Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
File: tDJYoYz00SKOXHkHDfpjMRaDIMU.mft (raw, json)
Hash identifier: PcZf/wcHReadmOrgT7388NjDxBSZn+PEvJnqjTSxA7g=
Subject key identifier: 0B:38:BE:36:82:7B:4D:D6:C5:A0:DF:FC:1A:E2:08:03:96:65:53:D7
Authority key identifier: B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
Certificate issuer: /CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Certificate serial: 0199C48E0C8ADF68C4C493083AC1ACAA7F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
Manifest number: 1508
Signing time: Wed 08 Oct 2025 16:01:07 +0000
Manifest this update: Wed 08 Oct 2025 16:01:07 +0000
Manifest next update: Thu 09 Oct 2025 16:01:07 +0000
Files and hashes: 1: 28g4Blr7nuSyJeVmwy4cGLK9eb8.roa (hash: Q3uRjW4ymMVkt8l5TduM8mGnhXb4GzyvEHZ5j93is8c=)
2: psNnDsOb3MJQFpyT8HfsVNSnwog.roa (hash: KJkUgz1VxvV5lZj00xJ9seKTuebHbMbR6MJlSYq/h5Q=)
3: tDJYoYz00SKOXHkHDfpjMRaDIMU.crl (hash: jN9tfjjANaiTzicvJp/Ky/CawZrXlxbLumProev7YrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:8e:0c:8a:df:68:c4:c4:93:08:3a:c1:ac:aa:7f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Validity
Not Before: Oct 8 16:01:07 2025 GMT
Not After : Oct 9 16:01:07 2025 GMT
Subject: CN=0b38be36827b4dd6c5a0dffc1ae20803966553d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:39:0c:05:58:fc:2e:fd:7a:77:d5:c0:c8:2e:
81:09:90:0e:ed:44:e6:3c:50:de:00:f2:56:a7:41:
49:5f:76:ea:05:48:65:39:f2:0d:b6:d3:ce:e4:7f:
8b:95:b2:de:39:76:f9:4e:35:3e:43:c1:5c:a1:02:
44:60:30:22:ce:e7:05:ad:21:c0:90:15:3b:97:9d:
da:0f:c1:89:34:1a:44:c2:be:6a:a4:6d:51:ed:8b:
38:62:8b:d8:ca:85:06:58:70:ea:85:62:98:8a:cf:
40:81:85:4c:23:60:3e:88:5c:c7:c1:07:2f:68:d3:
00:8c:ae:3c:3c:29:37:c6:b9:f2:ad:6d:15:0c:1f:
32:31:63:ce:f9:3f:e8:4b:9c:0e:19:2a:4d:17:29:
b6:aa:5c:44:38:8e:28:b3:b1:21:fb:7d:23:7f:62:
10:ba:41:dd:ed:a0:83:58:aa:b2:88:28:d0:b6:80:
dd:89:90:b1:ef:da:76:26:4e:30:b0:9a:8f:bd:e7:
01:de:a1:28:6c:08:5d:fd:de:62:eb:68:13:f7:a3:
c4:d3:06:ab:fb:69:d6:d0:59:33:86:98:82:0e:8a:
54:a8:72:ac:3e:6a:98:52:b2:6a:38:64:32:8b:0e:
21:b0:77:3a:75:12:a1:57:6e:35:5c:8d:f4:7f:e7:
26:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:38:BE:36:82:7B:4D:D6:C5:A0:DF:FC:1A:E2:08:03:96:65:53:D7
X509v3 Authority Key Identifier:
keyid:B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:19:23:ce:fe:1e:10:9b:13:1e:fb:61:b5:d3:e4:e1:a0:e5:
a0:48:a1:bf:fe:29:73:e4:f7:af:a2:38:49:96:05:49:a1:04:
1d:08:19:28:62:9f:d0:45:11:ff:74:9e:ee:65:fa:a1:49:24:
96:e1:2a:72:42:66:c6:af:79:f0:c9:26:e0:fc:2d:a4:56:18:
5d:b9:a9:0e:b6:16:f7:ba:ad:b5:4e:d9:54:de:65:d6:54:17:
cd:6b:d0:93:09:60:63:21:a8:6a:a1:9a:7e:77:6c:f2:1d:cc:
a1:7e:f9:d3:ef:95:d7:d6:ad:f7:92:0b:76:13:e8:ee:0b:1f:
43:2f:98:45:9c:3b:74:e2:e5:ac:74:2e:f0:b0:17:e3:42:62:
42:ec:6a:67:eb:a1:17:30:3e:e7:ef:ea:1d:47:36:6c:6f:68:
c7:05:81:75:fd:e9:2e:1b:91:2a:64:ea:3a:fe:3c:75:8b:61:
f7:19:f5:a7:47:89:69:3e:a1:5d:ae:c1:5b:f9:a8:8c:b9:b5:
52:0f:4b:09:8e:27:b5:22:3c:a6:2e:07:af:43:8a:1e:ea:96:
34:21:7a:af:ce:f4:ea:bf:46:28:26:18:95:f7:fb:ef:fb:44:
b9:92:0a:8b:a5:df:a1:a2:b3:5c:02:80:15:c5:39:4e:65:62:
1a:d2:2e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:31:54 2025 by rpki-client