Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
File: tKIIXH3jtZgha4n7Dysdkw3mbBk.mft (raw, json)
Hash identifier: qGsKRgCc7pzzlKE2E6Q0OTLzIns1k16HvGdE0JSBjbE=
Subject key identifier: 58:03:66:06:27:ED:B8:BD:89:A7:D4:FB:8A:22:9D:A8:4F:8B:4F:3F
Authority key identifier: B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
Certificate issuer: /CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Certificate serial: 0198C67F62AA69417C8C08CDF767E0247E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
Manifest number: 1617
Signing time: Wed 20 Aug 2025 08:01:33 +0000
Manifest this update: Wed 20 Aug 2025 08:01:33 +0000
Manifest next update: Thu 21 Aug 2025 08:01:33 +0000
Files and hashes: 1: Bm5UACtbnF-zdFYjA8vPOBqvgzc.roa (hash: TLMH3v0yPGvBQf4sp02A0ciC7nkIzxuyV+cC5oHQvcg=)
2: KygTuxQFGUD5ATwC-VI56P0_KW8.roa (hash: +kPqhnKnrFZGjWfktqCyP4orZXjdv9+6M6sRVLgaUrA=)
3: kH7H7auuv6q7VTDiT7be_vcY-1Q.roa (hash: M4+McdjIhgE1/SI8bKbvFu1HsdzjwaQszRqVGjqa+wM=)
4: tKIIXH3jtZgha4n7Dysdkw3mbBk.crl (hash: o9l5iOG8CyimdF3O/w/MWDTcshZUq5asRYN3dywftec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:7f:62:aa:69:41:7c:8c:08:cd:f7:67:e0:24:7e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Validity
Not Before: Aug 20 08:01:33 2025 GMT
Not After : Aug 21 08:01:33 2025 GMT
Subject: CN=5803660627edb8bd89a7d4fb8a229da84f8b4f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fc:74:dd:e7:51:cf:24:a1:04:a3:4c:ee:37:
d0:12:95:75:39:b6:00:bf:d3:91:e7:92:06:97:d7:
17:58:dc:9f:88:ff:e7:22:ce:5e:c1:43:73:a8:e1:
25:b3:74:04:2e:91:6e:ec:c1:6b:cc:a8:ae:76:95:
0a:a0:3b:07:d4:77:e0:3b:8d:a4:4f:38:a4:f6:a8:
f2:f2:9b:55:c2:6c:08:1f:6b:20:2f:3d:f2:8c:be:
86:c4:b1:e9:e4:b2:9d:b3:c0:93:20:26:68:87:1b:
ec:c6:46:ac:ca:46:13:7c:55:8c:fc:55:b7:61:de:
0c:9b:ea:10:48:23:2b:c5:27:27:1b:f2:7b:cf:bb:
83:50:90:36:58:37:73:e8:56:35:48:0c:c0:61:18:
2b:7b:02:60:7a:cc:59:47:b7:e3:8f:91:1e:8b:e0:
a2:38:91:c3:08:71:d9:32:6e:42:ef:31:6a:49:dd:
97:13:47:3a:74:9d:2d:c6:b6:0a:40:8f:3b:4b:17:
7d:b0:54:14:22:07:ea:a3:0f:1a:05:9b:56:f9:95:
cf:ea:f3:7a:c3:e3:91:09:9f:55:87:2a:53:8c:d2:
2e:47:56:d8:cf:c9:10:b8:4d:c0:97:a2:b4:0c:d3:
50:08:1d:0d:fb:1b:be:e1:65:fb:fc:54:aa:dd:88:
02:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:03:66:06:27:ED:B8:BD:89:A7:D4:FB:8A:22:9D:A8:4F:8B:4F:3F
X509v3 Authority Key Identifier:
keyid:B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:86:17:4f:03:8c:7a:d0:e0:11:ac:a7:60:e6:ba:cd:fc:50:
58:41:6b:cc:be:67:fb:80:3e:ee:96:aa:b0:50:2d:15:2f:34:
db:ca:49:2f:e4:51:09:28:2e:29:77:86:5b:21:46:de:cd:8a:
3a:71:c4:33:1e:f4:0d:e2:ab:8a:a2:5f:0b:a4:e8:01:48:aa:
8c:0d:4a:51:25:ae:e6:06:ee:bd:a0:ab:f3:75:a6:57:97:1e:
e8:d3:94:8c:f3:97:f3:ba:0c:5f:c7:cd:01:57:c2:dc:f6:3e:
c5:66:c0:4e:74:f0:93:8e:92:5a:76:8f:84:04:97:c0:4a:02:
f3:0b:20:b1:ef:7b:47:af:94:47:dd:d7:f4:8f:95:df:23:27:
d3:eb:b9:d4:29:ad:f0:2e:b2:2d:72:60:f6:3d:b2:20:86:d4:
10:a6:61:09:16:b4:3f:4d:12:f5:f2:72:35:7d:b6:ba:fa:75:
f3:b7:80:f8:89:25:ea:9a:5d:ce:9f:cf:46:7d:aa:46:c7:60:
88:8d:39:4e:3c:7a:83:6c:bf:00:45:8f:2d:58:ae:49:21:1d:
68:85:63:a6:6c:55:72:74:c5:5f:9e:7c:c6:be:13:2b:19:2d:
a1:0c:92:cb:40:dd:1a:3d:61:cb:c7:5a:7c:d5:0a:de:16:ea:
d8:7f:3e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:32:01 2025 by rpki-client