Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
File: Tg854squjizxS8xBsj88huGnIPg.mft (raw, json)
Hash identifier: /wiihgzAShboQ68gcKfFW87g6oFMKP1mrxxnF4j+VGo=
Subject key identifier: 18:80:10:68:83:CD:F9:D0:38:98:51:5A:B5:8F:44:DA:68:19:E1:2E
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 01984A09B0131B4F1F7DDFAD60E7387AE5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 04:00:05 +0000
Manifest this update: Sun 27 Jul 2025 04:00:05 +0000
Manifest next update: Mon 28 Jul 2025 04:00:05 +0000
Files and hashes: 1: 3NL0_43JO4ViZMUt6FOGd4wRJes.roa (hash: iMUE0vTHXLYCmLZqj0qdPBpz5FgK9qmOUf7yFoe48OI=)
2: 4pgipsDtjzVZOnA4qzWqk83-xSA.roa (hash: nd8vlth0pBWJ/Is/avNVqT3xb/Gc3yDSmhppSZMRqxM=)
3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: 5+Ug0xBeYLhwtCJYuEiLG4GykohvGecKAQo433frg04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:b0:13:1b:4f:1f:7d:df:ad:60:e7:38:7a:e5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: Jul 27 04:00:05 2025 GMT
Not After : Jul 28 04:00:05 2025 GMT
Subject: CN=1880106883cdf9d03898515ab58f44da6819e12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fb:08:1a:9f:c2:fe:d7:6b:ba:e2:d6:a1:08:
e9:0f:05:1c:81:7c:cf:05:50:a1:91:fe:3a:6f:71:
3a:78:d3:82:c1:02:c4:d6:b9:db:de:6c:b4:e6:d2:
f1:7c:27:a9:71:92:40:4e:b4:85:46:d8:a3:b7:38:
9d:c3:36:3e:f4:83:44:df:54:a8:b9:cc:d5:4d:80:
a3:d5:68:58:34:5c:fa:f5:d3:ff:79:b1:fe:b7:15:
1c:48:f6:7d:8e:3b:75:5c:be:4d:eb:22:47:d2:2a:
42:18:41:e8:30:59:49:9e:64:db:ab:ab:64:81:9a:
83:10:09:1f:4a:e8:9e:7f:5b:10:8d:bb:29:31:83:
c6:b4:49:32:2c:84:a2:e2:37:f3:8b:57:77:3c:ce:
0e:ad:81:54:b4:6f:d4:65:a9:70:06:84:59:d1:76:
49:a1:e6:93:37:a9:56:66:5a:b9:dd:f4:c9:6a:ee:
0e:de:19:19:ac:00:ff:cb:ce:08:4a:d9:23:2b:b8:
20:30:14:db:3f:3b:18:ca:ec:6d:77:53:a5:09:cb:
e7:b4:ec:97:48:5a:a0:fe:15:d9:04:59:13:33:b1:
3d:87:62:86:54:f2:f5:78:3d:6c:d2:52:0c:38:19:
40:5a:b1:43:ff:67:d0:1f:99:a1:8e:3c:f0:75:ad:
a2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:80:10:68:83:CD:F9:D0:38:98:51:5A:B5:8F:44:DA:68:19:E1:2E
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1c:97:22:ce:e7:26:a5:17:2b:c4:aa:00:ef:fa:78:ec:6f:
f2:73:31:6c:4a:4e:02:05:8d:67:20:50:44:dd:a8:44:42:16:
91:fd:4d:f8:50:4d:95:d6:bc:23:b2:29:cc:6a:46:ad:41:46:
a0:36:82:85:aa:5d:70:d1:c4:d1:61:39:60:1a:c2:19:c2:75:
d6:22:db:37:7f:e0:78:19:49:da:cb:de:73:2a:4e:4c:c8:db:
76:10:74:22:63:53:53:bf:7d:c5:6c:8b:5c:fc:61:6e:de:ed:
20:44:a0:e7:f4:0c:83:3f:5e:8a:23:bb:aa:5a:ef:dd:ae:2c:
2d:da:24:31:9c:90:dd:b0:5e:cd:f6:a7:bf:52:8d:47:5e:85:
09:b9:fd:a6:f6:42:2e:1d:63:59:69:bc:8f:f7:02:58:f4:b0:
cf:d2:b5:42:12:be:ab:e6:1b:8a:c1:75:77:06:41:01:35:ab:
62:0c:dc:30:b8:74:58:26:2e:d3:24:68:da:09:84:56:6e:fe:
50:02:b5:a7:de:c4:17:28:67:cf:9b:22:79:45:c7:e6:cf:6c:
17:0c:9b:a9:f6:7c:77:cd:7c:9c:06:58:06:73:19:25:15:de:
c8:41:db:e4:74:96:03:68:26:78:6a:87:9e:c5:c4:37:6b:2f:
b0:a9:f1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:14:22 2025 by rpki-client