Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
File: TCuJw8V6PilqpAYelihAvnro8Bg.mft (raw, json)
Hash identifier: L8kMO8rtfA8qXTZr8L35m+Pe21nLL63TCayPi9MWeIA=
Subject key identifier: 67:25:24:A7:C8:69:84:E6:C8:26:19:98:84:2E:9E:BA:0D:E6:3A:79
Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
Certificate issuer: /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Certificate serial: 01982AED526353063E5F8AE733BCB9AF11D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
Manifest number: 1606
Signing time: Mon 21 Jul 2025 03:00:52 +0000
Manifest this update: Mon 21 Jul 2025 03:00:52 +0000
Manifest next update: Tue 22 Jul 2025 03:00:52 +0000
Files and hashes: 1: 1-dPM2O3Cq9rlPw_b3Bu58i_7ZQ.roa (hash: XqoYwMiUKjvv4+p3alYpBpdcCSNGWvnPPZeCLArAN1Y=)
2: AW8f1Sghrh8luWoSov2j0EZGy_0.roa (hash: U2vLNq7NQxJcwwJPbea0BifLKX9AZzxjKL7mEvlEow4=)
3: TCuJw8V6PilqpAYelihAvnro8Bg.crl (hash: VJQkD168Vi6StQ4gBqBRcMBommfo2yI00XaKoQtOdKc=)
4: Vr7IufA3C9NGikBSGaXPWfPn02s.roa (hash: X+swUdsmsoD9I6W5uD/P9WRwAMBsf3kXls0seEffEoQ=)
5: Y09DAS9bLh1xAHqahYhLrCah7Do.roa (hash: KsGpd22HLjZmnPLG6DA0cJZZzK6h+S5QA/ADl1ffSag=)
6: _EI-DCtehkQJuSEZGP7N7ioX6Zg.roa (hash: uPXDlP3jf6C/noTaAyluTTWys0GZfmXGo9pUC5iBPfs=)
7: mYNoys889JEKo9j4oNdbRCLL9Zk.roa (hash: ZoVXON/ZR01LA7q9fnPxWvUyfhqGTxcjz/v5GxIUwf0=)
8: tIGmW-EI2nrWk4qC7j5FTTvEcKw.roa (hash: KGRsrUvfWuNnw7M6OrT2LhIDhaEzLkzjBqoyrd5RfaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2a:ed:52:63:53:06:3e:5f:8a:e7:33:bc:b9:af:11:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Validity
Not Before: Jul 21 03:00:52 2025 GMT
Not After : Jul 22 03:00:52 2025 GMT
Subject: CN=672524a7c86984e6c8261998842e9eba0de63a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:96:a4:59:f1:ca:fc:71:40:08:b1:f8:c3:
76:4d:36:0a:76:f3:d2:52:31:0f:31:17:c8:98:4a:
f0:41:11:96:03:76:0b:f1:75:8c:03:9b:fa:bd:c1:
e0:47:47:1d:c6:c8:4f:08:6d:ed:5e:fa:34:ea:ba:
b4:dd:28:5a:27:00:89:ca:80:a2:3c:1b:5c:49:1e:
0f:3a:74:b1:a1:7a:ef:a5:23:24:2f:88:c4:ec:0b:
12:0e:54:f1:07:61:01:f7:9e:e5:02:57:5f:bd:35:
f6:9a:91:9d:7d:6d:32:32:51:8b:63:e6:78:97:08:
b3:70:6c:64:3a:c2:87:19:a3:2d:21:28:79:94:f7:
a8:74:f5:20:8f:0f:4d:4a:a2:82:75:cd:eb:c0:83:
8b:f9:46:18:a1:a7:fc:de:97:6d:2a:ee:a6:ae:4d:
80:5f:6e:f4:f3:a4:3e:47:81:0c:12:a3:03:70:d5:
d6:08:a6:e5:53:8e:f3:37:68:30:fe:0d:da:33:67:
ac:3b:f0:b5:37:c1:dd:c5:fe:d6:29:0e:e3:f2:3d:
64:cb:2b:97:d6:48:f9:91:59:74:b8:22:e0:7a:46:
56:86:ca:6e:a4:40:36:fb:56:e9:ca:cc:13:bc:f6:
b8:32:7b:6a:6b:70:e4:bd:85:dd:9a:4c:00:0e:88:
33:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:25:24:A7:C8:69:84:E6:C8:26:19:98:84:2E:9E:BA:0D:E6:3A:79
X509v3 Authority Key Identifier:
keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:11:c0:5e:4c:e6:bb:f7:9e:39:c1:6c:c0:a6:16:e6:e7:e2:
25:f1:af:70:1e:f7:77:54:c0:e8:c2:d5:85:9b:42:2a:ed:91:
a9:57:ad:61:ca:b4:84:d9:c1:c6:13:f8:fa:2f:0e:68:74:5a:
aa:c8:cc:3d:d1:0e:c6:ab:8b:b0:ac:33:00:b2:51:92:0d:b9:
c8:19:84:af:59:e9:46:d0:2c:85:1f:a6:bf:df:89:b2:3a:e7:
cb:12:08:eb:68:fb:75:4f:97:52:bc:be:ef:d7:60:7c:f2:6b:
c3:a1:22:53:77:4f:cc:0f:f4:cb:b6:50:5f:ea:6c:8b:41:f1:
ba:97:71:68:fd:51:eb:8f:e8:e5:40:2c:b7:e7:18:a8:4d:13:
90:54:bb:8e:c6:63:9c:40:76:c8:46:5b:02:9f:5a:2e:f2:28:
86:a6:26:db:1d:66:f8:36:44:96:01:ee:fa:67:94:ed:08:7c:
43:32:e4:6f:fb:d7:63:ed:a3:c9:1c:75:be:3b:be:1a:25:b3:
3f:ce:c3:50:97:29:f0:62:ea:de:59:e5:34:98:46:a3:7a:e0:
39:da:32:05:64:4e:39:d2:21:ef:be:b1:a5:0b:96:8b:cd:ef:
44:32:90:85:10:9d:f8:8e:85:b9:b9:93:7b:dc:c6:ca:cf:ec:
f7:1b:44:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:59:49 2025 by rpki-client