Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
File: tMBDnHlVURAtbx5M620cUvvF6j8.mft (raw, json)
Hash identifier: CI4Vnd2FlxBCljKsnX3Gb4mLrPknqpwnB7DR3uBk5eU=
Subject key identifier: CC:1B:33:EA:E7:32:98:8B:50:9B:86:D2:17:E0:EA:20:A4:33:43:17
Authority key identifier: B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F
Certificate issuer: /CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f
Certificate serial: 0198A0BB5114488AE474CA0120538F19545A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
Manifest number: 1630
Signing time: Wed 13 Aug 2025 00:01:27 +0000
Manifest this update: Wed 13 Aug 2025 00:01:27 +0000
Manifest next update: Thu 14 Aug 2025 00:01:27 +0000
Files and hashes: 1: n5jiYoIoGZQqwQOVrCfprt-PApk.roa (hash: MrCF/3iJ71+/LWf1gBDblDTWmF567DIjZvwBvhh1aT0=)
2: tMBDnHlVURAtbx5M620cUvvF6j8.crl (hash: 3gQNHQyB4GBjEhFt6lDlkoo4wNmcWtoD7mkYD1Bc9x0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:bb:51:14:48:8a:e4:74:ca:01:20:53:8f:19:54:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f
Validity
Not Before: Aug 13 00:01:27 2025 GMT
Not After : Aug 14 00:01:27 2025 GMT
Subject: CN=cc1b33eae732988b509b86d217e0ea20a4334317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4e:b8:66:41:d5:e8:95:82:d6:44:2b:15:ba:
3c:af:af:39:d9:90:76:33:e7:4d:08:fb:56:54:f9:
53:24:91:c3:bc:0a:8c:53:d6:a2:66:1f:81:e8:54:
c9:85:01:b3:79:7c:b7:4f:b0:c0:91:00:5c:23:7c:
41:01:7c:69:fe:27:1d:e8:91:de:51:a7:3e:91:9e:
f6:18:64:4d:71:f4:dd:65:7e:e3:d6:8c:7a:8a:ab:
ad:e0:ff:d9:06:af:0c:24:b6:e0:10:72:6c:6b:76:
f3:a5:4c:46:68:cb:04:db:0d:5d:3f:9b:3e:24:48:
2e:44:9d:b6:fe:fc:56:2b:b5:dd:14:04:78:50:3d:
fe:35:ea:9f:ec:00:fd:ec:60:04:d0:ee:8a:7a:e8:
8c:26:69:64:94:5b:89:98:16:32:8c:9a:5e:73:95:
8d:22:ce:3f:04:53:39:51:89:fa:b0:da:b8:93:1a:
da:2e:b2:48:e1:76:4c:7f:54:2e:5a:ca:dd:56:48:
d9:43:90:1b:a3:53:f5:de:7e:e2:28:7b:1f:29:08:
0f:31:68:a6:8b:92:f9:19:2c:85:35:72:15:cd:b8:
91:63:2e:2a:3d:7a:99:d2:f3:67:09:08:9b:a3:c9:
13:e0:c0:d0:a6:dc:3e:f7:dd:e4:86:42:36:a9:c8:
f0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1B:33:EA:E7:32:98:8B:50:9B:86:D2:17:E0:EA:20:A4:33:43:17
X509v3 Authority Key Identifier:
keyid:B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c5:3a:41:d7:63:e3:5b:23:dd:e8:ea:fc:91:9e:1e:55:8e:
7c:c1:ff:91:16:c7:a9:61:d5:96:5d:6e:84:5d:5e:ea:9e:74:
16:4c:a1:75:e6:e1:8e:ce:bb:e8:31:1f:8b:9e:1b:9d:36:0f:
28:9c:9c:3c:99:11:21:a4:ce:48:97:1d:d1:96:10:5d:3e:44:
fd:55:83:c0:75:d2:fd:83:ae:66:8a:1e:52:ad:42:6f:e7:d4:
7b:05:e6:f0:99:39:b2:f6:c3:4a:4a:63:0c:de:84:6c:6c:9a:
97:a0:ac:06:cb:1f:24:21:1c:6d:eb:1e:c8:ae:64:e4:53:7c:
31:8b:6d:1c:7b:7d:6b:c0:21:7b:55:8c:0d:24:04:a6:b0:e0:
7f:13:13:f2:42:ed:97:32:14:56:62:3e:5b:77:45:6d:43:5e:
8e:b1:4f:16:f2:3b:c9:6d:75:44:1a:50:f4:70:ba:af:fe:f1:
47:27:82:a0:48:6b:07:a4:1b:ea:d6:23:9c:50:23:db:56:52:
ff:0b:6e:53:2d:d8:60:0e:53:cc:45:ad:97:ea:f2:5f:32:fc:
be:63:59:6c:9c:50:dc:1b:0d:d1:10:42:e1:b1:5f:11:07:36:
5d:97:50:36:9b:40:99:78:c7:13:cd:b2:dc:dd:ff:9d:7c:c9:
4c:c1:69:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:15 2025 by rpki-client