Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
File: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft (raw, json)
Hash identifier: Ov1dcW1Z5676EZ8TIum0fiTJJLoa2eccPRkXEA3xtw8=
Subject key identifier: 3D:B7:35:15:A9:0F:40:D5:02:F2:81:9A:F8:DB:14:44:DD:0F:6B:55
Authority key identifier: 4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
Certificate issuer: /CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Certificate serial: 019849D37D5E0A8F6897AE58FD43AD8971B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 03:00:53 +0000
Manifest this update: Sun 27 Jul 2025 03:00:53 +0000
Manifest next update: Mon 28 Jul 2025 03:00:53 +0000
Files and hashes: 1: 88NNjHCiX9_36_Ap90bLZBoJu2g.roa (hash: ZT80OMK3BXF8ZC1FoGfNRJbcIwwVIXvLAOficLJgVoc=)
2: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl (hash: bMUFj0N1s/478cH0EHQKembwPRZQUxizevR59oRBUWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:7d:5e:0a:8f:68:97:ae:58:fd:43:ad:89:71:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Validity
Not Before: Jul 27 03:00:53 2025 GMT
Not After : Jul 28 03:00:53 2025 GMT
Subject: CN=3db73515a90f40d502f2819af8db1444dd0f6b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:40:6a:ed:c7:75:60:e4:31:73:48:40:d7:
bf:82:e9:65:80:87:e5:dc:82:65:5f:89:9e:fe:a0:
f7:27:87:af:7e:06:f7:56:07:2c:c8:20:3d:4a:36:
49:94:0d:7d:e8:05:92:1e:24:43:6d:da:b8:d6:88:
a6:aa:9f:29:59:ee:67:51:da:4d:de:da:1f:64:20:
69:a2:1e:d2:ce:71:94:ad:9b:df:ad:b5:f2:c1:33:
24:f5:b5:78:db:66:1d:ed:08:59:98:ee:5c:65:60:
6c:c2:41:4f:a9:b1:6e:e5:e2:74:f2:50:a4:6e:6a:
b0:db:ed:6e:85:d6:e6:be:12:95:86:91:94:41:91:
f5:e6:64:3d:81:ba:73:72:2f:b8:c2:78:8f:12:c2:
a0:4f:0d:ad:84:79:51:ff:65:7e:8a:29:21:75:b2:
52:e4:69:c8:d2:a7:e3:55:96:33:8b:9c:39:94:2d:
e4:aa:f9:8e:e8:18:5e:88:c0:47:4a:9a:50:66:9b:
5c:a0:cf:03:5e:07:1c:58:85:a8:96:a8:13:41:e2:
2a:ae:03:70:91:a7:0b:2d:eb:0f:e2:8e:b6:8f:1b:
15:93:9b:47:56:26:80:d8:90:17:d4:16:4e:08:bc:
60:03:41:38:61:4a:a3:71:19:93:a3:32:ad:fe:cb:
2e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B7:35:15:A9:0F:40:D5:02:F2:81:9A:F8:DB:14:44:DD:0F:6B:55
X509v3 Authority Key Identifier:
keyid:4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:37:cd:0d:c3:d6:16:51:bd:72:6a:e6:d4:16:86:5c:40:f3:
28:75:36:01:94:ae:ef:59:14:6b:ea:ba:71:ed:1f:a1:48:1e:
10:a6:80:dd:4c:43:18:b5:1b:ff:13:11:c5:2c:8c:f9:27:b0:
08:e7:6f:65:b6:02:44:ab:05:91:1b:8c:37:29:fb:ff:72:26:
95:f8:f5:1d:f4:71:44:1e:12:84:69:90:f7:a9:05:ed:4c:80:
fc:8f:5f:85:c5:06:19:6f:83:62:87:4f:3e:96:68:df:80:da:
e1:3c:22:b1:dd:5c:e7:52:ac:89:33:e8:d4:35:87:83:c8:3a:
ca:f4:94:89:21:0f:8a:26:3a:0e:ad:76:b0:c1:52:b4:37:2d:
9d:8e:8c:4d:79:4f:a2:84:68:b6:82:f5:b7:ad:09:30:b1:3c:
63:29:99:24:72:8f:69:28:b5:a6:70:bc:a5:84:e9:4b:7f:7d:
0b:a3:90:c8:14:0c:a5:22:6f:ee:42:26:7d:08:bc:50:45:e2:
3e:db:94:27:0a:ea:68:00:b6:fa:88:d4:cc:75:95:dc:d8:8c:
ea:5c:7a:84:7d:9e:02:ff:9a:84:61:4f:58:81:d9:42:af:35:
38:a6:c1:84:19:fa:32:88:87:61:9d:79:42:84:6f:61:db:76:
3c:28:e0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:25:42 2025 by rpki-client