Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
File: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft (raw, json)
Hash identifier: apD0OW9u0aVuYX1dN4kEVEaoXE2Wz9KNZaP4hD2St4w=
Subject key identifier: 48:10:3C:2E:C9:01:EA:73:F2:B7:62:66:45:88:9E:89:4B:8D:0A:C4
Authority key identifier: B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
Certificate issuer: /CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Certificate serial: 0198838CA24204F62BEF3616AA14A394DD7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
Manifest number: 084E
Signing time: Thu 07 Aug 2025 08:01:28 +0000
Manifest this update: Thu 07 Aug 2025 08:01:28 +0000
Manifest next update: Fri 08 Aug 2025 08:01:28 +0000
Files and hashes: 1: XkoFzkhGOVU5LUerqTHh__leFZg.roa (hash: z0PB3OIVOF5qm40evjJvgBDDcdbv5T70mZxHdxYv7d4=)
2: lE8Zy8N-xpY9U-oK5WN375n1Ofw.roa (hash: eG5bABtFszI7d/P1aStzKC6pmrIphfH8b15K2w83lWk=)
3: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl (hash: MU4hIGUsHOQcfxRO3gfJVDClAEtQvzRFCwitFWE22jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:8c:a2:42:04:f6:2b:ef:36:16:aa:14:a3:94:dd:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Validity
Not Before: Aug 7 08:01:28 2025 GMT
Not After : Aug 8 08:01:28 2025 GMT
Subject: CN=48103c2ec901ea73f2b7626645889e894b8d0ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:81:a0:9f:a1:a9:f5:6a:6f:81:60:7d:60:7a:
00:44:41:17:aa:a2:a0:d0:9d:c3:d2:a0:ab:03:c3:
e6:ad:fa:97:fd:70:81:70:95:63:e8:6e:5a:0d:d3:
86:56:83:69:9f:c8:46:c2:6c:a5:61:46:14:31:e6:
7f:ea:d4:68:6a:b3:54:92:c0:3e:42:c2:1d:4e:2d:
33:81:54:4d:32:5e:bf:3d:b5:25:ba:83:81:a9:e9:
55:be:22:3d:10:39:5d:34:98:57:d7:c7:c8:9b:7e:
95:8b:bf:9d:cf:4f:35:66:97:ea:2f:21:e6:51:46:
f2:62:60:2a:9f:44:c3:8c:88:90:a8:8a:eb:9c:4c:
75:6a:9c:f2:57:9b:2e:75:1d:6f:0a:81:6a:12:22:
62:9b:22:27:f0:b2:82:f2:27:d7:7b:21:af:06:42:
bf:ea:b9:4c:97:9e:27:b6:7e:ae:f6:b5:4d:a5:fb:
b2:2a:2c:ac:90:31:13:d9:b2:2b:8c:3c:d9:33:55:
a5:4f:2a:09:ab:e2:c4:8a:cc:1b:25:0b:38:ac:ca:
23:4b:e2:e9:5e:45:89:4f:2f:ff:a2:fb:b1:ff:39:
a7:a5:52:a6:f1:ec:05:33:0a:ca:05:2d:52:38:e8:
da:40:a8:f8:fc:ea:be:0c:cf:38:1f:98:5c:53:39:
f0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:10:3C:2E:C9:01:EA:73:F2:B7:62:66:45:88:9E:89:4B:8D:0A:C4
X509v3 Authority Key Identifier:
keyid:B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:06:c3:b3:f3:f2:03:9d:6a:c3:42:b9:ad:8c:e0:4d:2e:6e:
f0:ad:ad:07:33:ed:1f:af:78:87:55:7b:2e:83:48:18:bc:aa:
6b:6a:42:a4:e8:7c:ff:dc:ba:13:a5:58:69:d4:55:4f:9f:da:
ab:f9:5a:c3:58:18:2d:17:ce:27:c7:7b:cc:08:f9:aa:7f:f5:
bf:98:6c:07:13:47:43:f3:c4:e9:7d:2e:b2:16:ec:b4:8b:94:
07:73:ce:40:b5:e6:4b:99:77:74:29:16:46:cb:ce:36:ad:9e:
9d:1f:9f:d4:96:69:1f:ae:d2:a9:bb:b8:7b:c3:20:f9:2d:86:
90:85:2b:f2:b8:14:af:b5:1a:9e:82:b1:e8:c8:32:e8:93:a4:
ae:b4:eb:37:0a:de:6b:fd:7c:08:58:2c:98:06:84:44:68:a8:
de:59:f5:54:b6:d8:4a:e2:cf:b5:fc:e3:a4:aa:95:52:e2:d0:
d0:dd:c2:b1:d0:a5:cd:7a:ea:53:08:0b:e6:ab:8a:4e:6c:38:
47:f5:7b:36:65:ef:5c:39:04:e3:dd:a1:14:b1:78:fe:56:c9:
2c:14:5d:66:06:68:79:07:6d:51:d6:93:57:b7:11:95:d3:73:
1c:b0:76:be:29:95:73:e0:99:20:47:65:d2:b9:8f:c8:df:e8:
19:54:33:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:50:31 2025 by rpki-client