Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
File: tI8GPSnpEPAzvstlbouZAfaeyXQ.mft (raw, json)
Hash identifier: xFyGtUi08nYU/gjJsT2rvJ6NfPLvUeeY4LQFUHDY5Qs=
Subject key identifier: A1:63:37:EC:E2:F1:7A:46:AC:CC:17:97:87:75:15:99:73:1D:94:C1
Authority key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
Certificate issuer: /CN=b48f063d29e910f033becb656e8b9901f69ec974
Certificate serial: 0198548DB94AB23A0FD4FC605ECE67573379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
Manifest number: 0F05
Signing time: Tue 29 Jul 2025 05:00:30 +0000
Manifest this update: Tue 29 Jul 2025 05:00:30 +0000
Manifest next update: Wed 30 Jul 2025 05:00:30 +0000
Files and hashes: 1: 7KQuRRixFRD2InAA41vDA8b46Ss.roa (hash: pqy5x79CuZKPgbD27qu8dFnC6qLbsZEYs512o7B8AtE=)
2: tI8GPSnpEPAzvstlbouZAfaeyXQ.crl (hash: oQM3cIcMjLbM6h3G/4NE/ila/zn1Jx6dIlQGL60EGU4=)
3: vM1WQhwz3cRdhRzRWZYRS2EG35U.roa (hash: 6cZcrnHWZ9ymPZFFF87v+vfASbgITAqQf6OR2I+DcbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:b9:4a:b2:3a:0f:d4:fc:60:5e:ce:67:57:33:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f063d29e910f033becb656e8b9901f69ec974
Validity
Not Before: Jul 29 05:00:30 2025 GMT
Not After : Jul 30 05:00:30 2025 GMT
Subject: CN=a16337ece2f17a46accc179787751599731d94c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:98:2e:bd:54:ad:ec:da:59:d2:33:32:e6:11:
f3:f1:96:a7:bb:9d:06:0e:6b:c6:09:b3:d0:35:12:
08:11:19:0f:11:6e:16:91:43:aa:7d:06:94:85:5a:
d0:c1:f2:91:2b:38:c8:e1:52:b7:99:6d:26:48:02:
70:d2:d3:e4:97:dd:c5:00:bc:d8:19:47:f2:42:56:
ce:16:48:35:8d:a5:39:8b:16:84:d2:de:8a:a2:70:
92:a0:b0:30:cc:7f:8d:98:97:68:db:87:f0:bd:45:
86:54:59:36:bd:dd:d0:46:26:a1:cd:45:4b:f2:5f:
1e:97:93:d9:38:fc:63:5f:94:8f:eb:ce:b7:9a:f6:
c2:7b:1e:05:c6:cc:46:f0:5e:b4:35:c5:63:35:c4:
bc:ad:8f:53:d4:16:00:4b:08:ae:c1:1e:27:19:79:
1a:71:a6:44:e5:7d:d3:7f:3d:ba:05:24:31:38:bd:
00:13:81:a8:d9:10:f6:db:fb:78:27:05:45:06:fa:
51:01:e0:53:fa:a4:c2:d6:bc:47:c5:32:04:6c:fa:
01:7f:b0:88:a2:9c:7e:30:f3:84:5f:cf:7d:e8:0f:
e1:32:fc:a3:5e:fe:72:42:bc:3b:e3:0a:62:ff:41:
87:86:d1:93:0e:ae:8e:fd:77:f7:fb:38:4c:58:82:
5f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:63:37:EC:E2:F1:7A:46:AC:CC:17:97:87:75:15:99:73:1D:94:C1
X509v3 Authority Key Identifier:
keyid:B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c1:47:d1:4d:8d:66:31:a0:3c:a4:a4:f3:2e:a7:91:58:c2:
2f:54:b0:b7:04:dc:52:0e:9c:fc:64:45:55:e7:bf:af:a5:c8:
f7:3f:eb:0d:a2:6e:12:ef:ad:c4:8c:e8:85:fb:46:62:63:54:
73:0c:00:f5:e1:c1:59:51:71:95:00:ad:b2:66:81:6a:ed:58:
c7:95:7b:70:f2:b0:48:e7:67:77:3c:9f:fe:3c:c9:63:76:de:
4a:61:52:0f:25:87:00:a2:a1:3f:e4:9d:64:bb:d1:05:9c:98:
e7:b0:d5:52:fb:2e:f8:a9:66:45:cc:08:7d:87:da:5e:8f:92:
d5:9d:c1:40:a2:ef:45:54:39:a3:85:6b:2e:6c:41:46:f2:3b:
26:e0:4c:74:a4:65:b4:47:11:52:04:27:5a:53:67:27:89:c9:
a4:15:a6:32:f2:76:92:31:e0:f9:f8:bc:1b:ff:4f:c0:ca:e4:
25:11:08:1f:f4:21:1d:7b:6e:b0:ff:23:8e:4a:d3:0f:fd:c6:
98:2d:88:a7:21:c1:a9:8a:da:58:d6:bb:7c:5a:08:0c:7a:0d:
9e:9e:b7:5e:bf:52:d0:73:39:41:4c:cb:6b:d3:48:36:73:a9:
3e:60:5a:08:9e:f6:96:ab:d0:12:92:1e:4e:0e:2b:25:0c:52:
d3:4b:c7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 08:46:56 2025 by rpki-client