Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
File: TnRhR3tZt7wJBvbOYGULs60t7lc.mft (raw, json)
Hash identifier: /KWpcvBpgbpj5WXwKstyoigt1db2UFUDful1F1OvGcw=
Subject key identifier: 0F:53:FF:40:0F:46:42:64:53:EB:DD:0B:67:4E:FE:43:95:A2:CA:5F
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial: 01984776EFB43C1502E32EE193DFB0D9CDBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
Manifest number: 0655
Signing time: Sat 26 Jul 2025 16:00:33 +0000
Manifest this update: Sat 26 Jul 2025 16:00:33 +0000
Manifest next update: Sun 27 Jul 2025 16:00:33 +0000
Files and hashes: 1: 1-deSD0Zx7mZFaKLgvp5MfNNL6B0.roa (hash: 0HLnR/UxvmJgyKOOTOBI/jNtxozr1BfrerbK66hTjvg=)
2: TnRhR3tZt7wJBvbOYGULs60t7lc.crl (hash: +ip8rtRQPlxXW7xuOQNQ4MvEJuNcSfdiLgsx3tRLqGs=)
3: ztG3iRtcx4pgmD82wNPmhKWPj8w.roa (hash: 7wVFIe2H/2PMSyJC9QSggcK+C7T3Sk0wvSIjn0Idsps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:ef:b4:3c:15:02:e3:2e:e1:93:df:b0:d9:cd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Validity
Not Before: Jul 26 16:00:33 2025 GMT
Not After : Jul 27 16:00:33 2025 GMT
Subject: CN=0f53ff400f46426453ebdd0b674efe4395a2ca5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:29:18:f6:79:69:fd:f8:79:19:b9:c9:2b:d4:
9c:71:f5:1f:80:24:50:68:22:89:97:53:7c:11:d0:
3b:2e:a5:60:ba:ef:02:90:97:77:c0:b3:ed:eb:35:
1c:66:92:1e:ee:c6:3e:c0:73:be:f3:8f:2e:18:81:
33:9e:2d:c4:b2:85:5f:4b:10:24:35:56:1f:ae:d1:
6a:37:59:e6:fa:18:77:e9:5a:7f:ad:28:fd:c6:f9:
07:f7:78:f9:67:19:8d:6f:64:b1:88:12:1b:ab:c3:
7b:cc:cc:e7:6b:dc:ef:71:4c:71:22:36:f5:40:74:
43:38:9a:a2:dd:a0:86:67:a2:02:ff:69:03:2d:46:
13:a5:51:f4:6b:3a:1e:08:8b:35:43:3b:4b:70:17:
39:a7:57:4c:dc:1a:1d:e0:1c:38:3b:61:40:76:05:
1c:01:53:2b:e1:af:97:8d:96:fe:ce:98:08:a8:fb:
38:95:ba:ce:db:2a:2e:8c:db:c1:6e:64:46:83:80:
c6:36:07:10:c8:18:f3:d8:d3:19:06:fa:fd:87:63:
82:56:82:c3:6f:c2:51:4e:21:24:42:da:14:f5:5e:
28:5d:91:81:c5:7b:76:dc:99:3b:0d:d2:89:30:41:
d4:20:d6:b0:ab:8f:05:04:a6:b1:8e:1c:65:be:ab:
77:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:53:FF:40:0F:46:42:64:53:EB:DD:0B:67:4E:FE:43:95:A2:CA:5F
X509v3 Authority Key Identifier:
keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d7:af:29:8c:b5:c8:b4:6c:a9:63:0c:ae:6a:ac:c5:86:0a:
fc:1c:90:4d:73:e2:41:95:89:ed:97:06:5a:6f:9c:97:37:e3:
79:d5:b9:41:ff:59:0f:08:c7:c4:a2:48:a2:71:39:91:be:26:
6c:2a:ef:4f:a7:79:d4:8d:76:d3:56:1f:8f:26:3f:36:f5:30:
ab:ee:69:e9:f3:01:d0:1f:3e:a9:7a:5b:06:1c:86:b7:06:4d:
22:91:08:b9:9c:71:7d:b9:39:3b:2b:c1:d5:52:5f:53:02:59:
b3:20:fd:75:52:1c:4b:94:9c:7e:90:e9:1b:98:ca:eb:93:27:
c2:e1:2b:96:c0:ae:58:0f:6b:9c:c8:fb:29:9a:5a:b2:e1:ae:
47:be:ff:93:7e:bb:c2:84:92:8f:a9:6c:8b:4b:09:b4:b0:cb:
1e:c1:c3:18:1c:2a:81:1d:6a:9f:56:27:94:b4:ab:0d:12:71:
47:31:de:9e:20:ac:60:fe:93:cf:e8:7c:56:4b:72:28:ee:f6:
fa:13:09:05:ab:d4:6b:0c:7e:b7:f0:77:90:e6:3d:52:01:d6:
4d:0c:f1:25:97:00:89:98:d7:fd:3e:2c:59:f8:2e:01:2b:8b:
f6:1d:3b:f2:3c:31:e6:33:37:ae:00:1b:29:a6:46:75:f4:d9:
18:92:9f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:21:55 2025 by rpki-client