Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
File: tGTgryi3VcTsiAENlCmGl9GIOTM.mft (raw, json)
Hash identifier: uEw9J2sNrWDh8yshkoJQM9LNu2NCxWJ/KEwKa56c7Ps=
Subject key identifier: 43:8B:B2:BF:E8:A4:6D:A4:A2:B3:0A:C1:90:19:E9:DF:5D:D5:A7:1B
Authority key identifier: B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
Certificate issuer: /CN=b464e0af28b755c4ec88010d94298697d1883933
Certificate serial: 0198462CFDDBC36887B429BB68C338AA7A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
Manifest number: 07C3
Signing time: Sat 26 Jul 2025 10:00:10 +0000
Manifest this update: Sat 26 Jul 2025 10:00:10 +0000
Manifest next update: Sun 27 Jul 2025 10:00:10 +0000
Files and hashes: 1: 4ZUimyMSrmZMeMTJpofdIprKN0Y.roa (hash: +sbrqZ7npPQY0M7RUiP5uMAuk7XGp56zDb3oxzfgBs8=)
2: D6cOOwuzIu0b1VD3IEBzEJwwwCo.roa (hash: v5PJLnM3bwyGnG1xvGzcUgGuOEM5ARi6RIpoEpY7P4s=)
3: fyoJ9a9SSU9QMOOAnopUi24XOCI.roa (hash: Oq4G4KqExdW+YSWtwOksmXAFXdtGTgedgjAZaCPW9DM=)
4: tGTgryi3VcTsiAENlCmGl9GIOTM.crl (hash: SnvEsCkDFaPzY1asutpFe0lXQUkPeEXU4oeG2rptxes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2c:fd:db:c3:68:87:b4:29:bb:68:c3:38:aa:7a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464e0af28b755c4ec88010d94298697d1883933
Validity
Not Before: Jul 26 10:00:10 2025 GMT
Not After : Jul 27 10:00:10 2025 GMT
Subject: CN=438bb2bfe8a46da4a2b30ac19019e9df5dd5a71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d5:b0:48:36:4f:2e:f4:95:6f:a5:05:9b:f3:
ab:1f:23:5b:02:aa:de:b3:cf:a2:6a:cd:24:9a:9b:
85:69:bd:4c:8d:a5:e5:ef:94:f4:57:9b:b4:d0:82:
cd:e1:ea:6b:ca:de:ba:60:f5:c2:72:aa:a3:bb:1e:
95:88:a9:cf:8d:cb:c4:30:55:c2:b9:25:1d:67:80:
86:f0:e8:be:2e:6e:83:4f:e4:22:2f:a2:c2:80:67:
8b:6f:6f:ef:de:71:11:38:86:1e:bc:7c:e6:43:50:
07:6d:7e:4a:7a:c2:3d:7a:be:02:d6:d4:f5:93:7f:
29:8b:49:79:af:dc:55:28:84:29:3a:a5:a8:df:7f:
5c:a1:a7:a3:15:bf:ff:57:e1:6e:02:5c:2f:c1:d2:
53:b8:c1:a9:80:20:72:02:2b:2e:29:6d:9c:94:67:
7a:03:03:ab:9f:34:4f:49:59:6c:78:43:d8:af:21:
31:43:e3:b0:73:99:6d:17:ac:6b:9c:13:63:94:d5:
3e:b4:cf:5a:a1:6d:05:ad:2c:bc:2a:74:9e:46:d3:
b6:b5:27:ed:56:d2:5b:44:87:ae:03:0a:6d:d9:41:
5b:23:a0:5e:a6:3e:70:4d:14:2f:9d:b7:39:5e:0d:
c3:97:13:01:b1:f3:86:60:01:0c:f9:f8:67:87:5f:
7c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8B:B2:BF:E8:A4:6D:A4:A2:B3:0A:C1:90:19:E9:DF:5D:D5:A7:1B
X509v3 Authority Key Identifier:
keyid:B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:50:f5:50:2e:49:92:64:cf:58:b6:6e:2f:90:1c:20:68:b7:
e8:49:9a:7a:4a:43:69:68:ad:de:15:45:df:a3:e1:a1:c9:6c:
c4:c7:bd:01:77:25:6c:e9:1c:f2:b7:35:25:00:e5:d0:9a:f0:
29:20:fb:04:84:38:77:83:2e:08:ba:47:46:af:ed:21:7a:2d:
07:a3:0d:6c:2b:e3:68:74:ba:00:20:30:fe:5f:c1:3b:b7:6e:
82:5d:ae:fe:54:ac:d1:96:3b:e2:a6:ba:65:6d:84:81:3b:f0:
79:11:03:40:0e:80:62:16:89:a2:ff:96:96:50:fa:6c:2a:64:
56:2d:74:c2:fe:d0:e1:08:d0:d2:83:21:7a:e3:07:85:0f:b6:
de:f8:77:91:14:f3:71:c7:f8:e3:b6:15:fa:ab:2a:c5:b6:fb:
be:c6:01:a4:42:98:8d:d8:bf:a0:6e:f6:87:2a:fa:f4:40:48:
31:9b:0b:e5:82:c2:62:80:0c:6f:00:52:3d:36:3c:c5:ec:44:
b5:89:30:bd:37:4f:f0:16:66:36:ec:73:ee:28:f1:1d:ef:4c:
bb:a1:98:bb:58:7e:be:8a:99:f6:71:2b:3d:f2:9b:64:5a:d6:
a2:50:e6:9b:9e:02:8a:7a:57:19:af:26:36:91:bb:97:0a:5c:
03:30:20:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:52:06 2025 by rpki-client