Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft
File: tIoonrst1oBtYLjFrQNseY9mugY.mft (raw, json)
Hash identifier: wlKU1KffLjpBI4aDop98MOegpnkDg2cmwVqfSOtw4NQ=
Subject key identifier: C7:62:E2:5F:00:5B:6B:E7:9B:CC:C3:45:DD:18:6D:77:EB:DB:94:8C
Authority key identifier: B4:8A:28:9E:BB:2D:D6:80:6D:60:B8:C5:AD:03:6C:79:8F:66:BA:06
Certificate issuer: /CN=b48a289ebb2dd6806d60b8c5ad036c798f66ba06
Certificate serial: 019922C39A080BD66B026C1B2EF53863816B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft
Manifest number: 052C
Signing time: Sun 07 Sep 2025 06:01:08 +0000
Manifest this update: Sun 07 Sep 2025 06:01:08 +0000
Manifest next update: Mon 08 Sep 2025 06:01:08 +0000
Files and hashes: 1: nKxswHwUBE_XIOIyQ1Qpw5XOFvo.roa (hash: xZYcCOMTf00TiuBXWvG+qaD8S6ouJ5YlmrR2oW0i9z0=)
2: tIoonrst1oBtYLjFrQNseY9mugY.crl (hash: 2hS9jmQ2jJ1Rg2Qr5nLlAShMhqBUjIeukYqM4Xw5hnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:9a:08:0b:d6:6b:02:6c:1b:2e:f5:38:63:81:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48a289ebb2dd6806d60b8c5ad036c798f66ba06
Validity
Not Before: Sep 7 06:01:08 2025 GMT
Not After : Sep 8 06:01:08 2025 GMT
Subject: CN=c762e25f005b6be79bccc345dd186d77ebdb948c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:5c:c9:a7:ba:c0:d5:16:f9:50:92:44:ae:
27:06:61:92:1f:a7:f8:40:b4:6d:b6:52:75:b8:cc:
22:66:33:22:4f:29:b9:df:65:0e:61:02:8b:45:01:
ff:6f:c6:be:d0:e4:a6:bf:d2:5e:9c:f6:2d:f5:1d:
9a:2e:3e:05:cf:b4:b2:eb:f8:ce:db:bc:67:fa:fa:
be:50:94:ff:81:1e:cd:8a:b4:38:84:aa:04:55:16:
7d:c8:2a:7f:ad:cb:60:80:43:21:e1:16:98:f5:ec:
89:da:61:c8:a3:8d:03:88:db:6d:3f:0e:b8:75:f0:
ac:2a:62:1d:6b:a2:9a:1b:7a:43:03:e8:4b:3a:2c:
7c:72:18:39:0e:0e:ec:23:7d:42:f1:79:86:58:5e:
4d:45:29:57:f4:d8:ef:8c:af:43:95:85:fb:0a:14:
d0:35:32:e8:63:be:ff:61:07:65:63:6c:70:8a:13:
36:2d:9e:21:35:8f:11:4a:2e:aa:f5:40:5b:f8:57:
a6:39:73:d1:28:c3:c8:65:9f:f3:52:0d:c0:be:75:
1e:11:2e:79:22:df:f8:33:ae:29:08:ea:0c:69:51:
35:5c:90:66:d7:ec:77:4b:1e:ae:d3:5b:f9:69:89:
e2:3a:04:0c:af:ce:9f:a2:77:b9:06:7b:28:0f:5b:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:62:E2:5F:00:5B:6B:E7:9B:CC:C3:45:DD:18:6D:77:EB:DB:94:8C
X509v3 Authority Key Identifier:
keyid:B4:8A:28:9E:BB:2D:D6:80:6D:60:B8:C5:AD:03:6C:79:8F:66:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:94:56:d1:1d:f3:5e:37:76:73:38:f5:33:0b:93:e6:7e:c2:
96:5b:ce:f6:88:e1:33:6d:96:fd:f5:60:12:5c:de:71:1f:0f:
f8:a5:90:b6:cd:36:43:b5:fd:80:b5:eb:73:6d:03:e8:00:24:
85:e0:83:a1:20:50:b5:95:59:b6:a9:6a:9e:89:48:a5:18:a4:
87:5a:52:61:a8:38:88:17:9e:d4:bc:0a:38:42:7f:cf:35:dc:
cd:cb:9c:67:01:d8:55:f3:9c:5d:f4:a6:99:6f:38:7d:6b:34:
84:e9:15:d1:00:11:dc:88:b3:95:4a:ac:86:e3:cd:c0:da:f6:
29:ba:d0:64:d8:90:2c:22:1d:49:ca:9f:0d:00:8e:e5:65:14:
3f:0f:cb:18:af:32:38:d9:07:91:4f:a7:75:94:82:bb:3b:2c:
53:97:59:a5:ea:ff:37:55:4c:92:3e:20:cb:e5:7b:6e:5c:1b:
25:6c:4c:ec:ce:fe:6b:dc:57:49:de:ca:a2:45:5b:02:a2:49:
17:12:fc:c4:b8:d3:87:f0:bf:16:9f:6a:7e:94:37:20:86:0a:
e5:1c:bd:56:99:21:b6:42:21:c7:b6:53:f2:49:20:ed:56:80:
4b:9a:34:47:d1:90:4b:cc:43:b2:3e:70:42:fb:a0:d0:d9:5d:
38:80:da:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:01:55 2025 by rpki-client