Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
File: tFBkwayGkOLHepWaUCVG6YvNNyc.mft (raw, json)
Hash identifier: rhQv8ur/zuVXamY64d1YP/SZ94lvDqx2HY9uXEkX8EA=
Subject key identifier: 85:D2:17:2A:E9:DC:70:A6:34:2E:C3:B3:7C:FA:50:3D:2A:46:8F:62
Authority key identifier: B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
Certificate issuer: /CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Certificate serial: 01992F3662647B06A0708ED930F52638BDB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
Manifest number: 0CF8
Signing time: Tue 09 Sep 2025 16:01:57 +0000
Manifest this update: Tue 09 Sep 2025 16:01:57 +0000
Manifest next update: Wed 10 Sep 2025 16:01:57 +0000
Files and hashes: 1: _INaZ6DycFqZuVm42lkSOfz9oRs.roa (hash: N1fFaEC6dFW7nNDOY6nEbXrF6dJ7s2tSPU9xB9zA38k=)
2: tFBkwayGkOLHepWaUCVG6YvNNyc.crl (hash: KpiFDjeEvTyB6VsIJVJ+RStiM+n2Q5MH+Bo5Arl/hR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 16:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:36:62:64:7b:06:a0:70:8e:d9:30:f5:26:38:bd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Validity
Not Before: Sep 9 16:01:57 2025 GMT
Not After : Sep 10 16:01:57 2025 GMT
Subject: CN=85d2172ae9dc70a6342ec3b37cfa503d2a468f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:55:36:8f:e9:e3:13:a6:1d:d7:b3:32:51:
ac:aa:d1:3d:4d:1f:18:af:d2:1d:ca:86:c1:be:06:
f4:6f:13:31:73:d0:7a:67:cb:88:17:90:12:2c:cb:
05:c7:b1:c6:81:54:c2:fc:48:b8:d8:af:93:1f:23:
7a:0e:f6:2b:2f:04:eb:82:90:3a:62:7b:8d:dd:a3:
d8:c9:0b:9f:82:73:42:f2:4b:e5:31:a6:c4:6e:b8:
e4:8c:dc:70:6c:ec:03:6d:32:54:95:d0:33:c6:37:
dc:6d:4c:51:8b:03:7a:40:8c:8f:8e:2b:be:15:76:
4e:d2:93:a8:3b:36:f8:2d:b7:5b:88:ff:33:fd:94:
35:1c:9b:04:45:c7:e4:f2:e2:3c:5e:6f:4d:5f:b7:
50:85:59:19:08:81:02:6e:db:1c:72:8d:17:5b:cd:
ed:b6:af:1e:b5:6f:f8:3c:76:12:6d:d7:75:c2:67:
23:77:0f:ac:df:01:b2:ae:ad:ea:dd:74:1d:72:09:
7f:ca:7d:7a:de:20:35:ae:9b:63:89:fb:e1:5c:a1:
17:4e:10:87:84:79:cc:24:22:57:bf:56:88:2c:cf:
ef:d2:21:b1:25:94:e1:3e:33:fc:5d:d0:a6:1e:47:
dc:11:df:75:a2:fc:f0:cc:87:95:1d:a5:8b:77:cd:
0c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D2:17:2A:E9:DC:70:A6:34:2E:C3:B3:7C:FA:50:3D:2A:46:8F:62
X509v3 Authority Key Identifier:
keyid:B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:78:7c:4d:96:23:19:a2:0b:a3:4c:f8:93:af:db:c4:f1:6c:
6e:b6:c6:2b:d8:82:00:13:8d:27:96:04:e0:29:6f:d2:ec:8d:
4a:d4:ae:ff:6b:b8:4f:ad:4c:f9:ba:28:b9:c4:f1:e3:af:a9:
ec:3b:d9:b8:32:23:95:35:bc:90:2c:16:50:1d:53:e9:5c:a3:
6b:c5:3e:c3:c3:ed:bc:60:57:f0:eb:92:05:59:76:8c:9c:b0:
22:a1:85:c5:76:a4:15:ac:ea:5d:92:84:0b:69:94:48:6b:95:
f6:99:b7:1c:e5:b0:e4:69:ba:6a:a7:96:1d:f5:26:7b:c7:cb:
62:87:de:d5:38:cf:8d:5a:20:a6:d5:47:1b:0c:ba:d4:0e:8b:
93:d9:f0:91:16:b9:3c:f4:84:59:30:e3:d4:a9:05:d8:7a:8e:
48:26:f4:1c:66:25:28:e7:53:2d:ad:2b:75:fc:03:4b:26:e2:
f9:f2:01:f0:2c:43:d9:87:d5:ae:c3:a1:f1:54:6e:88:47:8f:
fa:fe:12:0c:6b:34:c4:bf:45:e1:f0:fa:41:f2:a0:0a:5e:c9:
2b:32:45:0b:34:4f:aa:3d:74:cd:d8:a7:75:6e:b0:2f:f2:90:
25:24:e0:c2:12:00:eb:d5:bb:b7:96:00:00:50:5b:07:b9:02:
af:04:68:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 22:47:37 2025 by rpki-client