
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
File: tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft (raw, json)
Hash identifier: U3MQbh1tzrkdlIT0vGCkv/CBXCMgUK4PahEe4rUAmfY=
Subject key identifier: FE:92:6E:17:23:F9:D9:F6:17:A8:85:E4:27:29:F8:48:23:BC:34:3A
Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
Certificate issuer: /CN=b467367967dc763349fd0b50e31f75b823028590
Certificate serial: 01993047F51C30F3686B8C01EA968A9C7207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
Manifest number: 1688
Signing time: Tue 09 Sep 2025 21:00:46 +0000
Manifest this update: Tue 09 Sep 2025 21:00:46 +0000
Manifest next update: Wed 10 Sep 2025 21:00:46 +0000
Files and hashes: 1: e-zqoP0nWdm02Bk16jrVb4CC90g.roa (hash: pTRQmXW0bB5un3EpnoOxHqaBcDgz2x7X9RkzGbB+gaE=)
2: fyxM_h2WX6rYIy5hg25YZB5O2CM.roa (hash: 9Ti3G/owzw7kR0D0MPQYXnuvUJArE0MI+SK12KJz4Yg=)
3: kfp0pk6rT7KzEgPpeNsP3WrJZ6E.roa (hash: ou9w6LX17ZfBGKa+aA56CHgkOdgzWRAn9XUt36rvoyw=)
4: tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl (hash: WQJpDQ5QhEQGUeTOmxAUPDYVoWJhqb9BNAjN8USTeJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:47:f5:1c:30:f3:68:6b:8c:01:ea:96:8a:9c:72:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b467367967dc763349fd0b50e31f75b823028590
Validity
Not Before: Sep 9 21:00:46 2025 GMT
Not After : Sep 10 21:00:46 2025 GMT
Subject: CN=fe926e1723f9d9f617a885e42729f84823bc343a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:5e:19:66:10:74:20:cb:a3:32:33:5f:4f:
e8:88:74:da:61:89:36:4c:cc:a0:75:c4:54:8b:36:
fc:82:8e:4b:fd:d8:d8:73:1a:fc:b3:a2:fc:05:fc:
f5:aa:cb:26:a2:72:7d:db:ef:6e:bb:f1:24:c8:b4:
49:73:d0:7b:e7:b3:22:ff:e5:a4:8a:f6:70:e8:f1:
07:a5:75:55:d5:55:98:7e:25:ac:71:51:79:16:76:
5c:7e:e2:bf:d5:07:e0:36:af:ab:ac:b0:66:f0:2a:
c9:63:d5:a9:b4:fc:46:96:bb:2c:19:be:45:3e:7a:
ef:7d:fb:7c:70:94:1b:5e:46:3b:fa:8e:37:bd:d9:
b2:12:f8:81:f4:9a:20:d9:9e:13:e1:44:bf:d4:3a:
56:f1:b7:32:65:22:fd:11:11:e3:0c:2c:f7:a0:c7:
ac:9b:c9:9f:f3:fd:2a:7d:1f:f4:8e:10:0f:eb:02:
9c:0d:03:7b:07:5b:d9:d2:dd:96:9d:0c:ba:73:21:
52:96:81:cc:e7:ac:95:54:8d:49:79:3a:52:65:f5:
aa:9b:a5:c5:4b:a8:64:4c:cc:bd:d4:64:c1:83:25:
0a:9b:48:a5:41:93:c2:fb:48:a7:4b:31:e5:57:13:
51:f9:71:48:d6:7f:1b:9d:7d:12:8f:dc:bf:e6:b8:
35:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:92:6E:17:23:F9:D9:F6:17:A8:85:E4:27:29:F8:48:23:BC:34:3A
X509v3 Authority Key Identifier:
keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:00:42:33:ff:a8:41:6d:3c:4b:99:42:1b:ca:e5:91:1f:36:
a1:4a:dc:6c:fe:5a:c0:e8:e8:a5:55:12:8b:a6:e1:3d:89:5d:
4f:a6:d2:a0:82:70:1c:ad:14:20:4c:66:ba:ea:52:7b:8c:90:
48:65:03:04:fc:3f:31:14:e9:6b:91:5b:7e:d7:28:d3:bf:98:
7a:29:77:cf:e7:e3:51:0a:9e:e7:7e:92:c7:20:ba:7a:da:85:
7e:89:32:b1:a8:f1:14:f5:4f:9f:f3:6c:98:58:40:b8:86:46:
46:c3:3b:7b:85:37:c4:0f:6a:95:46:fd:8b:56:1e:6e:98:6f:
c4:66:a2:61:90:86:22:b2:bb:30:65:90:47:d9:fc:e6:b3:16:
4a:21:65:ff:06:fc:3d:76:99:d2:e6:be:c5:53:1a:bd:7b:52:
82:58:7e:0c:df:89:ad:3b:95:ad:7c:65:1c:0d:94:63:8c:b3:
cf:56:50:ad:d5:29:78:43:5c:23:89:6e:82:81:4e:cc:e6:e4:
2f:71:e4:a5:55:82:73:a9:ad:88:7c:90:d5:dd:7a:29:14:56:
f9:b9:54:35:4b:aa:cc:1d:61:04:31:85:5e:47:90:90:46:b1:
f4:c4:57:a8:74:28:27:fc:08:58:de:ff:04:dd:91:be:8a:53:
73:08:7d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:01:09 2025 by rpki-client