Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
File: TuQFf56gFAzvfOR4k2nFzwH3xo4.mft (raw, json)
Hash identifier: 4LUVc4Y/Re5kB+500s2/TB/LcHmrB/ICFrOgEzg4vds=
Subject key identifier: B8:8C:1B:2C:76:37:D5:74:BE:A6:2D:25:09:E6:78:5E:BB:FA:98:49
Authority key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
Certificate issuer: /CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Certificate serial: 019849655710808875FFAF94D3372E58EE84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
Manifest number: 1457
Signing time: Sun 27 Jul 2025 01:00:34 +0000
Manifest this update: Sun 27 Jul 2025 01:00:34 +0000
Manifest next update: Mon 28 Jul 2025 01:00:34 +0000
Files and hashes: 1: CEuXJrDVGtc7Z4aBHwivyFbJk6I.roa (hash: YlEuDFYK1ghHbSy2lJ7W4OAiAQ8b74GXZr4K2Q1Nk+o=)
2: TuQFf56gFAzvfOR4k2nFzwH3xo4.crl (hash: 8gfP1I+GHKmJNz31NGs2n/KeHbyCDWZFMU/F43l82yo=)
3: zQYGnUVB4bBy-t9A3BsXP2JPTI8.roa (hash: yYhiUqDeYjOIAS1CW8QCSgxrWRWrSjdPUM0N7RvDxVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:57:10:80:88:75:ff:af:94:d3:37:2e:58:ee:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Validity
Not Before: Jul 27 01:00:34 2025 GMT
Not After : Jul 28 01:00:34 2025 GMT
Subject: CN=b88c1b2c7637d574bea62d2509e6785ebbfa9849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:55:dd:5d:d6:94:66:ad:f6:13:66:2a:9f:
1d:a5:9d:cf:8c:85:cd:0b:a9:a7:94:94:0e:5f:27:
45:7f:5d:00:7f:a0:83:94:ec:68:86:83:b7:bf:6a:
01:45:84:0d:5b:35:c0:69:95:aa:b9:1e:51:74:13:
32:28:a6:05:da:ec:00:8a:3d:a3:af:0f:c5:4e:2e:
a7:48:87:be:ff:d6:39:eb:4b:96:4e:9f:89:fd:88:
bd:a3:60:2b:ea:16:0b:f1:1c:75:f9:8a:22:f7:17:
86:9d:2f:39:1a:18:79:69:18:eb:fa:2f:a0:01:66:
64:a3:de:d5:8e:bb:b5:bd:10:bc:ef:8a:18:b3:cd:
7b:8e:3a:99:ac:e5:83:e5:32:53:2c:bd:45:17:80:
03:3d:6b:e8:a5:b1:cc:f0:0b:8e:5e:67:1a:7f:f0:
c4:cd:1c:ef:4e:ef:10:aa:9d:5c:be:0a:f4:78:2d:
72:8f:5b:36:93:1d:54:60:19:e8:2b:fd:fa:17:d0:
29:5f:44:d3:be:4c:b0:15:f5:e1:39:06:fb:8f:b2:
ca:e8:cd:0d:10:54:c7:b1:a1:40:30:8c:e8:eb:cf:
5b:9e:2e:c8:75:06:89:8b:76:41:1d:49:b3:c9:09:
13:da:d3:86:6b:4e:49:35:47:f8:83:db:99:e8:6a:
03:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8C:1B:2C:76:37:D5:74:BE:A6:2D:25:09:E6:78:5E:BB:FA:98:49
X509v3 Authority Key Identifier:
keyid:4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:34:ac:40:6f:d7:17:67:8d:ab:1e:86:23:94:fb:e7:08:d2:
8b:07:9e:13:c0:35:78:9f:6e:e5:70:b2:89:27:bc:35:05:1e:
c2:de:6c:62:21:db:7e:35:96:3e:7f:a3:4c:3c:a0:25:e9:17:
99:20:41:3d:84:5b:e1:98:57:d8:a9:32:a0:ce:90:11:47:11:
e0:16:f9:81:03:eb:44:15:49:d9:7e:a0:d3:47:db:a9:e0:6e:
59:a5:8d:c3:17:5b:f8:85:69:ee:f7:f6:46:0a:78:22:0d:87:
c3:bf:46:d4:b4:f4:35:7a:2c:f1:21:bc:28:8c:dd:62:54:ed:
fa:3d:81:37:e0:26:a1:ab:d2:4d:5a:ff:4a:3b:6b:d1:2a:02:
d6:56:2a:5c:35:e5:71:12:09:32:ae:7c:9d:6a:5a:a7:01:d9:
dd:41:5c:84:5c:ec:22:30:5c:2d:6d:70:50:1b:e8:3d:47:dd:
45:45:0c:d9:0a:08:25:09:50:60:b0:ff:0b:3a:79:3b:21:74:
e1:34:e7:74:5e:a0:ed:c7:3f:51:ef:1d:6d:3f:fe:a6:24:74:
49:c3:74:f1:a9:73:2a:b8:e1:44:d4:1c:5b:d3:47:14:06:59:
52:87:a4:2e:3c:23:a0:7a:77:71:c4:f9:ba:38:fa:81:a2:c5:
58:96:2d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:51:13 2025 by rpki-client