Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
File: tl47dPyTSwkhk63tfsoB2h7xhq0.mft (raw, json)
Hash identifier: gNgOJWYTzHB7JS21xxCyggVLsUD9++/X9sGnhIUl+g4=
Subject key identifier: 7D:21:7A:26:01:04:D7:15:EE:62:C9:8F:2F:BA:B4:82:70:B7:B1:74
Authority key identifier: B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD
Certificate issuer: /CN=b65e3b74fc934b092193aded7eca01da1ef186ad
Certificate serial: 01987306F1A2AA05BE4B2CF90639C02FA25C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 03:01:31 +0000
Manifest this update: Mon 04 Aug 2025 03:01:31 +0000
Manifest next update: Tue 05 Aug 2025 03:01:31 +0000
Files and hashes: 1: e_jdHZ9UPX8fMzUgAyqh1YUrr0g.roa (hash: z1xUWbdUskV5wcwENPFUis/izRGF4jR036hFKOsflNU=)
2: tl47dPyTSwkhk63tfsoB2h7xhq0.crl (hash: 2mdbnRiT2YvNEuHyTWlkZV2hZ27WoY6D73JS1MDNEco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:f1:a2:aa:05:be:4b:2c:f9:06:39:c0:2f:a2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65e3b74fc934b092193aded7eca01da1ef186ad
Validity
Not Before: Aug 4 03:01:31 2025 GMT
Not After : Aug 5 03:01:31 2025 GMT
Subject: CN=7d217a260104d715ee62c98f2fbab48270b7b174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:b2:2e:09:58:e3:39:a4:23:d2:ba:2f:eb:
1c:d4:0a:0d:98:7a:ba:f8:0f:87:44:1e:34:1a:c0:
95:69:6b:44:b4:cd:d3:bb:e7:73:b5:51:d1:a3:3a:
14:cd:a8:be:fe:03:93:ef:0e:63:14:9e:fc:a2:38:
08:2a:d0:7a:3a:36:5b:b9:b3:9b:c5:14:d4:20:fc:
af:2d:b2:ed:c2:d6:ba:51:3a:a1:39:4b:87:50:50:
7e:fc:7a:b0:bb:b8:86:6d:6b:d9:c1:16:b5:55:78:
11:44:4d:99:f8:91:a2:f0:15:c6:20:b2:22:3a:8b:
a7:56:14:c4:38:4b:3b:55:a8:d5:0c:87:3c:e0:8c:
a4:cc:6a:ab:6a:63:36:09:1b:c3:9a:69:f6:f8:71:
de:47:1a:fb:51:61:89:50:e5:da:1d:70:e6:1e:0f:
50:f4:a1:a5:9b:46:78:c0:62:bf:af:37:17:16:95:
a0:b9:7b:d0:4c:a8:da:c9:28:9d:60:ba:4c:03:67:
94:a6:db:eb:e4:80:76:b1:10:7d:17:fb:89:00:5f:
33:43:4d:6e:76:ed:5f:58:84:9c:90:0b:7f:67:1d:
a9:df:cc:0a:d3:b8:4b:86:1a:66:b4:58:6a:08:e9:
38:a6:02:17:1d:db:13:e4:e2:df:0f:dc:9b:05:cc:
3e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:21:7A:26:01:04:D7:15:EE:62:C9:8F:2F:BA:B4:82:70:B7:B1:74
X509v3 Authority Key Identifier:
keyid:B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0a:0e:6a:55:cc:65:5a:16:d4:a6:af:38:67:84:e4:46:8f:
68:ff:c0:d6:72:db:fe:5f:ef:c8:93:1b:00:71:9e:40:a5:aa:
c7:f1:c4:13:03:52:e2:51:08:04:ff:f1:98:c3:b6:28:ca:45:
84:78:1b:a5:96:7f:4e:ed:ae:e0:56:ec:20:f5:5f:87:12:93:
87:5d:45:f8:af:51:31:d1:c7:8c:cb:1c:6b:f1:11:5a:06:e1:
76:a6:e7:f6:2f:60:97:48:45:e0:a9:32:e0:f7:fb:d2:1d:5c:
18:a0:e0:74:df:50:98:25:28:16:83:9f:b1:d8:ed:aa:32:bf:
68:7b:60:05:19:10:9b:b9:58:1e:34:f4:d0:35:cd:30:d8:44:
45:90:1c:2f:d6:1f:6f:85:80:76:a3:f5:43:d6:09:26:b9:f5:
35:c4:28:4c:e1:6d:ae:c6:08:b8:76:0e:59:14:1d:2d:14:59:
bf:21:66:dd:1f:85:b7:84:46:96:4c:89:6b:86:32:9c:a6:dd:
3f:2c:26:67:bc:e5:c4:0e:bb:45:d6:2d:00:e0:da:55:c9:77:
47:04:a0:41:e9:e4:19:0a:6d:02:44:9e:c1:3d:f9:03:fd:39:
8c:23:c2:49:9e:dd:45:46:d1:92:cb:8e:00:95:96:38:84:12:
aa:12:10:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:53 2025 by rpki-client