Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
File: tBhner86ruA2zUrdd9ZhlvzeTG0.mft (raw, json)
Hash identifier: XJd7rnZwDeirTJnYsX6KXReRSvf6TKuYgjIpwPy6kkM=
Subject key identifier: 67:0D:CB:2C:DD:54:BE:AA:7C:4A:73:B3:AE:D8:D4:B8:D9:23:8C:1B
Authority key identifier: B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
Certificate issuer: /CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Certificate serial: 019847E5601669DD8E3BEC49A9F88BC73775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
Manifest number: 0ECF
Signing time: Sat 26 Jul 2025 18:01:11 +0000
Manifest this update: Sat 26 Jul 2025 18:01:11 +0000
Manifest next update: Sun 27 Jul 2025 18:01:11 +0000
Files and hashes: 1: GluX1bXAOCEKoiPGiqd94CJ3PnQ.roa (hash: Ni4Tstwu0GgIgTRS0r/kMJY1nK24hB/s3xhSSr7BatI=)
2: sUg9MVJbpnKjp6n_qVdxGGSeJB8.roa (hash: iazJ3Yw/lvASdOuiaEdBPRq3HWHdL5Kxvj+o3m8saWE=)
3: tBhner86ruA2zUrdd9ZhlvzeTG0.crl (hash: /8XoTRthFu0l2WWrmv6EHpzfQQz4YvjQcN4TAMJ+nOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:60:16:69:dd:8e:3b:ec:49:a9:f8:8b:c7:37:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Validity
Not Before: Jul 26 18:01:11 2025 GMT
Not After : Jul 27 18:01:11 2025 GMT
Subject: CN=670dcb2cdd54beaa7c4a73b3aed8d4b8d9238c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:06:29:0f:4f:15:e1:9e:11:bd:8c:48:47:
15:a4:09:41:0c:92:02:bc:6c:83:02:af:b4:b0:a0:
0f:20:97:a3:bc:b2:9d:df:7e:a6:9c:0f:6c:6c:7a:
e5:46:15:86:2e:aa:01:a5:d2:cf:65:30:20:ce:7f:
0a:4a:6b:90:0c:c1:27:dd:dd:4a:fd:0e:86:f4:eb:
67:24:01:c5:99:29:68:d1:ef:e8:e1:36:cf:f4:e3:
46:75:52:14:94:b8:cb:f9:a1:8f:17:a1:e8:fe:42:
72:10:af:11:f4:ca:78:54:02:a0:54:51:31:36:19:
0d:19:04:2b:e5:b0:0f:cc:73:fc:11:c7:fe:70:84:
a1:3f:f2:5f:9e:1b:00:ee:60:0a:ec:85:f3:7c:72:
7a:22:cd:e2:30:18:46:d7:54:0d:09:c7:5b:03:78:
cc:8c:4d:05:35:9b:d8:f2:07:52:cc:db:43:ec:d7:
ab:8e:ce:7c:8f:79:30:82:a8:55:e8:4f:c4:c9:43:
08:08:cd:89:c4:a4:a8:9c:71:79:2f:a3:b1:9a:fd:
3c:77:fa:e8:26:71:bd:f7:b1:a6:e1:3e:8e:2c:a8:
d8:a2:82:ce:d6:82:c1:03:48:5b:8f:20:65:75:4d:
f4:6d:8d:32:97:3e:c8:1b:9d:47:bc:9c:03:78:2b:
0e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0D:CB:2C:DD:54:BE:AA:7C:4A:73:B3:AE:D8:D4:B8:D9:23:8C:1B
X509v3 Authority Key Identifier:
keyid:B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:25:5e:51:a6:1d:4e:84:77:42:ba:ca:0b:5e:00:b8:8e:65:
e2:48:99:ab:66:c9:c6:7c:0f:3f:e4:fa:60:82:10:0d:33:8f:
1f:88:8f:be:b0:fb:e4:a8:ac:de:e4:42:4a:75:58:91:e0:ed:
21:73:fe:16:f3:b8:95:4c:59:6f:b4:63:aa:a1:f5:13:81:98:
3a:fb:e5:dd:43:b8:84:cc:b9:8a:3f:dc:6b:86:34:ab:af:8c:
4f:2b:e3:07:3c:8b:31:0e:e6:ac:d0:95:c6:dd:ee:db:fa:18:
ee:69:6d:a8:b0:de:04:c3:1f:de:96:ae:a9:bf:69:37:f2:81:
8d:c4:98:16:95:d4:31:84:3a:17:1d:0c:d3:1f:fc:de:74:b9:
9e:6f:54:d5:c8:8f:c9:96:8b:ec:80:fe:e9:7f:78:aa:76:a0:
d1:ae:3c:a3:2b:83:9b:9c:ec:f8:24:08:23:86:13:55:02:79:
73:e7:16:84:b7:15:7c:37:fa:12:98:0e:4d:18:af:47:d8:1d:
f6:2f:84:b9:f2:b8:f7:42:89:7a:c0:d9:1c:7a:27:f6:e7:6a:
5c:fb:8c:3e:38:aa:70:ed:46:18:17:fb:c1:75:17:94:a4:fb:
20:66:0a:e4:25:5d:0c:85:23:d3:17:5c:f1:ad:ff:1c:ba:6f:
43:d1:e0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:18:09 2025 by rpki-client