Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: ZvXWRiERvR4TvjR4Ar48g9UB4xoBInGFNghaY2MTd6M=
Subject key identifier: F8:A0:4A:4E:3F:66:A4:6F:2B:89:91:03:43:16:20:C2:99:C2:75:B8
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 019880C244DC5D4B9EB647EB4BE90AA79C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 080A
Signing time: Wed 06 Aug 2025 19:01:11 +0000
Manifest this update: Wed 06 Aug 2025 19:01:11 +0000
Manifest next update: Thu 07 Aug 2025 19:01:11 +0000
Files and hashes: 1: JyF5UhD9cVqjqquiR-hK995tZzw.roa (hash: 5AXS3YhQ0/Ke6SUL+/AhBjypj7cC6zgjHgX8v/ujINo=)
2: pTQKkEXtOvhz7EuIYUqt-o1qzFk.roa (hash: OW+foSbaeoc9zsDW/uMWemQINFvQAo39Gw9c3A0iOPI=)
3: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: KkyPX+A/KaH9hv11UMDHKEg3ReX/R/5sANhFhh7hgHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:44:dc:5d:4b:9e:b6:47:eb:4b:e9:0a:a7:9c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Aug 6 19:01:11 2025 GMT
Not After : Aug 7 19:01:11 2025 GMT
Subject: CN=f8a04a4e3f66a46f2b899103431620c299c275b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c6:4e:7f:07:73:59:a0:a0:46:11:c7:b6:c7:
91:0e:e6:a1:57:22:16:d8:da:05:3e:2d:b4:2a:39:
3d:e6:e2:6a:30:64:1c:d6:af:1b:7c:b9:fd:ae:94:
52:df:2b:7d:63:24:20:4a:92:a8:6b:b6:f8:c6:6e:
91:c1:c0:5c:8f:9a:6b:9a:e9:63:77:00:b5:e9:01:
94:37:9e:34:b9:74:d2:96:4b:78:de:4b:c7:c5:48:
45:6e:f3:65:ee:50:ec:2b:71:cc:1a:73:e0:ad:06:
19:56:22:00:f9:69:fa:5e:72:a3:6d:ec:ef:9e:d7:
8e:02:47:57:28:a8:6d:21:ab:33:b1:a4:cc:ee:d7:
f4:8b:17:8a:6e:07:22:e1:ac:a8:c1:29:a8:3d:e1:
35:bd:d0:48:7d:ef:95:ef:1e:de:0a:97:f7:2e:4e:
3c:6d:2e:4a:09:c8:ba:75:fc:9e:4c:15:17:46:57:
fb:68:e4:b9:50:6e:fc:33:ba:6d:93:12:f3:72:f0:
68:7b:f3:ff:88:23:c7:6f:15:66:f3:d0:98:b4:8c:
88:bc:00:44:c1:d7:b4:df:1b:f3:3c:6f:43:9a:85:
a0:31:5e:c8:40:75:05:81:47:af:35:52:c3:54:dd:
00:c5:e9:0b:58:bd:4b:22:e7:08:da:cb:cd:65:20:
07:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A0:4A:4E:3F:66:A4:6F:2B:89:91:03:43:16:20:C2:99:C2:75:B8
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e2:3d:8b:c3:21:cf:7d:e6:be:ed:7b:86:38:29:87:b5:06:
4c:b5:d4:82:11:2b:4e:0a:9c:6e:2a:48:21:a3:dc:f5:83:27:
8e:1b:b3:b1:fa:30:c7:25:10:ce:0d:b8:cf:c6:cb:75:10:19:
49:10:2a:00:62:36:45:75:f9:bc:f2:8d:94:4d:1a:18:79:0b:
69:a1:68:d2:14:15:24:9d:ca:28:bb:92:32:6b:d3:75:3f:fa:
a2:7e:f7:b8:5c:35:bc:9a:61:e9:ba:2c:6a:bc:86:10:e4:da:
13:00:84:92:c9:e3:ae:bc:9e:f2:5c:86:8c:6d:42:7a:08:36:
7d:0b:5d:5f:4b:c7:08:a1:8f:7f:a8:bf:0f:e1:cf:3a:8e:8b:
4d:df:aa:77:93:6b:12:83:3d:f2:67:47:ff:e1:05:02:39:3c:
f7:2e:8b:39:4c:c6:4d:e0:4b:a8:21:c2:42:64:ff:cf:02:89:
1c:e8:ed:79:ab:ef:43:c2:db:c6:58:6e:42:e2:2e:77:86:bd:
15:ef:50:3a:6d:50:53:c0:36:c9:24:77:ac:a7:f9:6c:c3:7a:
8c:0d:2a:ea:cf:77:50:56:5c:d0:bd:02:42:c7:94:ef:23:b3:
23:ff:57:b5:be:69:70:2c:f2:e6:2c:4b:d2:b4:39:b1:90:e2:
c5:18:24:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:08:51 2025 by rpki-client