Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
File: tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft (raw, json)
Hash identifier: RBYcXYEa9vwrKvwB8QEK4Lt1m+8n7hIiBe3PuCciHNI=
Subject key identifier: AA:D1:4D:A1:25:22:40:EA:FF:8B:94:EB:DC:78:50:6C:BA:13:BE:77
Authority key identifier: B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
Certificate issuer: /CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Certificate serial: 01984AE5D831087C21C8A4A24391133509DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 08:00:33 +0000
Manifest this update: Sun 27 Jul 2025 08:00:33 +0000
Manifest next update: Mon 28 Jul 2025 08:00:33 +0000
Files and hashes: 1: AwMEJfGD-_TNRZ72c5x-9dIRsd4.roa (hash: 6UVDM1JqxHmjbnJ4pDDIOsD2r8EQyy1bF6KNp9ocKGg=)
2: VJtvXDXYtAcS9C4LIbmlaqXh4Co.roa (hash: THcKGdc9aA5a+OjJYNnV65xxowh1d3kb8KQrHqiCPq4=)
3: fUXrv6-AqG-Sdl9xICl4cQAU7yA.roa (hash: jv2v4x0octz1D9witRg3iiWbwIrgi4wxjje3xLewI+U=)
4: tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl (hash: tXFX63eU6aUYX/oH6EBcXxR7TFWeB5ADJ0rG2lT5F3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:d8:31:08:7c:21:c8:a4:a2:43:91:13:35:09:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Validity
Not Before: Jul 27 08:00:33 2025 GMT
Not After : Jul 28 08:00:33 2025 GMT
Subject: CN=aad14da1252240eaff8b94ebdc78506cba13be77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:bd:9a:11:48:b4:0d:2f:58:18:87:5d:75:
fa:e6:01:f6:d9:31:bd:ee:5e:0b:1b:5a:1d:2c:d9:
32:56:3d:82:34:15:b8:99:85:f2:f8:3d:dd:56:5f:
76:7d:17:89:ce:90:01:71:6d:de:a3:86:3f:a5:79:
a9:56:f9:77:68:4d:a5:70:17:1b:02:c2:eb:b3:a4:
0f:83:05:23:08:8b:98:f4:6a:ba:42:7f:d9:b7:98:
e8:17:17:2d:58:b2:55:7c:fd:86:00:f1:28:e6:0f:
ad:c2:dd:59:ca:ea:0f:42:30:7c:bb:3c:aa:6f:fc:
f7:e5:e8:b5:d3:da:47:f4:43:1d:00:c2:0d:a9:3e:
2a:c4:df:d4:da:bb:18:99:98:f6:de:97:75:d1:a1:
b4:83:02:34:a8:fe:0c:20:1a:33:e8:bc:fd:50:99:
cc:be:8c:ec:9f:51:8e:a3:c5:22:7c:2c:f6:e6:4d:
17:39:e2:cd:1c:1f:4f:6f:c8:29:45:46:25:c5:6b:
12:50:cd:37:0f:1d:be:a3:da:72:33:2e:6a:63:46:
97:06:13:58:06:48:05:56:e8:e8:3d:99:a9:ba:bb:
a8:9f:09:8b:66:18:c8:5d:85:29:09:df:df:d6:1a:
1e:86:3f:a5:18:af:69:6d:bd:fe:75:69:26:f8:44:
20:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D1:4D:A1:25:22:40:EA:FF:8B:94:EB:DC:78:50:6C:BA:13:BE:77
X509v3 Authority Key Identifier:
keyid:B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5a:7a:39:66:07:b4:64:d6:4e:77:3d:3e:44:45:70:d8:4f:
b8:f2:8b:fc:a8:d0:4f:9b:c1:23:a8:e1:32:e4:73:72:fd:e6:
6a:da:23:21:1a:bc:0c:2b:e3:0e:10:aa:e4:a7:37:78:6a:66:
c9:83:81:26:68:ad:76:51:1d:3a:5a:36:08:d4:56:04:c4:65:
e7:a6:37:9e:de:fc:00:2f:a8:fb:52:d0:61:99:31:c9:56:a0:
07:39:a2:b4:1d:44:f6:2b:c5:1e:f7:bc:c0:14:20:a4:00:71:
20:1d:56:85:c4:a6:d1:d9:59:1f:d4:35:07:c0:6c:5b:f4:79:
2f:3b:13:d3:05:8f:19:70:7a:9e:c9:e8:24:e8:6c:41:4c:d5:
cb:18:9c:a1:b7:9d:f3:1c:14:8d:1b:4d:4b:13:a9:13:18:dc:
00:37:95:d2:48:a9:8a:be:c4:8b:c1:42:3e:36:94:c3:27:fa:
c1:a8:98:3c:6d:0d:39:37:35:05:28:e7:6b:72:68:8f:13:7c:
ae:6e:b7:23:b2:ac:87:e9:aa:91:1d:19:44:a3:44:e2:db:56:
62:31:9d:49:6f:5e:f8:48:be:6f:62:18:44:c2:44:f9:39:42:
80:03:bc:80:4a:04:c8:09:b5:5f:a7:de:bd:5d:46:e6:fb:38:
e1:9d:88:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:59:58 2025 by rpki-client