Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
File: tqiXx5jwGbJHexqc47I7tddhZsM.mft (raw, json)
Hash identifier: 8LB0NtVVrZcTtIREePtCCXNWgdx4VY2I+d5+cT9FLTI=
Subject key identifier: 04:5D:D1:E8:90:F2:E9:89:A9:83:89:F1:E1:96:15:E9:3A:3F:27:02
Authority key identifier: B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
Certificate issuer: /CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Certificate serial: 01989592B0D9D5572FCCC546FF9E26545E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
Manifest number: 13C9
Signing time: Sun 10 Aug 2025 20:01:15 +0000
Manifest this update: Sun 10 Aug 2025 20:01:15 +0000
Manifest next update: Mon 11 Aug 2025 20:01:15 +0000
Files and hashes: 1: f9JCdqsJLWfadd987fFlDNk7mdM.roa (hash: 5CurkeU+eAkjrTT560cBjUlbg7hvGNi0G0d/Uo5/6r0=)
2: tqiXx5jwGbJHexqc47I7tddhZsM.crl (hash: VaKAY3msSITff/JkUCuhdaaEkHlM9qtV+n/cVUlIVfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 20:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:b0:d9:d5:57:2f:cc:c5:46:ff:9e:26:54:5e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Validity
Not Before: Aug 10 20:01:15 2025 GMT
Not After : Aug 11 20:01:15 2025 GMT
Subject: CN=045dd1e890f2e989a98389f1e19615e93a3f2702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:e1:14:20:93:8e:d4:fe:6d:67:07:5d:70:
42:76:9d:91:bb:76:95:26:65:9e:28:44:6c:d1:00:
f9:8d:95:78:d0:fe:79:0b:3a:cb:b4:3a:fe:86:b1:
23:fc:2b:12:07:a0:b2:96:7c:00:f2:5a:fb:ee:a0:
0b:2b:a6:d2:27:50:f0:f9:fd:f7:2a:44:6f:7a:99:
e8:30:38:2b:09:81:53:c9:e4:2e:e3:10:d1:f3:1d:
6e:4c:04:41:47:81:d3:79:a1:55:62:73:df:bf:7c:
73:02:cb:ad:97:d0:09:cf:08:0b:0a:c0:4a:b7:1b:
a2:71:03:de:04:72:98:65:63:44:2a:12:c1:25:f4:
ec:8f:bd:c1:73:28:dc:b1:d7:38:5a:1c:60:13:17:
5b:56:0c:e5:6d:3a:38:08:9b:5b:59:76:aa:36:a2:
31:6c:98:3e:57:14:6a:a4:cb:f5:b7:36:d3:74:12:
47:4d:97:a6:45:bb:86:d5:ed:7e:94:8d:e2:cc:a2:
68:86:e0:57:d4:2e:f3:24:bb:b2:96:12:a9:b4:30:
3f:c5:48:15:88:83:1c:d4:c6:cf:84:fe:8d:01:eb:
28:57:2a:b2:17:3f:85:3c:fe:ef:8e:5b:ec:72:20:
c6:17:d8:b9:8f:e1:85:c0:d0:e8:79:77:89:b9:2b:
46:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5D:D1:E8:90:F2:E9:89:A9:83:89:F1:E1:96:15:E9:3A:3F:27:02
X509v3 Authority Key Identifier:
keyid:B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:28:f2:1e:28:9b:f6:62:8b:5c:6e:3e:3f:69:a4:cd:cc:db:
18:16:cc:cd:84:24:a0:9c:38:44:6d:41:d1:ee:4f:fd:ed:3b:
64:d5:0f:e9:95:95:78:25:af:f0:97:6d:22:8e:cc:6f:39:b0:
c7:5f:b6:06:3e:da:56:be:2d:26:ca:58:20:c9:98:c9:29:83:
00:84:c8:84:11:c8:30:31:28:e9:8c:de:0b:ae:bb:39:36:ef:
9d:bd:3d:2d:3f:79:4d:5d:dd:1a:52:e6:78:ca:3b:7e:50:5c:
71:60:b1:d7:f1:51:55:46:75:47:f9:eb:44:ee:70:00:17:d2:
74:60:ae:63:a4:20:51:09:8f:5f:db:bf:01:3c:46:64:f0:85:
1e:5c:a6:94:59:67:59:4f:b5:60:ed:6e:81:cc:0a:29:3a:7a:
26:10:10:ad:83:3c:a9:8c:fd:53:2d:33:70:ba:5b:20:02:73:
0d:7a:24:b7:9a:86:7b:74:b3:69:b8:56:48:83:30:4c:91:b4:
9e:19:52:b7:32:de:36:82:0c:b8:28:f0:80:74:ab:ce:9b:3d:
d2:55:b2:80:65:34:5f:cf:fb:38:7d:01:89:80:b9:5a:ea:47:
d2:43:92:da:02:56:bc:fe:17:3a:39:94:60:d8:ed:22:57:c0:
b1:cb:61:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:54:24 2025 by rpki-client