Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
File: tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft (raw, json)
Hash identifier: 5yYK7HKqAm4eU/DxC2tV3QveejQiGnlQHGzxeTOIt8I=
Subject key identifier: F9:55:ED:2E:C8:28:EB:EA:7A:60:21:76:3A:AB:5E:95:5E:6B:5F:97
Authority key identifier: B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
Certificate issuer: /CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Certificate serial: 0199239F086BAB0D4B7254F985ECE9AA7920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
Manifest number: 0C37
Signing time: Sun 07 Sep 2025 10:00:48 +0000
Manifest this update: Sun 07 Sep 2025 10:00:48 +0000
Manifest next update: Mon 08 Sep 2025 10:00:48 +0000
Files and hashes: 1: sEcAqep2NyLTkuYW41YUgHA9f4w.roa (hash: 3/7vZf5AuYQ6PDHss1zXReAWYubN+OUgtUWtMk8fZcY=)
2: tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl (hash: 719bn627UQG6dG2y+pO1E+X2s000NPvNfL3VR9EmNWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:08:6b:ab:0d:4b:72:54:f9:85:ec:e9:aa:79:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Validity
Not Before: Sep 7 10:00:48 2025 GMT
Not After : Sep 8 10:00:48 2025 GMT
Subject: CN=f955ed2ec828ebea7a6021763aab5e955e6b5f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:17:2a:05:a7:35:9b:35:b9:bf:67:d0:95:81:
8d:54:fb:68:b9:cf:84:47:04:61:4c:b3:44:1d:62:
8e:aa:b4:cf:70:9e:97:22:af:7d:24:e6:1b:fc:93:
c7:fc:3c:3b:05:6e:62:18:28:2e:2a:7e:2e:70:cd:
ff:cf:b2:7c:78:c9:94:06:ad:ab:89:46:c9:e6:52:
39:9f:56:5a:93:08:f9:fc:61:b4:be:f4:01:8f:b3:
32:87:ca:81:ac:7b:15:f4:4c:7d:8f:98:28:db:5c:
63:ea:dc:e0:e8:67:6b:83:34:48:ab:e3:44:dd:01:
5f:a9:93:29:3e:43:90:af:96:32:d2:11:36:df:13:
f8:1f:96:7c:95:22:93:6d:35:1f:9a:5b:99:fe:54:
ad:b3:78:88:11:b0:fa:1e:bf:ee:91:79:c0:94:bc:
97:06:bf:3f:0d:42:b4:d2:11:e2:c2:74:5c:94:f7:
0e:20:e7:0f:8f:1e:a7:31:27:74:34:d9:ca:6a:46:
33:c4:6c:6b:8b:4d:ae:07:43:5a:f5:47:dd:3e:36:
82:7e:13:af:ae:b2:c4:a3:d0:97:ca:e8:bb:2f:63:
ca:62:1b:fd:b1:72:66:9f:88:b6:50:05:fc:34:2c:
4a:6e:81:5a:c9:96:27:4d:0a:3c:81:cc:85:36:40:
ee:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:55:ED:2E:C8:28:EB:EA:7A:60:21:76:3A:AB:5E:95:5E:6B:5F:97
X509v3 Authority Key Identifier:
keyid:B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:eb:dc:cb:ec:a9:3b:42:22:6d:f7:1b:4a:01:da:90:aa:23:
49:c3:58:45:a2:49:05:8c:49:02:75:57:74:2c:c0:82:84:6a:
18:15:17:79:73:b6:dc:76:77:61:57:ca:63:d5:2e:59:c8:37:
11:f4:2b:09:e6:31:1e:2b:d1:7b:e3:55:c8:22:f7:a9:eb:c9:
86:33:e8:36:e1:a4:af:56:90:d0:0b:27:05:c2:3b:2d:e9:fc:
c9:44:f0:71:30:c5:d9:6e:a3:4e:47:6c:f1:30:51:af:99:52:
40:3d:aa:9b:36:c9:a9:3d:5a:8b:e4:2c:a9:03:a7:a5:f1:6d:
14:d8:60:8d:87:05:c2:2a:63:2a:47:64:f4:4b:dd:cd:08:9d:
24:32:dc:da:36:54:b0:43:96:e6:3f:a5:cb:ea:a2:ad:cd:0b:
a1:fa:0b:e5:fc:06:40:98:92:13:5a:11:50:78:49:94:a4:bd:
d9:d8:63:4f:5d:45:39:b5:ae:1f:1a:87:cd:bd:a8:5d:d2:7f:
a2:7b:a6:20:2f:98:59:ed:d6:b1:19:b5:e2:ca:46:f4:e5:73:
7b:cb:c6:4e:c5:66:ac:4c:c5:c5:89:31:99:f7:98:72:5a:ed:
66:ef:10:ff:02:17:45:0c:88:d7:66:8c:1c:f8:04:97:44:2f:
f6:26:2a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:53 2025 by rpki-client