Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
File: tXikYahZ3cmGwIqI6VEtXD0iEOY.mft (raw, json)
Hash identifier: u5Df2Z2i/E8zghG5AKOC+uaW7W4ivNyp0QJ1S/uoVc0=
Subject key identifier: 95:DA:CF:93:92:73:F9:69:C1:F1:9B:79:DC:12:B5:07:F1:0E:BB:E9
Authority key identifier: B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
Certificate issuer: /CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Certificate serial: 01988AA0FB10EBC2D4E7F7576FE66D1403A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
Manifest number: 12FC
Signing time: Fri 08 Aug 2025 17:01:02 +0000
Manifest this update: Fri 08 Aug 2025 17:01:02 +0000
Manifest next update: Sat 09 Aug 2025 17:01:02 +0000
Files and hashes: 1: fOeHWLSvpiv5KgmUiK2xlWpmRm4.roa (hash: 70iF+LPpbMiVmu1EBYdz2CkmI0h0sZ5SaRk5YWSmNI0=)
2: tXikYahZ3cmGwIqI6VEtXD0iEOY.crl (hash: pIjaQAho6FGJhboB+Yj3627DlIeNtVSnLZ9b3oIimRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:fb:10:eb:c2:d4:e7:f7:57:6f:e6:6d:14:03:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Validity
Not Before: Aug 8 17:01:02 2025 GMT
Not After : Aug 9 17:01:02 2025 GMT
Subject: CN=95dacf939273f969c1f19b79dc12b507f10ebbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a3:9b:a8:12:15:df:7e:c3:2f:45:97:de:48:
8e:08:50:88:84:e1:36:61:cb:07:8c:7d:f1:74:87:
32:2e:5c:18:0b:3f:6b:73:84:5e:b8:da:60:58:3f:
c2:23:c6:a8:20:41:86:94:59:ae:1b:59:f3:75:d6:
bf:f1:73:8e:a0:36:6c:5f:80:d2:f2:6f:b8:9e:f7:
92:38:f4:8f:f3:4e:21:de:0d:cf:f1:98:9d:ea:36:
b8:46:13:40:68:f5:d1:a6:ea:b5:af:05:09:3e:1f:
e5:1d:a9:d8:ff:0c:8e:bc:d2:ba:fd:5e:42:7f:03:
cc:91:de:8d:1e:0c:0a:dd:a2:98:da:07:c5:3e:e4:
77:06:75:21:a5:27:8d:be:c2:ee:ac:2b:4f:53:df:
f1:24:95:be:74:94:ad:6d:52:0c:2a:13:71:76:a7:
aa:fc:7e:d7:d2:08:50:71:f0:9e:06:8d:be:58:9b:
46:34:e3:37:5c:7e:55:34:e2:92:35:91:6a:6d:23:
68:04:9f:b6:9c:6d:fb:a0:48:6b:41:ab:68:8b:fe:
a0:82:4e:7f:de:e8:43:30:e7:3b:2b:34:33:d8:bb:
10:e4:9d:61:65:fc:91:b2:19:67:cc:07:13:0f:f5:
a3:ca:51:5b:be:9d:04:ac:5b:0f:55:13:64:70:8c:
f8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DA:CF:93:92:73:F9:69:C1:F1:9B:79:DC:12:B5:07:F1:0E:BB:E9
X509v3 Authority Key Identifier:
keyid:B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d2:67:85:7b:16:e8:cc:f8:fc:47:51:6c:c7:a3:59:56:ac:
d2:f5:f8:86:4c:b8:3b:c2:e0:ba:e2:64:ec:fb:b0:05:2e:2c:
71:f1:a1:15:a1:30:68:5e:48:84:6c:2d:ef:ab:7d:86:8c:af:
13:32:b3:01:b8:0b:8f:4c:3a:77:ef:56:72:5d:7d:76:30:da:
3b:5f:0e:da:91:1d:dc:05:d3:8d:e7:2d:53:80:80:d4:80:b8:
f8:5b:70:b3:7c:fb:b8:36:2f:79:fd:8c:d0:b6:e4:7a:1e:86:
a3:be:6f:c4:5c:9b:a6:23:dc:8d:2f:a2:90:07:84:2b:42:2f:
75:04:e0:87:e4:c8:e4:7e:06:a0:23:17:79:bd:90:47:76:63:
5f:aa:6e:72:ef:ee:0a:4f:e0:e5:8b:9a:d0:dd:3f:97:84:c4:
96:29:3a:a6:9e:0c:53:ad:44:66:51:0f:21:c7:cf:4b:c5:e7:
17:35:ed:a3:74:4d:1c:7b:8b:88:19:be:eb:64:06:c1:64:0b:
14:fa:4d:f1:5b:fe:7d:45:69:94:1f:e2:42:f7:bf:04:c1:2b:
64:c3:c1:27:a1:a1:8a:93:66:d8:e7:99:1a:f4:a1:d7:93:d7:
1c:b5:d9:5a:8a:86:35:41:5a:29:23:03:92:fb:e8:33:dd:2a:
23:57:70:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:43:51 2025 by rpki-client