:cb:ce:08:20:04:d5:d6:2f:5f:ac:27:f0:89:8d:c0:6e:
43:1d:60:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:41:03 2025 by rpki-client