Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
File: tpJFTBZpZIbPBx7Rjnl240BJCfs.mft (raw, json)
Hash identifier: OYtvAxGhayqAJJwHRk1JaOtSQwd9VARuavDJLVnVVnM=
Subject key identifier: D1:46:3B:A4:42:E8:17:57:B5:CD:99:D9:D0:38:F7:85:FF:BB:C0:AA
Authority key identifier: B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
Certificate issuer: /CN=b692454c16696486cf071ed18e7976e3404909fb
Certificate serial: 01984AAF1926C41DFC7A36A2A1FD6BB2B336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
Manifest number: 0A50
Signing time: Sun 27 Jul 2025 07:00:45 +0000
Manifest this update: Sun 27 Jul 2025 07:00:45 +0000
Manifest next update: Mon 28 Jul 2025 07:00:45 +0000
Files and hashes: 1: 5czF8Od9k1lGzWbwlN6JD9EQv3o.roa (hash: xQiXSp/PKEr54Bt774G49z92F24A1eFshYT3vR6Fw2c=)
2: tpJFTBZpZIbPBx7Rjnl240BJCfs.crl (hash: drnl6cHtH5eQvNHILIxYxQ5JEe5T5M4uw1BxO4elTeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:19:26:c4:1d:fc:7a:36:a2:a1:fd:6b:b2:b3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b692454c16696486cf071ed18e7976e3404909fb
Validity
Not Before: Jul 27 07:00:45 2025 GMT
Not After : Jul 28 07:00:45 2025 GMT
Subject: CN=d1463ba442e81757b5cd99d9d038f785ffbbc0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c9:4d:a3:d7:37:9c:fb:84:54:05:33:bb:32:
0c:cb:51:ec:f8:f8:4c:c1:f3:85:16:4b:96:e4:2b:
c4:9a:f1:7a:0e:07:53:db:da:16:8e:54:98:b8:ff:
d2:d1:3c:5b:29:37:27:a2:36:6d:b8:79:ac:26:c1:
9f:37:ed:a9:a5:21:b8:0e:99:62:fd:73:de:12:4a:
bd:2c:9d:50:12:b5:a9:4a:2d:cc:48:71:40:26:ca:
59:84:92:7e:10:e8:02:4e:8b:a6:f5:c8:86:9c:70:
aa:ac:e4:58:0f:9f:db:9c:53:51:ae:21:87:13:ad:
d4:20:cf:1a:bd:a5:6b:21:a8:d5:ed:0c:9c:76:43:
8a:d7:ab:70:dc:0b:55:9b:ef:cc:bd:24:3d:90:97:
fe:1a:8a:ba:19:07:22:7d:bf:ab:2d:7b:fb:c6:0a:
13:bb:79:c4:a2:06:9b:9f:21:92:fe:ae:7c:0b:59:
b7:40:79:ba:0c:31:91:e1:54:11:bf:8b:14:45:b6:
80:f6:10:a0:3c:d6:64:1a:9e:04:1a:90:a3:06:d6:
55:36:bd:cb:96:ce:d4:4f:81:98:77:ba:9e:bc:84:
d6:da:cb:a9:b3:3f:ab:ac:4c:8b:e4:13:b9:64:6e:
b2:47:3e:7f:20:37:4d:52:7f:0f:94:f0:79:9b:83:
aa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:46:3B:A4:42:E8:17:57:B5:CD:99:D9:D0:38:F7:85:FF:BB:C0:AA
X509v3 Authority Key Identifier:
keyid:B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:87:61:2e:e9:c6:b7:eb:fa:21:00:ab:c0:b2:9d:73:ec:8c:
3f:e7:ba:44:2e:c7:ae:fd:25:29:13:30:d1:92:e9:a3:da:41:
86:8e:e1:8c:6a:f4:8c:4b:75:8a:59:a0:bf:36:aa:c3:61:bc:
3d:37:28:e1:c1:d1:ff:10:9d:25:48:7b:23:94:b0:9b:0c:bb:
8c:ab:2b:ea:fa:2f:90:dd:e5:e5:2c:00:2f:22:72:67:bd:6c:
9b:f7:8d:04:67:7c:51:66:85:77:a0:5a:bf:e2:93:d6:77:4c:
62:25:3a:12:7f:a9:ff:92:8f:e7:d4:5f:7c:d5:0a:22:09:fe:
0e:3d:2d:84:46:37:d5:5d:b8:19:ab:fd:b9:bd:99:07:4a:59:
3e:23:14:19:5f:7c:4f:cc:45:28:32:bd:6a:e5:57:fd:be:62:
ed:b1:bd:dc:4f:1e:10:6a:00:5a:e3:74:6c:4a:52:f6:69:42:
e2:a4:c4:fd:d9:33:bd:33:ca:79:ae:68:26:aa:fc:0a:f5:cb:
2c:5f:d9:83:15:54:2b:ef:25:e1:bb:f6:71:51:ee:bf:94:0c:
fc:82:35:1e:f1:7f:9a:75:b3:d4:04:45:ca:00:e7:03:bc:40:
ab:2a:92:6c:63:a6:25:07:64:63:1e:82:5e:f0:51:d1:a4:02:
5e:89:e3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:08:09 2025 by rpki-client