Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
File: TiopnxgqH9UdSwNimXr3qq4Na-k.mft (raw, json)
Hash identifier: U86hjMCB3C71B1qU7d8Lawtb7/u32iGjQZBwSyIQMnQ=
Subject key identifier: D2:F8:52:1E:67:DC:76:47:0F:47:9B:C6:72:3E:AB:10:9B:63:46:9E
Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
Certificate issuer: /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Certificate serial: 01988054A7FE07A5AED61650D09BCBCC45C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 17:01:28 +0000
Manifest this update: Wed 06 Aug 2025 17:01:28 +0000
Manifest next update: Thu 07 Aug 2025 17:01:28 +0000
Files and hashes: 1: 6L1wb6rk6JRmH0kdueo5VHSR6sA.roa (hash: v/vwNDFKpqZbOrt+k+dslXb31bPIeE6v/BAFBhGcR04=)
2: Q1ID3jqh-PT7k00It8t9krcFrp0.roa (hash: 53/LWfxj68LBwdUpxNq1PQF6QDcY5qwZBSFj5Skh+H4=)
3: TiopnxgqH9UdSwNimXr3qq4Na-k.crl (hash: /8PPMeSHcdQ261wi8ggvyb3ovo9hyOpXG9MEivGdgl4=)
4: uAwoVI3dpDeVF6OQWKoCJ5jN8xY.roa (hash: tIErXtWim6v8+5J+f3v+yr7n8hWCWnrcd2Ahi85yzJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:a7:fe:07:a5:ae:d6:16:50:d0:9b:cb:cc:45:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Validity
Not Before: Aug 6 17:01:28 2025 GMT
Not After : Aug 7 17:01:28 2025 GMT
Subject: CN=d2f8521e67dc76470f479bc6723eab109b63469e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:48:7d:e4:e6:52:1e:c4:66:09:bf:23:c9:5a:
2a:c5:f3:58:70:2a:80:40:07:1f:ce:ae:d9:1e:f1:
df:b8:4f:e1:11:44:fa:2f:9f:f9:0b:cd:0b:e9:31:
8a:bc:85:90:c6:76:41:12:7f:d7:e7:14:6d:48:3d:
19:59:fa:a3:77:34:73:09:c7:d5:0d:27:d0:52:dc:
19:6e:f9:73:3b:35:06:86:52:f8:26:14:1c:da:e3:
41:de:39:5e:76:8c:b1:95:e9:4c:c8:27:ee:4c:3a:
be:68:db:99:9d:1b:56:eb:7d:80:59:73:35:a2:d6:
2d:c1:ce:ce:8a:90:d5:28:74:8c:d0:04:74:e7:3d:
86:04:27:37:bb:3a:98:ee:ac:67:8d:8a:9a:35:74:
b4:59:92:44:33:c1:54:cc:85:6e:6d:54:6c:7d:9c:
fd:74:5f:b6:b5:f5:b3:54:4b:a0:27:9b:4c:1e:3e:
68:d5:41:22:83:97:09:0e:3f:54:1b:d8:ae:f8:d9:
d0:09:07:9d:ac:0a:35:2c:be:85:6b:e8:64:e0:e9:
1c:3e:c1:47:5a:ea:82:1c:a5:18:08:10:d8:50:47:
d8:ed:da:13:44:15:d9:b2:0d:76:90:8f:79:2c:f1:
f4:0b:30:bb:91:e9:fc:71:1d:ee:86:45:36:8e:6e:
92:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F8:52:1E:67:DC:76:47:0F:47:9B:C6:72:3E:AB:10:9B:63:46:9E
X509v3 Authority Key Identifier:
keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ec:2a:20:3f:dd:46:15:c1:df:b3:95:68:5b:b3:77:83:09:
76:10:f1:ef:a2:24:a4:a0:b6:fa:06:d2:f1:32:96:c1:d9:53:
32:10:31:30:21:5e:7e:97:d8:e8:8a:3c:43:5a:83:4a:c6:21:
f4:47:91:2e:13:3c:8e:92:26:6b:9c:ce:e5:99:f9:2e:6f:f1:
07:eb:48:b8:a9:96:47:d5:62:c1:e2:25:49:e0:99:de:1a:19:
07:01:1c:cc:d6:7b:ea:50:ee:c5:de:83:fc:02:9b:48:99:a8:
5c:bd:d2:c9:f1:97:38:be:0d:10:3c:38:51:7a:84:5e:cb:dd:
46:80:2b:2c:60:69:18:46:2a:d7:a3:ab:8d:11:c1:48:6a:af:
e9:9a:69:ac:b4:5a:23:ea:4b:92:8e:d0:a1:36:d7:80:27:2b:
b8:43:fd:cb:79:b8:32:89:aa:05:03:0c:d8:a6:3b:d8:57:35:
98:00:6a:e1:78:d5:fb:ed:58:9d:43:9c:7a:a4:27:f1:3d:c6:
3a:80:4b:73:16:4b:4d:56:68:18:d2:71:f0:fa:92:9a:e1:2b:
db:c1:45:a1:f9:56:1a:78:ff:28:2f:97:d0:46:66:18:8d:96:
89:90:4f:cb:7d:57:af:79:ff:44:a7:79:dd:c8:73:4d:d5:af:
ee:e3:da:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:43:11 2025 by rpki-client