Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
File: tXZXfSAIXEwi_IARyNGpP2MhHA8.mft (raw, json)
Hash identifier: DzGFKz2yVsAsToYMJRyKreDTZ16L3Es2EUNhQ2Q1FKI=
Subject key identifier: 81:37:64:26:BA:4F:A1:26:50:22:07:8F:75:74:79:A5:99:12:29:AA
Authority key identifier: B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
Certificate issuer: /CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Certificate serial: 019937CAED4F4CA156C1305904DD6DDA88A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
Manifest number: 01A2
Signing time: Thu 11 Sep 2025 08:01:09 +0000
Manifest this update: Thu 11 Sep 2025 08:01:09 +0000
Manifest next update: Fri 12 Sep 2025 08:01:09 +0000
Files and hashes: 1: 0NGpBZClfqdkwT-g1SQX2TG7Voo.roa (hash: SbCdNlkd4RVvBhJ9C9nlFY+4pjkHAYs+BVh1BZ1ld+c=)
2: FrJWtoZemJx4JKpSKfeY_d7A8KU.roa (hash: mn6H512YQAxp8Xgyg/tGQdGcCEfihV9UXWWT70uzA50=)
3: tXZXfSAIXEwi_IARyNGpP2MhHA8.crl (hash: A8SBGppe3D+W0dgMMLvcNv+gMHNqlWJIwAHyCtmCozw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:ca:ed:4f:4c:a1:56:c1:30:59:04:dd:6d:da:88:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Validity
Not Before: Sep 11 08:01:09 2025 GMT
Not After : Sep 12 08:01:09 2025 GMT
Subject: CN=81376426ba4fa1265022078f757479a5991229aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ef:65:1a:2b:4e:c6:4a:0a:a3:b1:10:8f:87:
8a:10:26:53:a1:3c:e9:d7:29:d7:09:d1:3f:1f:de:
ab:93:70:7f:b5:60:8f:e4:92:f6:ff:48:da:c3:01:
89:bd:e2:ae:1b:12:36:d1:32:e4:db:40:d8:46:d4:
31:1a:e4:42:28:d6:39:1c:e4:94:41:75:ea:d0:8a:
23:d5:d0:2d:6c:5e:90:5a:fe:d8:e9:43:17:ed:02:
83:08:cb:e4:45:3a:9e:32:a3:2c:4a:5e:29:41:29:
9e:67:65:27:d0:a8:90:5a:75:99:2a:57:ed:6c:c4:
c3:1f:a6:c8:9a:05:e2:33:3c:02:50:58:bd:ec:59:
c1:e7:e4:a9:98:0c:d9:ae:a8:01:7b:62:48:e1:4a:
59:5b:77:6c:93:be:19:aa:63:54:ed:2d:da:cc:14:
2e:c0:30:45:fe:cd:c5:87:d8:3c:85:72:04:d4:00:
d9:7b:33:ee:ca:cb:6e:d8:2e:b8:09:99:4e:12:e7:
44:be:cf:51:60:13:c7:e6:43:57:bd:ec:ca:90:8d:
55:c9:17:0b:8b:a1:71:80:bc:24:96:65:30:54:a8:
51:41:ac:21:1c:6d:f7:80:f3:b4:0c:85:0c:e1:48:
49:2e:c0:0d:1d:68:e6:47:09:6c:ad:55:4d:79:82:
79:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:37:64:26:BA:4F:A1:26:50:22:07:8F:75:74:79:A5:99:12:29:AA
X509v3 Authority Key Identifier:
keyid:B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1e:1a:88:be:47:3e:7a:9c:3c:a1:6d:33:b5:2b:89:11:ea:
07:55:ad:9e:c4:39:de:d9:c8:19:52:7b:a3:1a:04:f0:26:7b:
fa:d1:2b:13:53:ef:e7:21:27:09:26:d0:51:a3:4b:b0:ad:c3:
4b:ac:26:97:08:be:62:59:f9:49:33:18:a7:2b:5c:59:5f:2e:
b6:9c:5e:02:ad:47:57:5e:d8:a3:6e:d5:f9:80:fa:8f:0e:5f:
6f:9c:36:a4:d4:0c:41:c1:65:da:df:ff:41:df:c3:0b:4f:36:
a7:0c:77:21:73:63:ad:46:77:84:de:d1:9b:c9:cf:84:d7:b7:
62:9a:e6:ee:c1:cc:76:50:97:64:5b:01:9b:54:e7:2f:bf:a8:
11:7b:3e:e4:c3:56:e1:18:a7:a7:f0:d0:d3:55:5a:3d:e2:b9:
ed:56:2d:1c:7f:01:15:cf:84:c9:b3:0b:4c:28:e1:77:09:57:
70:b7:17:6b:26:1b:b6:29:6c:88:d8:3f:ac:9a:12:f8:d5:32:
af:10:cd:2d:22:14:12:e9:5d:b5:30:fe:59:eb:09:ec:62:1a:
ee:39:14:11:62:c8:ee:00:ca:9f:03:84:ef:81:43:89:ca:93:
02:60:6c:29:9e:6c:52:52:4d:1f:dd:57:d3:c0:45:66:8f:98:
ee:15:c2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:19:54 2025 by rpki-client