Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
File: tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft (raw, json)
Hash identifier: 0nGVCTEIZY5Tbvnv+OPoROOu9NxXrYogWuXTbE2C9lU=
Subject key identifier: 62:4A:77:91:36:68:C6:6C:1E:CC:E2:19:2A:05:F9:C0:70:7F:1F:8C
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Certificate issuer: /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial: 019936EEF63D423882C1F3C6F491936340B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
Manifest number: 096F
Signing time: Thu 11 Sep 2025 04:00:54 +0000
Manifest this update: Thu 11 Sep 2025 04:00:54 +0000
Manifest next update: Fri 12 Sep 2025 04:00:54 +0000
Files and hashes: 1: tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl (hash: NDB/1keFLQfJJ5xP23vJcwbXPifO0fJSVaUzv1JsBYw=)
2: zBqyJEl1ZTI7fL6gM2motFXrSRM.roa (hash: OkJW2+OnAMScP2GdhvLfFrfdk7h2e43pg36iU6eHej4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ee:f6:3d:42:38:82:c1:f3:c6:f4:91:93:63:40:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Validity
Not Before: Sep 11 04:00:54 2025 GMT
Not After : Sep 12 04:00:54 2025 GMT
Subject: CN=624a77913668c66c1ecce2192a05f9c0707f1f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4c:f8:88:65:c2:4a:37:02:b1:f3:83:b0:7a:
ec:92:bf:88:53:dd:b6:bc:56:ad:5b:82:b0:2d:29:
24:8d:38:1d:ea:ee:d3:0b:16:4d:54:7d:bf:47:74:
27:28:3b:fd:31:55:c6:9b:9f:09:22:0f:ab:c4:62:
d3:83:fb:e9:9a:93:2e:ce:73:98:e8:f1:4b:d1:ad:
56:e1:bb:6c:7c:ba:19:c0:a7:3e:74:90:c0:c0:d8:
99:2a:eb:3c:cf:9d:85:80:73:97:75:b0:20:67:1d:
2b:99:20:19:ca:45:09:30:be:b3:d6:a5:1f:9d:49:
f4:72:e6:88:a2:4a:07:c8:34:38:b4:ea:d0:d1:9a:
30:66:d5:8e:43:be:bd:2e:a4:02:1c:7a:22:51:17:
44:a7:d6:e0:40:b6:a9:19:3f:fe:b1:c4:23:01:03:
a3:5e:b1:45:a7:c3:2b:19:ce:2c:64:5b:3d:7f:35:
29:d7:35:ee:2c:35:3f:36:9e:28:d4:be:e1:2e:34:
66:c2:1e:df:97:be:73:6f:5e:71:28:d7:79:b5:d7:
c0:ed:74:d4:d8:5f:31:31:ef:41:17:95:30:cf:f6:
66:6f:f9:06:a2:2c:48:df:0d:57:9f:1b:80:77:4b:
33:d2:59:a0:a2:00:80:99:66:b7:0e:65:51:2e:1e:
90:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4A:77:91:36:68:C6:6C:1E:CC:E2:19:2A:05:F9:C0:70:7F:1F:8C
X509v3 Authority Key Identifier:
keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:37:47:fb:20:1e:17:87:00:93:91:76:14:41:03:a9:00:83:
bb:a7:64:37:9e:ab:07:b4:c7:73:04:6f:85:46:ca:01:68:f0:
53:17:af:b5:fe:2a:ad:ea:c4:04:77:9b:68:38:ce:43:45:ba:
39:5b:41:13:d8:0b:3b:1d:d2:44:46:da:0e:d2:40:ac:df:da:
40:a0:ea:29:af:88:f4:b1:d5:70:e1:ce:51:b8:d4:46:ca:cd:
e3:68:60:c6:c9:28:f4:38:5d:f0:30:11:c0:ef:5d:0f:49:41:
98:b6:bc:ba:6e:b4:a5:14:f0:9d:0a:19:0b:92:5c:66:3d:44:
d6:bf:75:78:5e:7e:49:18:94:e8:a4:41:71:ef:70:a1:a8:df:
1d:7c:79:92:f5:71:27:e6:14:64:c1:f0:55:d1:75:18:af:35:
af:4d:90:31:e0:64:5e:0b:85:99:0b:c0:82:8f:27:f5:ca:2f:
0f:4c:c7:55:97:cc:1a:fc:0c:15:a7:2e:dc:da:a7:53:97:22:
ce:c1:83:63:bf:5f:e8:be:dd:8b:c1:00:bb:c2:7c:75:9d:ed:
df:79:2f:76:14:13:7a:3e:88:06:eb:fc:41:99:09:02:57:bf:
bd:69:77:65:34:b4:a7:b6:d6:50:d9:2f:08:1a:e5:56:5f:28:
54:44:d7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 14:22:59 2025 by rpki-client