Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
File: tPM_b9KbrwPMTUha9fa3DaawCZ8.mft (raw, json)
Hash identifier: E5yr0ZbS4LbS0z4Z8PJkCfdCfpMPozrkkMik7ml2OuY=
Subject key identifier: 3F:00:DD:BF:ED:F0:76:EE:DC:AE:63:F2:56:59:3D:E9:61:00:E9:17
Authority key identifier: B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
Certificate issuer: /CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Certificate serial: 0198481BF175D1DD0A19F537E9C8F8BF7F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
Manifest number: 0ED9
Signing time: Sat 26 Jul 2025 19:00:47 +0000
Manifest this update: Sat 26 Jul 2025 19:00:47 +0000
Manifest next update: Sun 27 Jul 2025 19:00:47 +0000
Files and hashes: 1: tPM_b9KbrwPMTUha9fa3DaawCZ8.crl (hash: 7JwwaY9QyXFmG66mxjC9jmUw4lzORq3+hEr8UpefHUg=)
2: tYPVw8LB8i24cvigRIjHBmA1vkA.roa (hash: PLxJfAKIcmuKybJlU2Vop9ZELJyvcamyBgkEBw419jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:f1:75:d1:dd:0a:19:f5:37:e9:c8:f8:bf:7f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Validity
Not Before: Jul 26 19:00:47 2025 GMT
Not After : Jul 27 19:00:47 2025 GMT
Subject: CN=3f00ddbfedf076eedcae63f256593de96100e917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:43:bc:59:82:19:74:85:14:11:a4:04:83:
a1:86:b3:37:fd:cd:4d:16:db:e4:c9:71:cd:77:ef:
76:e6:0e:60:52:d7:1f:e2:a8:20:4f:3b:05:27:42:
bd:80:3b:39:36:e8:dd:44:cc:87:74:69:f8:e4:60:
12:be:3a:d9:72:a7:df:ae:9d:84:30:1a:76:d8:6f:
ee:03:a8:62:76:15:c2:76:ae:ea:4e:5a:5d:1b:0a:
e1:d4:a9:a9:b0:6b:9d:90:a7:62:29:dc:ee:83:db:
d1:58:db:c7:9e:f1:50:5b:a3:61:88:56:18:e4:3c:
b4:30:02:1e:9e:8c:6e:e4:ae:c0:20:4f:43:e0:20:
c4:e1:b0:34:01:7f:96:28:a7:19:1c:78:8d:5f:9c:
00:fa:6d:9c:0d:bc:92:11:9c:4f:51:9e:97:66:ec:
df:a5:ef:94:64:6b:6a:b2:ac:96:fe:f4:c9:87:c5:
67:7a:4a:e9:6e:76:7b:a3:4f:eb:d2:6a:8c:93:2f:
85:d5:ba:a3:0d:73:30:0f:38:27:bd:e3:ff:dc:86:
84:d1:71:77:f6:78:4f:ff:bd:07:ad:d1:76:8d:f4:
70:77:f3:ba:de:f2:36:35:5b:de:4e:a8:a4:f7:33:
f6:28:d0:c3:12:6d:ec:bb:f3:11:60:b6:b1:f2:e2:
b2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:00:DD:BF:ED:F0:76:EE:DC:AE:63:F2:56:59:3D:E9:61:00:E9:17
X509v3 Authority Key Identifier:
keyid:B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ac:6d:13:01:6f:2e:d0:69:07:48:86:86:8f:22:7f:90:31:
c8:f9:8e:6c:e0:82:a2:89:60:d4:5b:e1:c4:44:67:30:8f:29:
64:3c:5a:ae:b4:81:97:5c:1f:59:95:6b:b1:e2:bc:5a:b8:bb:
66:c1:e8:4f:21:87:d2:15:63:17:27:8a:d1:31:da:bd:66:5a:
cb:10:0c:d2:05:3f:18:33:aa:81:37:97:1e:c5:63:9c:ba:5b:
9e:50:d1:cc:6b:dd:59:11:7a:f7:8b:9f:e7:5c:2c:ad:0b:ab:
30:a3:08:ce:65:c9:6e:b6:c7:71:1f:57:d9:5c:b6:8a:57:2e:
b3:03:88:7c:25:00:c0:11:a2:91:9c:57:c9:f1:3a:ea:e6:1d:
63:62:73:dc:47:34:13:71:d0:17:fc:30:d0:8d:d6:6a:b2:15:
72:01:a7:6c:e6:0b:70:20:e7:e9:76:45:46:ad:35:95:b7:29:
c1:0a:4c:22:f1:85:5e:e3:e0:26:9e:7d:ac:52:d3:44:74:10:
08:69:8d:90:23:f1:81:4e:a6:2b:00:96:e0:47:f1:db:ce:c5:
ee:11:b5:ca:b9:b1:d6:97:93:8b:c0:9a:e9:e6:e4:e1:35:9c:
6f:80:f6:4f:b6:c7:30:43:30:0f:b4:43:51:f0:0b:ae:0d:36:
37:7f:84:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:42:56 2025 by rpki-client