Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
File: tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json)
Hash identifier: sBAFfv9Pu3L415hi4tL4p0pWddV2cmCwAcoZt9DSYvc=
Subject key identifier: 64:7A:72:22:0A:64:A6:C9:0A:B9:10:79:22:9E:5D:B3:F7:84:CC:D2
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial: 019935008303E0413566216B00B6A1580A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 19:00:49 +0000
Manifest this update: Wed 10 Sep 2025 19:00:49 +0000
Manifest next update: Thu 11 Sep 2025 19:00:49 +0000
Files and hashes: 1: J7n-Yd5XTH7n67jouruR47yViJQ.roa (hash: uOcoBZNZsx1gjsqlLawiv97uMdypKgT5mBdaC/TonUs=)
2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: eSInChQCTg767e1wp2+/jf6QYNULR8DcWwMoPDF4+Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:83:03:e0:41:35:66:21:6b:00:b6:a1:58:0a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Validity
Not Before: Sep 10 19:00:49 2025 GMT
Not After : Sep 11 19:00:49 2025 GMT
Subject: CN=647a72220a64a6c90ab91079229e5db3f784ccd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:6c:f8:24:09:42:86:a2:09:36:3f:bb:e5:
ef:b2:e7:63:0a:29:0f:87:f2:73:a1:f2:6d:ac:89:
5e:7c:03:48:a9:c4:f6:f5:ba:ed:a9:85:0e:90:d3:
59:1d:d0:b7:63:7b:4b:7b:1b:13:3e:a7:3b:10:d0:
61:bd:8c:c0:e2:80:5f:22:75:46:68:e9:27:f4:f9:
71:b5:81:09:62:68:00:d7:70:38:bc:29:83:03:4e:
6a:33:fb:07:91:73:81:85:52:95:38:7c:aa:c2:e2:
44:05:c3:b6:24:64:67:15:1a:eb:d7:85:d6:b1:f2:
79:08:45:e5:61:56:76:6a:0e:f4:05:0e:ea:02:03:
66:9a:6a:08:2b:f8:83:0b:35:7e:e3:0b:87:53:26:
58:74:64:1e:b9:f4:1e:39:ef:d3:c0:b4:1f:dd:a4:
44:1c:16:eb:41:8e:53:2e:ad:71:af:53:b7:b8:1f:
0d:b8:c1:b7:da:b8:82:12:24:87:bf:d2:a0:e8:52:
7a:5f:db:76:74:03:5c:97:09:46:21:a1:a2:dc:23:
d5:f8:d9:08:b0:55:aa:05:bc:4b:88:06:88:91:81:
8e:a7:30:9a:aa:e0:ac:5a:08:a4:3f:b5:c8:6a:b3:
37:ef:db:fa:fc:dc:02:3b:b5:35:af:cf:bd:f0:0b:
9d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7A:72:22:0A:64:A6:C9:0A:B9:10:79:22:9E:5D:B3:F7:84:CC:D2
X509v3 Authority Key Identifier:
keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:75:ad:f5:06:b3:10:50:3c:c7:b7:77:4e:20:33:09:09:0b:
5e:62:4d:87:8f:83:cd:36:fd:8d:fd:26:9f:96:f1:53:de:ab:
eb:31:cf:08:9d:10:f9:b9:89:95:23:92:1e:a5:01:ee:50:3d:
71:49:30:cd:d1:b3:dc:f6:e2:32:88:54:69:ff:27:1f:30:9b:
f3:33:65:ea:f2:ae:69:ef:22:f8:89:01:65:7f:da:12:d6:d9:
01:9a:da:f7:8c:57:08:a8:e0:97:e8:89:03:ea:4f:d0:9c:0a:
2b:2f:df:e0:ca:bd:71:fa:cb:67:69:43:a7:50:41:90:43:1a:
7c:d4:81:d1:b5:f7:91:49:c4:22:dc:d8:8f:f2:5e:77:2b:8f:
1b:1d:a7:d7:a9:d8:00:2e:d8:ef:30:29:83:77:2e:3d:25:d7:
9b:b6:1e:7c:33:77:93:59:2e:85:8a:2c:fc:34:8c:90:b1:d7:
b7:ea:39:79:b4:a1:05:b1:73:ef:36:5d:c4:32:fc:a9:a6:a2:
49:07:fa:81:fe:f3:7b:ce:80:cb:f0:8c:05:b1:19:db:f7:6b:
3d:04:02:6a:dd:be:73:96:3a:e1:c0:e6:d5:67:74:f8:4c:46:
35:28:3e:49:d7:87:8e:c6:9a:62:11:05:b0:21:45:1a:38:2f:
5c:b2:c1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:27:25 2025 by rpki-client