Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
File: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft (raw, json)
Hash identifier: No0r02GBUpjraF3BI6pdB35K21ks/1/ecUAnyoiL4Dw=
Subject key identifier: 6A:14:20:9F:4C:23:13:9F:02:25:75:57:60:29:FA:C0:54:4C:DA:F5
Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
Certificate issuer: /CN=b4f115424c181c67966ccc2467ede69d060ccf53
Certificate serial: 019848C05AC92D46DFE9EDEFC368F965B67F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
Manifest number: 1368
Signing time: Sat 26 Jul 2025 22:00:22 +0000
Manifest this update: Sat 26 Jul 2025 22:00:22 +0000
Manifest next update: Sun 27 Jul 2025 22:00:22 +0000
Files and hashes: 1: bqp6f9GjY5TF5wTxOeK8Ji-YrkE.roa (hash: b7SVmPCcwJQed2khWFQ0sTeZykPXeoqQG4LQy2NRwCA=)
2: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl (hash: 6PKqMhU0vVM7ItOHTbKfrifnEnaXlwJimSwoEutz8LY=)
3: xktUIB6GDLW-h2_LFZTy4dam33Y.roa (hash: BgrfS/HN5mPWhSmcXKgkikTloXU/AxYtLSZ8SaD1EM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:5a:c9:2d:46:df:e9:ed:ef:c3:68:f9:65:b6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53
Validity
Not Before: Jul 26 22:00:22 2025 GMT
Not After : Jul 27 22:00:22 2025 GMT
Subject: CN=6a14209f4c23139f022575576029fac0544cdaf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:dc:ac:b9:4a:24:7c:a4:95:bf:fd:54:74:
97:60:77:35:f1:43:81:d0:2d:65:5c:09:fa:7f:e0:
11:fa:bc:fb:e0:62:71:48:e8:b2:1b:4b:41:05:d9:
87:c4:59:70:11:f0:f4:b3:62:25:15:34:6b:dc:c9:
b6:e0:e1:94:54:e5:4a:41:15:2c:ff:17:4c:cd:ce:
2a:b2:64:a1:e2:fc:19:09:82:4f:54:21:01:0a:c7:
dc:c0:cd:64:f1:e5:17:30:ec:d8:bb:c5:9f:62:30:
76:47:02:d8:eb:c2:e7:3c:ba:df:7e:10:d0:b6:f9:
53:84:07:04:4a:c7:a0:07:0e:ed:92:31:b7:6b:ac:
ba:b4:9d:44:e7:59:54:a1:38:0b:84:6e:94:8c:e3:
75:38:96:bd:a2:c5:b3:3b:2a:ef:e2:22:36:fc:64:
03:35:d8:01:99:6c:55:c0:4e:f1:cd:82:7e:6c:84:
64:d8:aa:5b:94:02:5c:6f:b5:9c:fb:4b:d4:f5:0c:
8e:19:0b:d2:61:5c:c8:df:2d:18:ef:56:50:5d:c6:
08:b4:a6:36:4b:0a:b5:2a:ce:bf:d3:26:d9:45:55:
d9:f6:56:57:7c:c7:a1:d7:bb:5b:38:aa:ca:02:55:
f5:61:69:65:d9:30:9c:3c:63:c6:c6:dd:76:74:28:
13:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:14:20:9F:4C:23:13:9F:02:25:75:57:60:29:FA:C0:54:4C:DA:F5
X509v3 Authority Key Identifier:
keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:08:cb:66:2d:ea:1f:3a:6b:6b:a3:dc:17:1e:1c:c0:98:03:
6e:0f:3a:db:cc:08:27:de:7a:61:86:53:97:47:2e:01:57:53:
fa:f5:ef:b4:ae:5e:f3:35:d1:e2:18:4f:53:4b:9a:a7:e6:48:
d3:8f:33:d0:bb:86:62:f3:23:f3:ab:71:aa:06:e8:8d:44:d7:
fd:fc:38:54:5e:b2:53:64:c8:c8:67:c3:82:36:c2:4f:92:1d:
b0:04:84:46:85:13:e7:fe:1c:9e:92:09:e3:4f:9b:73:c7:f6:
cb:d6:cf:c5:55:d4:92:e2:bc:ad:1d:8a:d4:4f:38:a7:d6:ef:
6f:6f:ee:e4:03:44:a8:3c:3b:c9:da:49:55:c9:b4:7c:1d:2f:
d7:8e:48:ae:50:28:df:f3:30:36:b4:9c:c0:c1:c9:fb:e5:02:
d3:b1:f8:c4:87:91:47:ee:c2:ef:f1:cc:9d:09:a3:1a:dc:94:
d7:25:31:b3:88:f2:e4:75:3c:d3:87:91:58:9a:33:64:05:1e:
d6:d0:33:fc:4a:e3:ca:e2:fe:2a:5b:2a:ad:e9:a0:82:f2:38:
a6:bd:3b:bb:28:da:11:be:68:de:7a:ab:d3:e5:6e:72:df:fa:
e2:85:ee:ca:3e:d1:8e:55:29:9f:e4:b3:ec:d1:e4:f1:ca:81:
60:00:5d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:30:12 2025 by rpki-client