Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
File: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft (raw, json)
Hash identifier: vPuuCs6dJA9+ZbUF0yIOiiV0fDIFrLRV93ZHTgsOwuw=
Subject key identifier: F4:4F:78:42:B4:77:AF:FC:1D:82:F2:A7:63:69:53:C4:CC:74:DC:72
Authority key identifier: B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
Certificate issuer: /CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Certificate serial: 0199518A619DE2AAE58E77AEA8A11B8C9713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
Manifest number: 1376
Signing time: Tue 16 Sep 2025 08:00:47 +0000
Manifest this update: Tue 16 Sep 2025 08:00:47 +0000
Manifest next update: Wed 17 Sep 2025 08:00:47 +0000
Files and hashes: 1: 9ykTfaxNeEIbk7wOARPuxoyYN9I.roa (hash: t511WQ9hIp1WWZqq1Z1Tp5plKXaqmdK3FlJidSm8B5Q=)
2: TVu5aQ7CXqbPlsSn9wNLY8tYilE.roa (hash: B5zfotvyVUd7f8T5ZgXVly2iMRkx4aTHfTXgfsPh/CI=)
3: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl (hash: PrWp+0+2R1iUhy1fO59FIgOwqrnVykCouBW0T0RBUAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:8a:61:9d:e2:aa:e5:8e:77:ae:a8:a1:1b:8c:97:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Validity
Not Before: Sep 16 08:00:47 2025 GMT
Not After : Sep 17 08:00:47 2025 GMT
Subject: CN=f44f7842b477affc1d82f2a7636953c4cc74dc72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:db:71:4e:f9:b1:dc:e2:2b:2f:cf:74:71:3a:
c2:02:18:93:49:4e:08:0a:c0:fd:af:63:26:c5:24:
c4:4c:0c:83:c5:11:74:04:a1:e1:28:65:51:d3:b8:
2d:2b:37:20:75:d6:aa:37:1f:b2:f6:75:08:60:f1:
36:cb:6f:88:c0:9b:5f:43:be:b8:5a:29:ee:14:80:
3a:eb:f8:6d:ce:83:6a:d2:a2:c3:f3:0d:85:82:63:
c3:56:8b:35:e5:04:52:2f:ef:58:4b:2f:11:38:5e:
2e:27:08:79:33:dd:f9:f9:e9:d2:fb:94:d8:e8:aa:
3c:da:70:9d:53:b9:2c:e7:76:a5:56:ec:24:75:44:
96:9b:e1:a3:b2:c5:03:ea:45:0c:38:72:4e:b2:ed:
d2:26:24:b9:24:2a:ce:39:f5:86:ea:23:23:a1:95:
23:b8:24:30:3a:aa:d9:eb:de:70:5f:f8:5e:3e:d7:
04:e8:7f:e7:c6:7c:2c:6b:23:dd:de:5b:6d:a9:bf:
d4:f2:06:ea:0b:29:8d:27:07:ac:09:a4:14:03:d4:
91:28:70:f2:b5:46:bd:2e:9d:4f:37:1a:e3:aa:0b:
80:d0:f7:bd:ab:ea:77:03:66:d2:b1:59:41:79:0b:
e9:5a:69:f9:6e:d8:6a:fe:02:63:ef:1d:54:7c:86:
f2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4F:78:42:B4:77:AF:FC:1D:82:F2:A7:63:69:53:C4:CC:74:DC:72
X509v3 Authority Key Identifier:
keyid:B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:bf:58:ae:b6:32:38:fa:dd:ed:54:81:9d:8f:e5:0b:96:a3:
41:8a:bf:31:3d:aa:2e:7a:aa:be:c5:db:ee:31:60:3e:f2:f4:
bd:64:3c:9a:00:77:4a:46:d5:fd:eb:4a:6b:55:81:a5:71:21:
97:b0:e6:5f:f7:71:68:3b:99:81:5b:20:df:35:82:ea:01:1b:
e7:1a:8b:ca:b8:ca:08:79:29:7e:b0:9f:31:28:f7:9f:46:e7:
7d:91:6f:66:e1:3b:29:27:a3:2e:da:5f:8d:3b:37:87:97:20:
52:12:2f:fa:5c:85:0c:7f:a0:0c:15:ec:1d:26:a3:71:bf:cc:
02:a3:fe:86:02:04:28:40:ea:ea:37:7b:25:56:13:97:7d:66:
3e:55:4a:70:60:54:54:ee:d1:98:b6:19:d2:66:ea:46:01:49:
37:76:97:9e:14:ea:2a:13:08:8b:ac:ed:a9:dd:a9:9e:85:86:
96:38:f0:0a:c9:0b:22:00:8d:49:4e:2f:d1:b5:00:1a:ce:3a:
50:38:c4:ad:51:75:9d:c4:04:6f:36:d3:9c:49:dd:2d:16:dc:
58:2e:bc:a9:8a:62:ae:d5:77:b0:cd:37:40:88:24:72:f3:70:
19:f4:5c:29:7f:23:18:7e:84:6d:02:af:62:4f:b3:7d:f2:ba:
16:98:a4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 16:13:54 2025 by rpki-client