Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
File: tNc6atd6j4WbQD2yznFegtHPMv4.mft (raw, json)
Hash identifier: 5YmiYwDuU0q1ZgD400CB9bG6iYAe49r6f+P0Q/Zm++Q=
Subject key identifier: 8A:D3:A3:BF:CE:1F:F4:C1:6E:27:CE:75:38:38:B9:DB:7D:95:CE:CC
Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
Certificate issuer: /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Certificate serial: 01987DC135DF921E6BACE0D3550F2FFFD2D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 05:01:10 +0000
Manifest this update: Wed 06 Aug 2025 05:01:10 +0000
Manifest next update: Thu 07 Aug 2025 05:01:10 +0000
Files and hashes: 1: YO-tGwbdqI4YYY7I1KqnEaElBoQ.roa (hash: XZFdc4B2lVuIwGuWp8Gzl21H5s/bjgOkXy1zS/FUzmY=)
2: r8uOOwHL3Wt4pGrUJebg8yZ8WaY.roa (hash: Eioa5I9ONK/XZQXZG+CzeC8xkMTpLpCoDVH43Ycxzzc=)
3: tNc6atd6j4WbQD2yznFegtHPMv4.crl (hash: E+tDliuxrfP0/rrUNF5t5hke5NAlV9MJ83B0sHbIoJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c1:35:df:92:1e:6b:ac:e0:d3:55:0f:2f:ff:d2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Validity
Not Before: Aug 6 05:01:10 2025 GMT
Not After : Aug 7 05:01:10 2025 GMT
Subject: CN=8ad3a3bfce1ff4c16e27ce753838b9db7d95cecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dd:1d:04:4f:dd:b8:32:d2:27:62:44:64:3c:
bf:ec:d8:2a:e8:f9:d6:3b:12:c9:72:c8:cf:1e:82:
e8:23:37:1d:b0:c2:9b:cb:57:15:0e:d3:71:4f:5a:
8a:fc:74:2f:65:0c:e5:68:42:a0:fe:67:c6:4d:05:
c8:6b:33:3d:66:d9:ac:93:dc:e3:68:c4:42:c0:3f:
cc:14:50:39:e5:1d:57:5c:7a:5a:55:12:b3:eb:97:
04:b3:3e:25:65:69:dd:68:c6:97:7f:28:d1:6e:b3:
6c:2b:94:e9:04:8d:15:f3:18:24:99:eb:64:37:51:
0c:57:92:a3:80:be:55:73:87:b4:ed:5c:e7:c9:32:
9d:34:7b:cc:88:d6:62:c6:11:22:59:2f:3c:ef:fc:
f5:25:21:b1:fe:d5:bc:32:d3:51:3d:fe:48:f6:a5:
52:c2:97:67:56:ac:d1:28:e9:88:08:76:f0:58:98:
94:b7:e6:aa:a0:89:68:5c:5b:7f:8f:d8:06:79:b0:
f4:21:2a:95:2d:e1:26:88:5b:f9:57:3f:e7:f7:88:
78:d4:31:c0:7c:37:99:bd:36:0f:30:8c:44:b0:af:
98:f5:11:6a:10:0f:9f:3f:65:40:f6:d7:55:40:34:
cf:79:8e:18:0b:b4:4b:18:29:4c:5e:9d:00:29:60:
34:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D3:A3:BF:CE:1F:F4:C1:6E:27:CE:75:38:38:B9:DB:7D:95:CE:CC
X509v3 Authority Key Identifier:
keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:07:e8:6f:9a:11:36:84:1d:34:48:ab:bd:53:1c:bb:bb:aa:
21:85:db:67:e3:79:b5:16:62:93:92:ad:74:03:98:c4:21:1b:
fb:d8:b1:4e:8c:bf:0a:29:fa:51:c5:25:6f:56:e1:38:52:e7:
da:bd:12:73:87:cf:b2:1a:e5:a8:8b:03:90:37:de:d1:fb:3f:
f8:a4:5c:43:35:be:4e:62:82:94:af:19:78:81:4d:bb:fc:32:
16:05:26:60:d0:40:6f:26:d0:ed:9d:02:14:4b:07:aa:37:e8:
e8:e4:f3:3e:98:e9:92:33:26:3f:21:66:85:14:0b:99:55:26:
e1:4b:df:f0:b2:d4:c7:ca:5b:99:73:00:88:a4:bf:ba:6f:ca:
a4:8c:52:da:5c:d4:8d:18:46:85:3e:7d:f5:b3:39:70:85:bb:
83:1e:1f:a4:af:31:bf:c3:78:78:71:76:c0:bb:20:e9:4b:80:
d9:cb:ec:d7:79:fb:c2:49:92:6c:5a:f0:e2:c3:80:dc:24:e8:
57:fb:95:ec:f8:95:ec:8b:ab:00:c5:d2:ef:ed:c2:38:54:00:
ee:8e:39:6e:19:e1:5c:10:80:c4:f6:2a:9d:6b:90:da:04:31:
f9:4a:67:6a:9d:21:05:1d:ba:67:c9:45:01:1e:cc:0e:6a:8f:
6e:c8:47:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:44 2025 by rpki-client