Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
File: tFOob9MIG4A-3BDSO77akdeTICU.mft (raw, json)
Hash identifier: vWm7Fmf7E8yIPeJQceZ8p1ix7UCMnrbxBZTt6n9k/B4=
Subject key identifier: A1:25:3F:D2:BA:9E:B9:DC:89:FD:30:C4:8E:A0:D3:91:88:F7:02:29
Authority key identifier: B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
Certificate issuer: /CN=b453a86fd3081b803edc10d23bbeda91d7932025
Certificate serial: 0198733D82D73D68915EC8A955B6CB54047E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
Manifest number: 15A9
Signing time: Mon 04 Aug 2025 04:01:07 +0000
Manifest this update: Mon 04 Aug 2025 04:01:07 +0000
Manifest next update: Tue 05 Aug 2025 04:01:07 +0000
Files and hashes: 1: h8oFDHIXTub3TgbD4vBpQOwCmWM.roa (hash: lwyf55gn3PMFr0CsrdeYlJw82BVP+7eUtEsfzrm/dIo=)
2: tFOob9MIG4A-3BDSO77akdeTICU.crl (hash: fE/2gaRQhia7qN0Qz3+gk46OJzFq54jtqD1SQM2y4+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:82:d7:3d:68:91:5e:c8:a9:55:b6:cb:54:04:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a86fd3081b803edc10d23bbeda91d7932025
Validity
Not Before: Aug 4 04:01:07 2025 GMT
Not After : Aug 5 04:01:07 2025 GMT
Subject: CN=a1253fd2ba9eb9dc89fd30c48ea0d39188f70229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:88:13:ce:56:03:76:5d:98:c0:08:54:62:71:
25:28:b9:84:8e:86:5d:87:fd:34:96:39:48:1d:9e:
9f:f4:c5:30:30:55:94:f8:17:74:3f:b6:5d:ad:60:
db:e8:18:40:1a:0e:3d:c9:61:f5:4c:63:b1:14:8d:
72:61:c9:e5:d2:f3:78:78:1d:6e:64:2d:3e:df:dd:
48:ed:2d:97:c7:21:a0:40:d4:1f:ab:45:de:d1:c0:
e5:aa:4d:e4:f6:42:78:ac:d0:1d:33:da:e1:27:ed:
a4:20:ca:16:c9:c4:bb:45:6d:aa:e5:ec:b4:fa:94:
ee:1a:3c:78:92:28:9d:f0:4a:c4:ab:df:0f:d9:90:
9a:55:d3:be:fd:fa:f0:6e:d3:5c:90:1b:d6:5a:de:
f1:e6:27:09:fb:ab:5f:8c:33:be:c2:51:73:03:76:
3c:ab:a5:3f:6f:fc:87:0a:50:40:9a:88:f3:2a:8b:
d6:fc:ad:8f:68:9a:17:cf:1c:a5:0b:38:30:62:83:
70:d8:b9:1e:cb:2b:43:be:9c:b4:50:03:97:df:90:
a8:ad:bb:e5:cd:25:77:1c:5e:55:aa:95:96:eb:ae:
74:fe:fb:14:98:c9:75:4b:98:1f:6e:d7:ca:60:2e:
7a:67:f0:de:33:3d:e2:0c:4d:50:41:73:54:00:e6:
2a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:25:3F:D2:BA:9E:B9:DC:89:FD:30:C4:8E:A0:D3:91:88:F7:02:29
X509v3 Authority Key Identifier:
keyid:B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:41:ac:ab:1d:c0:d9:09:55:45:80:fa:29:57:27:ec:36:96:
9b:40:c4:d1:8b:85:ac:37:0b:c3:31:7d:48:58:da:17:c6:33:
f2:b9:1b:73:b9:61:47:d5:fa:ae:08:31:84:23:67:4b:eb:d1:
4f:56:ef:ec:5a:84:b7:b8:86:08:60:50:41:2a:06:96:94:f0:
f6:c1:5a:0a:d9:d0:b3:58:aa:18:0e:08:3c:f2:c7:41:63:6e:
42:49:2e:7d:f0:57:c6:82:fc:59:33:99:fc:34:43:f1:b3:1e:
3c:15:2c:2f:a0:50:9b:16:47:01:00:af:aa:be:b3:e3:f8:0d:
d6:4a:14:4f:69:28:f8:18:51:ee:42:5c:66:c3:5a:28:4b:13:
9c:78:2d:54:4b:07:a9:b3:86:13:45:3e:8a:5b:b6:d7:82:ef:
fa:42:c0:2e:94:9b:fb:e5:aa:07:1a:f7:e0:b0:59:a2:ae:c1:
e2:dc:10:13:c5:24:cb:71:29:d7:8b:d5:4f:92:e5:1e:2d:1e:
b1:85:fe:14:9f:9a:45:01:c7:59:00:3d:03:25:40:7b:74:28:
11:f9:e3:53:b9:01:a3:c1:10:f5:49:34:73:e9:72:bb:da:eb:
2d:11:88:0e:d1:2b:de:9a:22:07:9a:dc:3e:34:44:ec:23:df:
36:2f:a8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:30 2025 by rpki-client