Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
File: tpJFTBZpZIbPBx7Rjnl240BJCfs.mft (raw, json)
Hash identifier: IoRktBPdXS139+FOWIyFEgJ7IDyF66eKhMn9Dbdm/Y4=
Subject key identifier: 8B:D6:E3:6B:23:38:04:3B:13:B1:45:38:4C:11:23:66:5E:90:7F:C4
Authority key identifier: B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
Certificate issuer: /CN=b692454c16696486cf071ed18e7976e3404909fb
Certificate serial: 01987CE54E90EE38D1A2B12E24812F702470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
Manifest number: 0A6A
Signing time: Wed 06 Aug 2025 01:00:59 +0000
Manifest this update: Wed 06 Aug 2025 01:00:59 +0000
Manifest next update: Thu 07 Aug 2025 01:00:59 +0000
Files and hashes: 1: 5czF8Od9k1lGzWbwlN6JD9EQv3o.roa (hash: xQiXSp/PKEr54Bt774G49z92F24A1eFshYT3vR6Fw2c=)
2: tpJFTBZpZIbPBx7Rjnl240BJCfs.crl (hash: HGXYv/kulwVgBdc8wMjAqTKYMwq7R4ewjNM0FIIPdJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:4e:90:ee:38:d1:a2:b1:2e:24:81:2f:70:24:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b692454c16696486cf071ed18e7976e3404909fb
Validity
Not Before: Aug 6 01:00:59 2025 GMT
Not After : Aug 7 01:00:59 2025 GMT
Subject: CN=8bd6e36b2338043b13b145384c1123665e907fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:01:19:24:7a:20:84:54:2b:b0:4d:d1:77:8c:
62:01:d6:81:bf:ce:e8:22:68:27:0e:73:6b:9c:5f:
84:e1:87:8b:f1:0f:08:67:23:2f:b3:46:7b:39:8a:
00:dd:49:0b:02:f3:f8:b6:6b:a5:ef:fa:6f:6e:a7:
78:dc:42:ac:e2:e1:ca:4f:e1:c3:c8:a1:1c:42:f9:
31:57:b3:9d:40:be:39:b0:1e:22:dd:a7:44:44:34:
3c:63:e4:00:3e:fb:f7:52:c6:78:e1:60:f0:cf:01:
a2:b1:b3:02:c1:88:ae:99:62:38:9b:21:90:55:93:
21:80:b6:63:ae:ce:60:4c:ae:1f:ef:58:5b:51:fa:
e2:9f:dd:7c:95:ee:97:e9:e1:f1:fc:15:91:49:fd:
66:8e:2a:98:c0:19:53:f8:f0:3d:13:4f:4f:20:f3:
20:9b:50:0e:45:1d:6d:af:56:16:a1:8f:97:d9:f2:
fd:a3:e0:41:0f:01:41:4f:3c:50:cc:21:c0:f4:77:
75:0a:44:13:e6:c3:a7:14:ce:fb:b4:cd:56:1d:da:
db:a5:c5:03:12:e2:81:b5:ea:07:4d:dd:36:da:0c:
ff:5f:c5:67:86:bd:43:62:02:ab:d7:68:55:a3:49:
02:99:4f:b2:5d:2a:0f:d0:f4:e9:69:04:ab:9c:f0:
19:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D6:E3:6B:23:38:04:3B:13:B1:45:38:4C:11:23:66:5E:90:7F:C4
X509v3 Authority Key Identifier:
keyid:B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:16:4f:7d:c4:27:05:ad:a6:67:22:24:3c:be:68:29:28:3c:
3c:45:7a:bf:6f:f2:dc:ed:60:2e:fb:90:bb:da:3b:cb:e3:2f:
a6:48:66:24:f8:ec:32:40:36:96:85:20:82:1e:8f:c9:5e:bc:
b0:d3:57:65:b0:80:94:df:58:d6:90:e6:95:fd:99:54:2e:cd:
1f:44:4c:bf:cd:f7:1f:54:d6:1a:bc:ed:1b:01:d0:4e:0b:a1:
4d:3a:ed:19:08:1e:9b:47:d6:49:57:0a:00:3a:0d:86:9f:9d:
7f:d3:bb:3c:e2:22:c4:b1:74:0c:85:b8:eb:58:32:fc:fd:cc:
e0:3f:8c:4c:41:a6:8d:b0:2b:a2:b2:15:a9:36:90:7e:eb:b3:
28:64:f6:0f:0b:cd:25:25:a0:ea:65:08:58:c2:87:c4:40:ea:
35:50:ca:de:49:f7:97:81:c9:19:84:eb:a0:86:f2:18:ab:e9:
b8:cd:f7:15:73:92:18:84:4f:77:c7:46:9f:09:39:2d:0e:37:
a9:32:26:88:22:50:ad:da:eb:06:19:4d:de:62:5f:aa:f6:0d:
a9:88:00:bf:eb:fb:54:07:66:3e:d1:42:15:03:73:48:e9:31:
3b:23:f5:e6:23:b9:b5:c8:03:b8:1b:c0:c7:2c:5a:a9:0c:d4:
bd:04:18:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:09:12 2025 by rpki-client