Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
File: tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft (raw, json)
Hash identifier: 5v04XhYv9mw2Ok+RE/FFV2H7tQrkmyQv59yhTg8DhvU=
Subject key identifier: FF:8F:E1:56:33:17:06:A0:CB:EB:9F:8E:7B:85:05:00:AA:53:4C:75
Authority key identifier: B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3
Certificate issuer: /CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3
Certificate serial: 019921E74DA9425B2C74CCC7FA7CE21D3F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 02:00:30 +0000
Manifest this update: Sun 07 Sep 2025 02:00:30 +0000
Manifest next update: Mon 08 Sep 2025 02:00:30 +0000
Files and hashes: 1: mAE3_QFYxLK2bxPNIhFbVq5Pufo.roa (hash: 8Db1Fqvg0Iw4fJZLlY1WJu1zNG21SFNmOlpLtn7VYgI=)
2: tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl (hash: mX7o3ItQCr8gPIjo+cBheOjxbT5QPI8P0aO8lCnS5h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:4d:a9:42:5b:2c:74:cc:c7:fa:7c:e2:1d:3f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3
Validity
Not Before: Sep 7 02:00:30 2025 GMT
Not After : Sep 8 02:00:30 2025 GMT
Subject: CN=ff8fe156331706a0cbeb9f8e7b850500aa534c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:eb:73:10:58:a8:e8:65:cb:0f:9f:9e:e4:99:
43:42:b8:f1:0d:85:a3:ca:cd:20:3e:a5:86:bb:7f:
3a:e5:cd:1c:cd:61:a7:b6:de:dc:6e:b4:11:2f:6a:
0a:a5:dd:3d:8c:1d:7b:e4:6a:65:ed:5c:c1:37:d3:
3e:04:dc:19:be:ee:cf:fb:9d:f7:4e:1c:4c:2e:2c:
71:3e:8b:98:b8:b2:26:f9:e1:3a:ce:bf:fc:06:1d:
2c:be:ea:62:f6:23:a2:15:dc:48:d1:f4:dc:d8:d2:
52:5e:0d:96:4f:d0:0b:ea:c5:d4:f3:0d:25:a3:cc:
de:2f:1f:cf:b1:f7:27:57:85:d3:f4:12:24:a2:92:
80:15:93:da:75:44:fc:b4:56:18:81:57:b4:37:cf:
c3:c3:24:46:07:0c:4d:a6:78:fa:f1:08:d2:66:74:
ae:0d:77:d4:46:ea:5d:80:d8:c9:97:8f:ba:b3:e8:
92:2a:1f:10:34:57:b4:1b:ed:0f:e6:a5:57:63:15:
4b:89:23:12:b1:d4:9b:9c:57:57:6a:c6:9c:09:bc:
5c:d5:19:fd:cb:17:8f:7b:76:64:89:69:19:f7:4f:
ff:4d:e6:11:1c:15:86:52:a4:bb:6d:e8:ee:4b:72:
e9:9b:63:72:6f:29:f0:d6:b2:42:95:a1:d6:c2:b5:
75:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8F:E1:56:33:17:06:A0:CB:EB:9F:8E:7B:85:05:00:AA:53:4C:75
X509v3 Authority Key Identifier:
keyid:B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f4:61:c1:fd:df:a1:d8:01:d4:c2:7a:b2:26:f7:73:da:c5:
e2:14:60:31:f0:11:7f:ab:f5:47:d8:39:dc:35:7f:a8:57:30:
19:70:81:e6:7c:b0:7d:c0:65:f4:14:f4:f6:4e:17:80:fc:24:
f2:27:d4:bf:65:9d:9b:d7:9d:b0:bc:73:de:7f:3f:4d:bb:96:
82:86:b4:a5:31:0b:20:b4:ff:08:ba:4d:1a:a2:6f:aa:5e:13:
e2:0b:3d:c5:03:d7:e0:66:67:7c:95:a1:53:0e:a3:03:21:2e:
99:48:56:58:e7:aa:e1:7a:53:ae:b8:d6:71:52:45:d2:6e:1d:
57:17:33:f9:81:2e:32:bd:4a:8f:c5:e4:06:24:a8:86:1d:5a:
73:92:a3:23:3e:03:f6:3c:2c:44:0a:18:48:dc:b6:2a:e0:63:
3f:00:51:f4:c4:70:e6:e9:6b:70:7c:75:e1:d4:a4:b6:ae:e8:
88:0d:a6:7d:d9:a9:98:33:2e:7f:e4:58:f1:5d:75:33:90:95:
5d:f7:28:1c:f7:15:be:eb:ff:16:f6:97:3e:38:75:49:98:35:
3c:a2:8f:61:56:43:2c:ac:e7:5f:85:2c:93:d3:37:22:5a:91:
eb:dc:d2:e8:1b:98:25:34:d4:fb:2b:51:c2:e5:b7:7d:a2:ab:
86:dd:92:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:11 2025 by rpki-client