Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
File: tBhner86ruA2zUrdd9ZhlvzeTG0.mft (raw, json)
Hash identifier: kT1KQ29dDvh7T8DbCUK/eHUnAdraa3pzoocPfOlRN5M=
Subject key identifier: 98:46:55:01:F0:31:92:DE:3F:07:3B:08:C6:3D:05:18:8D:94:CC:0A
Authority key identifier: B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
Certificate issuer: /CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Certificate serial: 01987A1B250821AB71645F05ADE278813FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
Manifest number: 0EE9
Signing time: Tue 05 Aug 2025 12:00:55 +0000
Manifest this update: Tue 05 Aug 2025 12:00:55 +0000
Manifest next update: Wed 06 Aug 2025 12:00:55 +0000
Files and hashes: 1: GluX1bXAOCEKoiPGiqd94CJ3PnQ.roa (hash: Ni4Tstwu0GgIgTRS0r/kMJY1nK24hB/s3xhSSr7BatI=)
2: sUg9MVJbpnKjp6n_qVdxGGSeJB8.roa (hash: iazJ3Yw/lvASdOuiaEdBPRq3HWHdL5Kxvj+o3m8saWE=)
3: tBhner86ruA2zUrdd9ZhlvzeTG0.crl (hash: HgluZ9Uzi2J3ieNXKFc2meafMVQSCboEOxozZjC+deA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:25:08:21:ab:71:64:5f:05:ad:e2:78:81:3f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Validity
Not Before: Aug 5 12:00:55 2025 GMT
Not After : Aug 6 12:00:55 2025 GMT
Subject: CN=98465501f03192de3f073b08c63d05188d94cc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:97:d4:fa:c0:2f:58:c6:9a:c6:92:1e:4d:87:
27:88:cb:88:97:ae:e9:9a:9b:09:3c:e7:6d:39:f9:
39:92:56:8a:37:35:2c:ca:92:47:9e:f0:14:f0:a2:
49:fe:1d:ec:5c:0c:a8:b3:5e:47:07:31:e4:ad:66:
36:36:53:69:1f:80:e4:04:28:c1:24:f4:b7:7e:5f:
74:09:24:c9:15:29:a0:06:a1:29:5b:3f:df:33:ec:
a3:6d:a3:82:92:9d:69:77:a9:ca:fb:cd:f4:8d:a9:
79:72:b9:7e:62:b2:23:03:c4:38:4e:43:c0:7a:a9:
79:c6:bb:10:b6:51:5a:26:bf:ae:b2:40:0f:14:34:
ae:29:07:fc:3f:94:82:c4:e3:a5:90:01:1b:ff:41:
1f:74:21:57:d8:95:b3:7b:f4:70:a6:8b:92:00:05:
11:53:cd:c3:7e:f6:0e:39:6d:32:3c:51:a6:28:14:
11:ad:ff:0b:05:96:c0:89:5d:58:f7:72:44:0b:6e:
74:a0:b9:1e:72:49:93:63:1b:67:83:15:5a:ea:8e:
95:91:30:14:10:bf:7e:66:c3:d2:d0:af:36:64:5b:
3b:f5:8d:a0:bb:fc:ea:c9:c2:61:d6:14:d0:8a:d6:
c2:ba:36:e3:9f:b7:70:62:c4:e8:71:cc:42:ca:85:
53:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:46:55:01:F0:31:92:DE:3F:07:3B:08:C6:3D:05:18:8D:94:CC:0A
X509v3 Authority Key Identifier:
keyid:B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ba:ff:97:33:c7:ac:f7:19:6a:ae:a2:a6:90:19:6b:70:bb:
24:b6:87:2c:50:7c:a8:d7:1b:d2:a6:59:a0:88:06:5f:96:33:
14:55:f5:d0:f3:3e:14:f1:e7:0d:c4:c0:a4:b2:9f:14:76:c1:
d4:d6:2e:c5:9b:c8:91:19:9f:0a:31:02:66:5c:eb:ad:ac:d5:
52:99:d5:71:dd:cb:33:57:8f:51:15:34:05:c6:16:85:76:11:
52:f2:c3:ee:1f:e2:bd:2a:70:ec:bb:ca:64:7b:0f:49:2b:00:
a5:10:d2:82:20:5a:4e:37:58:c3:e2:05:f3:27:b7:ca:7f:08:
11:95:fc:f0:27:2c:3f:1b:94:ea:1a:05:93:81:b5:31:5f:cf:
7f:57:32:22:8c:da:db:8f:46:8e:4a:e5:c5:7e:27:03:9f:4f:
50:50:af:3d:6b:39:01:01:67:3d:3d:9b:de:9d:c5:48:60:12:
ee:a7:c1:18:a1:41:ac:d9:43:23:fb:74:e6:8b:62:a3:09:1d:
ca:c0:1c:f0:a2:3e:ea:0a:bf:2e:30:80:96:52:ff:29:b7:d1:
51:ed:84:a5:d2:f5:93:d4:f9:07:a8:cc:30:04:e4:14:e6:a2:
ff:98:f8:c5:3f:86:00:65:88:61:bb:a8:a5:31:1c:51:f6:71:
38:c3:f5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:17:46 2025 by rpki-client