Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
File: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft (raw, json)
Hash identifier: NN/8v/pkAbz/n44bM5LmX1UuIlx2GGeAV81E/dgqy/g=
Subject key identifier: 92:9D:19:BD:C6:6B:DA:63:BF:0F:19:EE:BC:97:01:A2:83:6F:90:B4
Authority key identifier: B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
Certificate issuer: /CN=b48184549e12e9934bffb7615bca3d0c25681360
Certificate serial: 01985456925D983197E61DD363857CAF9F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 04:00:16 +0000
Manifest this update: Tue 29 Jul 2025 04:00:16 +0000
Manifest next update: Wed 30 Jul 2025 04:00:16 +0000
Files and hashes: 1: Pmrx9HZexDjQdROL1xOD1S-BjzQ.roa (hash: aBRM8zJUU2ZF0wAF5h20OpU3VGQ3W++oIRE8v06cZXM=)
2: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl (hash: jlmwAm9IpXlXPW8E/oZgjw+WRxE9z7Bn60dMH+iayzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:56:92:5d:98:31:97:e6:1d:d3:63:85:7c:af:9f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48184549e12e9934bffb7615bca3d0c25681360
Validity
Not Before: Jul 29 04:00:16 2025 GMT
Not After : Jul 30 04:00:16 2025 GMT
Subject: CN=929d19bdc66bda63bf0f19eebc9701a2836f90b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:01:ee:39:7e:44:7a:71:18:7a:eb:f8:8d:d2:
df:20:a3:e8:9a:e4:e2:77:3d:3a:06:6d:5f:9e:a3:
bc:91:fb:26:cf:7a:72:15:b1:e7:de:ec:fc:e7:f7:
61:8c:4d:d7:83:30:83:ff:be:ab:0b:e4:58:2e:ef:
a7:ff:ff:39:0d:8a:ea:bc:95:ca:fd:9f:fc:1c:66:
6d:d5:19:28:4b:16:5a:58:e4:1b:5d:3b:a1:c3:0f:
12:7b:24:02:b1:dc:7c:68:33:98:d9:72:c9:b9:3d:
f3:32:9e:91:0f:56:d2:58:3d:c4:1f:35:16:18:21:
ea:fd:61:72:e1:21:86:02:1f:5d:b0:19:9d:d4:ec:
b2:86:5d:23:5d:60:01:7e:76:31:5a:99:ef:88:e3:
4b:bd:c9:9d:c3:eb:60:e5:1a:9e:74:54:d0:13:3b:
69:ab:19:63:11:b1:4e:ae:87:96:ee:53:4d:42:d7:
e3:89:43:65:30:06:6b:b3:65:53:2b:92:40:b3:b3:
52:12:57:1f:29:cd:dc:26:b8:7c:65:1f:58:8f:89:
d4:57:14:2a:60:05:80:0c:54:97:b7:28:ef:49:e7:
d6:a1:1f:a5:11:5d:73:f6:cc:2c:95:d0:62:9a:88:
d9:d8:86:04:5a:0d:2f:9b:11:fe:c4:5d:13:31:28:
12:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9D:19:BD:C6:6B:DA:63:BF:0F:19:EE:BC:97:01:A2:83:6F:90:B4
X509v3 Authority Key Identifier:
keyid:B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:8b:8b:27:61:ca:cb:97:56:c5:9a:6e:fd:0f:9a:63:a7:44:
d8:29:a5:99:d1:58:7b:b4:1e:5a:7e:c5:1b:9f:1d:95:f3:ce:
ea:47:7e:14:05:77:ad:db:b4:a0:a7:c7:9f:3f:9b:cc:29:45:
3a:79:d8:ab:c6:fb:13:be:96:9d:6e:55:c3:85:06:09:30:e4:
91:66:bd:3b:86:18:6a:24:2c:dd:86:a1:73:9f:16:07:1f:c4:
ff:5a:76:03:db:4a:f1:7a:77:8b:7c:67:ea:8d:99:58:25:08:
06:4e:69:2e:6e:14:22:e0:6e:8f:f3:dc:a7:b0:7f:0b:32:9c:
55:fe:8e:0c:c9:2f:bd:3a:4c:e2:cb:18:74:2b:2b:b1:9d:a0:
ee:54:7b:02:8e:b0:f0:a5:19:bb:e4:4b:d3:9d:b4:fb:67:f2:
28:7a:5d:67:e3:4a:a4:f0:ab:00:4a:10:75:22:c4:68:f6:1b:
6d:7f:4b:23:03:b8:9e:13:db:54:c7:07:ff:f1:0c:9a:54:f7:
f6:ac:f5:b1:da:e9:96:79:de:fa:b3:a2:71:ed:b5:0b:47:d4:
89:ba:85:32:23:c9:81:cd:40:d7:cc:1b:cd:61:b4:d8:50:c1:
1c:09:a6:c0:b7:f7:72:f0:3c:4c:8f:f1:52:78:62:c6:d5:9d:
9d:09:39:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:47:30 2025 by rpki-client