Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
File: Tk9mXUbWoqvwUh5csffEUcozeoc.mft (raw, json)
Hash identifier: awerNZXMwK9PM0TAVsd9xaAacyEdSuTl7IAxYCin2iA=
Subject key identifier: 20:10:16:6E:E1:AE:22:94:FD:01:90:99:B9:6F:1A:FD:AC:64:45:12
Authority key identifier: 4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
Certificate issuer: /CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Certificate serial: 01987CAE4F915605C704DA1481E51D446165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
Manifest number: 01FD
Signing time: Wed 06 Aug 2025 00:00:55 +0000
Manifest this update: Wed 06 Aug 2025 00:00:55 +0000
Manifest next update: Thu 07 Aug 2025 00:00:55 +0000
Files and hashes: 1: 1KxZYvxri1sxva3r2G7KLnG5z_Y.roa (hash: 9JXmyyV6BbeWSwFTBJAUkp5UHelZgOhj8wsWM2RqVyk=)
2: HrSejbS-39NivWEqBB6_ezmUBgQ.roa (hash: 8T3MTXu6asTJ46RNeuQMt6iMOXHZ2zW1uZEJeSesDDw=)
3: Tk9mXUbWoqvwUh5csffEUcozeoc.crl (hash: 6KbUmHdfo/c24rrHV2aVyoTNVunpc/Ib/qbbP/UaNp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:4f:91:56:05:c7:04:da:14:81:e5:1d:44:61:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Validity
Not Before: Aug 6 00:00:55 2025 GMT
Not After : Aug 7 00:00:55 2025 GMT
Subject: CN=2010166ee1ae2294fd019099b96f1afdac644512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:99:eb:cc:a2:f9:2f:06:82:80:09:42:2c:c2:
37:db:b8:bb:24:11:23:f8:90:0f:50:86:58:be:d6:
e5:22:c6:46:0f:b2:52:cb:0f:d2:dc:b5:13:8c:83:
19:9f:b8:0c:67:69:00:f6:62:a7:13:eb:b7:d1:e9:
35:2f:7e:45:55:ee:09:f1:55:09:92:02:64:69:cc:
9c:18:50:2f:34:50:96:fa:d2:e0:73:bb:6d:03:2a:
ff:90:30:c4:97:ca:68:bb:a0:3b:a9:64:50:d9:22:
a7:22:4b:e2:f1:18:4b:ca:3f:cc:1e:a6:8c:c1:7f:
aa:75:d3:44:7b:77:fd:e5:8a:ff:8f:46:25:fa:da:
f2:fd:f0:76:43:82:fa:d3:b8:35:61:5c:7f:30:fc:
dd:74:f4:13:f6:91:75:d1:2c:77:15:4c:45:83:38:
af:f6:a0:d6:98:bd:c6:da:6c:36:d6:84:c3:ab:95:
ff:5e:18:4c:e2:a5:52:b5:b5:5f:45:8c:d8:cd:d4:
3d:5b:28:91:b7:8d:5a:c9:a8:56:25:73:6a:5f:8f:
a5:53:eb:54:9e:fb:1f:8a:3c:68:73:46:28:37:f0:
53:66:28:81:54:f9:7c:44:b5:09:f6:24:55:77:e9:
f0:1f:18:ff:63:8c:e6:e4:62:74:03:37:07:71:ee:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:10:16:6E:E1:AE:22:94:FD:01:90:99:B9:6F:1A:FD:AC:64:45:12
X509v3 Authority Key Identifier:
keyid:4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4c:cb:c9:cb:72:d7:c4:e0:70:c2:14:bd:c1:48:f4:48:77:
cd:89:26:57:f7:6e:67:6a:27:b1:67:72:a3:69:b1:61:40:fd:
74:86:cc:55:20:9d:5f:35:fe:54:b5:00:2e:28:45:aa:2f:d6:
bb:86:cb:e4:7b:6c:0e:31:bf:32:90:68:dc:a4:bd:c7:19:23:
ed:1e:b4:a8:07:d8:e7:26:b0:ac:18:74:15:23:e3:a0:8e:b6:
e3:3f:f4:08:4f:e6:5e:c5:5c:23:cf:e2:d8:e7:1a:0b:d4:7a:
a2:8b:34:92:79:be:96:1f:bb:be:88:d0:13:d1:b8:7d:2b:99:
64:e1:d9:ac:3d:0d:3a:34:47:4c:2a:88:ea:ea:0f:9a:af:83:
94:d0:b0:5d:1d:54:4f:e2:7c:10:ad:1d:f9:b2:f1:71:86:30:
4c:89:8d:20:39:27:0c:2f:d0:5b:cc:8b:7d:32:46:86:24:83:
39:7a:3d:0e:10:5e:9b:e1:66:97:27:4f:19:77:31:6a:32:5b:
38:30:f0:ff:76:4b:53:ed:87:af:73:6e:e6:63:b2:1e:88:6c:
e2:a8:0d:c5:56:9c:69:59:f2:d3:62:b3:57:55:6b:b1:3e:06:
dd:51:15:9c:a0:de:4b:dd:65:06:07:01:96:21:ed:55:22:fb:
c2:04:81:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:10:22 2025 by rpki-client