Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft
File: tucewFWW3EmUEGcP8hk_MJT6pqc.mft (raw, json)
Hash identifier: ka17W+BTmJl3yqZN1YdGJ6e93VKPfHmzQdGMmh76uWM=
Subject key identifier: A6:8B:4C:5A:87:CB:FE:74:B6:C8:99:12:05:37:D2:10:F4:AB:52:FB
Authority key identifier: B6:E7:1E:C0:55:96:DC:49:94:10:67:0F:F2:19:3F:30:94:FA:A6:A7
Certificate issuer: /CN=b6e71ec05596dc499410670ff2193f3094faa6a7
Certificate serial: 01992367D6B102D42A7C2A2B0B1339DE1663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft
Manifest number: 57
Signing time: Sun 07 Sep 2025 09:00:31 +0000
Manifest this update: Sun 07 Sep 2025 09:00:31 +0000
Manifest next update: Mon 08 Sep 2025 09:00:31 +0000
Files and hashes: 1: hRPKeHZ6_YWICYTS_JHAiqBF0Sg.roa (hash: NDzOC26DELEHx7JLJ5CgjjPlTl9/8PN/GUB9G8BQkuk=)
2: tucewFWW3EmUEGcP8hk_MJT6pqc.crl (hash: QetcGauZVDtgju+ezaLErehuf+Ua4q5UPMk3+IPdeZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:d6:b1:02:d4:2a:7c:2a:2b:0b:13:39:de:16:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e71ec05596dc499410670ff2193f3094faa6a7
Validity
Not Before: Sep 7 09:00:31 2025 GMT
Not After : Sep 8 09:00:31 2025 GMT
Subject: CN=a68b4c5a87cbfe74b6c899120537d210f4ab52fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:97:ed:2e:09:11:08:00:fd:57:83:f3:fb:17:
c9:c6:c6:6a:43:44:4c:9f:2f:60:99:18:2b:b3:5c:
19:8a:cb:90:94:f3:bc:85:d6:56:33:36:d5:44:03:
2d:ab:bf:2d:b1:aa:ef:a5:40:4f:15:97:c4:c8:42:
7c:e0:c7:99:7e:10:23:0b:af:9a:12:39:8d:c7:6a:
4b:82:7b:f0:66:c8:ca:88:4f:4a:97:10:ea:6a:93:
01:90:0a:18:a6:c9:c7:0e:ea:e4:81:b2:fb:0c:ce:
9e:89:95:59:0c:f3:93:85:08:ed:bd:7a:14:4a:31:
b3:6e:15:ca:cc:96:97:12:4e:ff:e4:70:c1:47:15:
f7:25:e4:e8:dc:9e:08:e3:82:7d:d6:3f:6f:e7:ce:
fc:77:e8:03:90:60:30:ad:80:5b:37:80:af:74:f7:
e7:20:e0:00:41:4e:21:5f:39:e3:32:4f:e3:0a:c8:
30:a7:7e:a5:97:12:d9:79:d5:57:a1:e4:73:76:2f:
47:c6:f7:74:fc:9d:ef:7e:cf:34:7a:81:21:2e:17:
75:b7:c8:33:26:b8:f8:61:99:9e:43:3b:56:0d:cd:
bd:a2:98:d1:de:42:8f:44:00:62:dd:73:f9:74:1d:
c0:3c:4e:5b:9f:72:f5:c3:65:21:28:11:ae:13:19:
40:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8B:4C:5A:87:CB:FE:74:B6:C8:99:12:05:37:D2:10:F4:AB:52:FB
X509v3 Authority Key Identifier:
keyid:B6:E7:1E:C0:55:96:DC:49:94:10:67:0F:F2:19:3F:30:94:FA:A6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:da:dd:12:b0:02:bd:8f:fa:4c:8b:bf:7f:7d:ca:26:89:d9:
23:45:4c:03:9f:11:0c:32:2d:52:f1:4b:e9:25:24:7d:31:ea:
91:ad:46:14:50:4a:81:cd:d2:63:8a:e3:7a:66:95:df:ef:ea:
f4:ba:04:92:0a:35:76:99:20:61:44:a3:1f:2e:1a:f0:b4:d9:
ac:b2:52:c4:92:e1:b9:ca:d4:13:b6:eb:a3:21:56:88:88:d6:
a3:31:ae:09:de:98:79:77:2f:96:db:3b:4a:98:48:e7:02:3d:
e8:1a:f4:df:a9:c1:d5:79:4c:ec:e2:d9:27:82:11:cc:91:aa:
de:03:e5:a4:b3:5f:fe:f9:ba:2c:ff:83:0a:b9:f4:d2:35:d9:
0f:65:e6:b7:5d:f2:31:44:54:ee:36:8c:cf:f4:da:fb:40:2a:
05:05:1f:c5:03:9b:51:1f:2e:93:2e:97:bb:a0:b7:85:b3:57:
20:c7:41:bd:10:ba:ad:be:e7:ac:8c:3b:50:15:89:08:fb:85:
dd:6f:bd:be:98:97:eb:9b:b3:62:35:42:e2:7a:d0:2e:fa:f6:
85:e5:fb:f7:45:08:67:0a:a5:48:db:93:5d:53:df:91:75:cc:
9c:eb:2a:76:5a:fd:91:d1:a2:df:da:18:f6:55:08:bd:ec:f8:
a7:4b:b9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:29 2025 by rpki-client