Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
File: tBuxzdW4a-d4BoidLhsgKswnsiU.mft (raw, json)
Hash identifier: 24tEn7dl1wqF29+RtayxZwH6Qw9wIJArz+NjlIdPhN0=
Subject key identifier: 32:84:0D:7E:E5:4E:9C:1F:A6:9C:3C:D4:B8:AE:B2:C4:0A:51:DE:48
Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
Certificate issuer: /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Certificate serial: 019A09A58BB8BF7409B2E6B55251272F5498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
Manifest number: 03B7
Signing time: Wed 22 Oct 2025 02:00:35 +0000
Manifest this update: Wed 22 Oct 2025 02:00:35 +0000
Manifest next update: Thu 23 Oct 2025 02:00:35 +0000
Files and hashes: 1: 7E7gyymF8j2toEenFO04AQuZbVQ.roa (hash: HKny0hIiEORMsHrCnF3pLBTGlpUFzpGxVsMxMmuOnho=)
2: tBuxzdW4a-d4BoidLhsgKswnsiU.crl (hash: HgvM0f1jg4CzJa5lnNMvbirQCZGvbFNwP6gmjI/eZR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:a5:8b:b8:bf:74:09:b2:e6:b5:52:51:27:2f:54:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Validity
Not Before: Oct 22 02:00:35 2025 GMT
Not After : Oct 23 02:00:35 2025 GMT
Subject: CN=32840d7ee54e9c1fa69c3cd4b8aeb2c40a51de48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:db:b1:6f:68:93:9d:e6:43:04:0a:f2:38:
8a:02:9e:c1:e2:b8:a1:6c:2f:26:35:c0:3c:c1:87:
cc:b5:8c:3f:59:99:05:56:b2:6f:73:3b:e4:d4:72:
5a:89:08:ba:a1:2d:5d:32:f8:c8:44:70:01:8f:03:
31:29:7e:bf:c1:e8:cc:32:0e:40:c9:2c:d9:a0:c4:
61:62:d1:9c:50:78:bf:f2:7c:9b:a2:03:75:ec:66:
a8:d4:ed:ae:95:95:69:5b:6e:3f:31:cd:b4:9c:29:
15:4b:fe:9b:0b:c3:b9:7a:96:c9:84:17:8b:a5:02:
4a:d7:98:8d:c9:74:84:17:bd:18:fc:1d:62:78:20:
e9:53:69:ac:76:31:8f:e9:74:6e:33:f5:31:b2:6b:
08:50:8b:69:e8:a6:65:00:4a:5a:57:f5:0e:ab:62:
a2:24:e7:03:47:f7:b2:2a:d6:98:4b:66:d0:48:e0:
2e:1b:99:ac:72:6e:ea:7c:16:f4:7b:2b:c7:2b:74:
c8:1a:74:04:ab:42:5f:1c:40:06:d5:1d:61:b5:a6:
6b:49:b2:b1:03:51:b5:4c:de:0f:59:03:e5:f3:b4:
86:c2:f5:25:8e:50:51:0b:43:03:56:91:9c:d0:e1:
70:a8:7e:68:92:78:60:ec:64:a3:71:29:38:6a:39:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:84:0D:7E:E5:4E:9C:1F:A6:9C:3C:D4:B8:AE:B2:C4:0A:51:DE:48
X509v3 Authority Key Identifier:
keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:25:36:0a:62:10:ce:16:60:53:57:72:7a:36:4a:11:25:94:
36:b3:2f:11:38:97:2c:41:56:65:5b:bd:9f:e5:63:30:5b:3c:
90:db:5d:eb:e3:45:04:42:05:3d:89:34:79:aa:9b:e8:20:ea:
e2:6e:5c:ab:15:1d:87:47:a3:b8:78:b3:fd:37:c3:79:d6:2f:
24:dd:d9:09:63:73:c1:27:de:db:1f:38:13:cb:f2:b0:60:75:
b9:29:39:80:2f:6f:02:df:bd:12:86:56:b3:fd:2a:f5:84:e4:
0e:d5:33:cd:4c:97:03:8c:ea:d5:97:f5:74:17:c1:2a:58:db:
13:0a:d4:42:43:fd:9b:42:1a:aa:5a:78:3e:c6:88:96:96:83:
5f:99:cf:c8:58:9f:dc:ea:a4:25:c2:42:ed:76:29:cc:28:72:
32:70:7f:24:03:df:73:67:1b:44:3c:5a:72:7c:c9:86:90:94:
d9:86:d0:82:27:71:cd:48:9b:63:e5:bb:4b:03:ff:56:bd:46:
b5:df:a2:85:27:88:1e:91:ba:be:cd:71:29:33:b5:d6:60:4c:
03:f4:e5:d1:45:f5:f2:c4:12:9a:fc:e1:2b:f2:0c:b2:c3:b2:
3f:1e:60:1b:b7:2b:99:73:ee:95:c4:94:ff:3f:01:00:d0:99:
f8:61:63:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:11:46 2025 by rpki-client