Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.mft
File: tmlTqin4JZqgLBImpGzgnt1Fzp0.mft (raw, json)
Hash identifier: av371pHGv5NCCOuPbxslAsfb3aWLTgqqXw1n/u+bQ2o=
Subject key identifier: 95:30:8E:9F:8D:A8:FD:0E:41:D3:27:08:61:1B:C1:7B:9B:EB:C0:DA
Authority key identifier: B6:69:53:AA:29:F8:25:9A:A0:2C:12:26:A4:6C:E0:9E:DD:45:CE:9D
Certificate issuer: /CN=b66953aa29f8259aa02c1226a46ce09edd45ce9d
Certificate serial: 0199239F7C5452D89DF1AB51B4BF256275B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmlTqin4JZqgLBImpGzgnt1Fzp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.mft
Manifest number: 0127
Signing time: Sun 07 Sep 2025 10:01:18 +0000
Manifest this update: Sun 07 Sep 2025 10:01:18 +0000
Manifest next update: Mon 08 Sep 2025 10:01:18 +0000
Files and hashes: 1: pqvRnrkHquypsw02knASEmaM8CA.roa (hash: iRr4/5L2X3HFedqB9qSGokTGPgu0NihU0rX3BfoQgdM=)
2: tmlTqin4JZqgLBImpGzgnt1Fzp0.crl (hash: yvJL/DTGTz9ZBo/8lGtw/mYYPc+cHmB4Eg0ZOdwaArc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmlTqin4JZqgLBImpGzgnt1Fzp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:7c:54:52:d8:9d:f1:ab:51:b4:bf:25:62:75:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66953aa29f8259aa02c1226a46ce09edd45ce9d
Validity
Not Before: Sep 7 10:01:18 2025 GMT
Not After : Sep 8 10:01:18 2025 GMT
Subject: CN=95308e9f8da8fd0e41d32708611bc17b9bebc0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:17:8b:4c:5d:af:c1:ff:d2:de:6a:8c:c2:78:
7d:be:75:01:4e:3d:49:69:d8:d3:72:92:3c:eb:74:
86:ac:71:96:c4:ed:d2:e0:71:ba:f9:12:5b:b3:2a:
e2:c4:57:3b:a5:60:ba:99:36:98:69:bc:21:4a:4a:
84:6f:9c:f1:b5:40:28:a5:b2:72:0f:70:aa:b4:ee:
c0:a9:28:8a:0f:f4:fa:1e:6a:a2:af:ea:ca:13:49:
76:8d:3a:e2:38:32:b5:9d:43:d1:49:5a:0a:53:e3:
10:7d:98:37:0f:17:24:a8:11:f5:7a:94:7e:bf:95:
11:a4:7a:5f:9c:cd:f0:12:bd:a4:2e:c7:4e:23:ac:
fa:81:b1:01:b8:ee:9e:d3:f4:09:7e:be:2f:1a:f0:
55:0e:16:09:d4:95:57:4d:91:76:2c:df:8e:83:92:
c7:8e:f6:e2:6e:ba:e5:5e:f1:64:1e:2f:4a:05:0c:
90:87:ae:72:ab:24:5a:26:ef:f1:1c:97:ec:49:cc:
54:e5:cd:46:9e:24:8e:1e:a9:67:8a:68:5b:3e:2a:
e6:72:3e:1e:59:f4:47:b6:34:e0:72:c4:2e:96:b7:
4a:e6:2c:01:6e:34:05:db:e9:bc:dd:3f:7b:eb:5b:
df:cb:bc:53:c1:fc:8a:0d:6c:3b:6f:8d:ca:90:4a:
39:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:30:8E:9F:8D:A8:FD:0E:41:D3:27:08:61:1B:C1:7B:9B:EB:C0:DA
X509v3 Authority Key Identifier:
keyid:B6:69:53:AA:29:F8:25:9A:A0:2C:12:26:A4:6C:E0:9E:DD:45:CE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmlTqin4JZqgLBImpGzgnt1Fzp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f5:dc:9f:4a:04:b9:cc:e7:43:e3:30:fc:c5:e5:86:a0:6a:
00:09:5d:c4:8f:5c:64:db:33:98:35:da:72:a6:23:fd:e2:b5:
b1:56:98:f9:33:25:65:a0:de:a5:eb:24:68:d4:e3:ab:27:9e:
6e:68:5e:c1:3d:57:00:67:c5:af:df:5c:fa:e0:9f:87:82:a4:
6d:6c:5e:a4:4e:28:34:3c:36:91:55:67:e1:85:49:41:b4:93:
5d:d8:03:3b:1b:28:fb:75:c0:68:1f:f4:c4:f6:a7:37:61:35:
9e:29:77:bc:ae:b9:ef:de:a8:7a:2f:35:ca:3a:5e:dc:6e:00:
92:a3:98:0f:d9:6f:97:0d:52:72:23:7d:e8:f5:01:71:c5:8d:
92:5e:ab:de:33:3b:b4:71:b1:bc:ee:6a:dd:e3:24:e1:d9:2a:
df:cf:10:18:b4:8a:c6:6a:62:b0:71:e3:53:b7:58:98:98:d2:
48:fa:71:da:e4:1e:47:a1:04:12:ea:0e:67:95:91:f8:aa:8c:
8f:98:e2:6f:46:64:33:7e:27:52:b5:36:a9:72:e9:06:2a:88:
b3:e3:4c:8f:35:cc:4e:bb:a5:71:5f:f4:21:1f:60:06:07:ff:
d5:87:73:47:c8:26:19:0f:7f:92:5c:7b:29:85:3e:fb:eb:ce:
45:af:df:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:31:37 2025 by rpki-client