Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
File: TxUpALDTI9NtlFEKsLAck_RRfIk.mft (raw, json)
Hash identifier: b3hC3e9tMW1vG0F4QiNO9d5wQ81u/YqmHvllQVxY7DE=
Subject key identifier: FB:16:36:0D:DB:C2:42:33:CA:7D:B8:04:8C:36:99:34:1F:11:81:D7
Authority key identifier: 4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
Certificate issuer: /CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Certificate serial: 0198808B4AA4142DD8FA861DA16F5081FBAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 18:01:08 +0000
Manifest this update: Wed 06 Aug 2025 18:01:08 +0000
Manifest next update: Thu 07 Aug 2025 18:01:08 +0000
Files and hashes: 1: 8Zjvv60lC8NGP14VoQ8RNeofQIM.roa (hash: P7KtzcRE9odqg/BTLMYwDj7fh0a6LBnncSFvQDv5Bp0=)
2: FpKKPofiudOty7FxUMr6flRZ1Yw.roa (hash: 19qYKj9K4I/iMwutyl2SfY76xgKtvj/68+BwpIEN2Kg=)
3: TxUpALDTI9NtlFEKsLAck_RRfIk.crl (hash: Spa17SzOheaBo2pjsay9UEU6a/NV9KBW0gcRC0PpPOo=)
4: yOx4nY5h71UsEVGCdqce7EnVtbw.roa (hash: pblfkKrPcMJNUK4hgNwzxNA61gyD6ePezh9yKZ6o3M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:4a:a4:14:2d:d8:fa:86:1d:a1:6f:50:81:fb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Validity
Not Before: Aug 6 18:01:08 2025 GMT
Not After : Aug 7 18:01:08 2025 GMT
Subject: CN=fb16360ddbc24233ca7db8048c3699341f1181d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:af:b6:0d:80:f8:0c:31:23:c4:61:3a:97:
d1:8b:3d:86:7c:6d:25:c2:15:28:03:45:4d:6e:f7:
d7:84:c5:b9:62:db:56:4b:3f:7e:1f:3c:5f:b0:c9:
3d:4f:6e:ed:13:e9:e4:7a:95:69:00:e3:c8:00:37:
40:5e:86:f4:38:97:f2:a0:1a:10:0e:82:8d:7f:72:
e3:ce:55:a2:6b:34:b2:b4:30:44:84:b7:c2:59:4f:
29:a7:a6:db:e7:66:5f:a4:70:35:e5:57:ab:8d:ce:
10:28:b6:a6:eb:63:1c:40:af:89:de:cd:96:a0:78:
33:9a:c8:c7:dc:3a:32:96:9d:d1:7a:7d:f6:93:f5:
1b:3f:ee:d4:b7:6e:88:77:5d:52:48:33:1b:7b:98:
78:5b:6c:67:e4:94:b3:ed:ea:73:08:79:68:78:66:
99:8b:71:8f:16:f3:1f:72:76:5e:9f:fe:f9:fc:90:
7c:bf:6d:50:c0:95:2f:9c:42:d6:99:2a:db:3a:c9:
d3:75:73:27:ff:e6:06:e5:ad:99:61:02:bc:59:6c:
cc:b9:33:de:1f:bb:b5:85:62:7d:56:e8:d0:ca:95:
cb:ab:be:87:c1:10:fe:b7:54:2c:19:6e:4f:51:eb:
56:d4:13:09:0d:40:60:06:61:b0:55:b5:7f:fd:ad:
5b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:16:36:0D:DB:C2:42:33:CA:7D:B8:04:8C:36:99:34:1F:11:81:D7
X509v3 Authority Key Identifier:
keyid:4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:12:84:50:51:d1:b6:5b:80:33:69:77:16:3e:55:02:60:e2:
1d:ac:bb:6b:55:87:ff:02:23:e4:89:aa:b9:38:c7:71:ca:93:
71:be:b0:81:82:6f:41:63:c2:0f:c2:45:bf:15:6d:e7:b6:22:
6e:47:08:f6:ad:f9:dd:e0:dc:0d:67:e4:9b:bc:c0:5f:84:f7:
1b:fe:cb:b3:11:86:6e:c5:71:3b:fc:96:05:6f:b4:aa:fe:84:
99:8b:6e:f3:e1:98:b3:b2:19:2e:84:11:1f:fa:b4:51:42:1a:
7c:a9:ea:7f:a4:f0:fc:0a:92:96:8e:7d:f2:e7:38:aa:91:0c:
de:81:d6:e3:23:9d:cb:4e:b5:17:0d:9b:44:a4:b1:f9:11:41:
cd:46:27:d7:d4:46:e6:ce:41:05:ac:b8:33:03:de:94:62:89:
c4:53:eb:4f:fb:98:25:69:b6:60:e8:8a:f3:c1:c8:3f:de:09:
b3:71:f9:98:90:21:03:0f:dd:30:86:35:df:1c:3d:ac:51:03:
26:53:45:c2:4a:b8:fd:a0:61:27:a3:1b:07:2a:46:34:8a:76:
41:4f:7b:b2:07:41:95:39:25:21:f6:97:9f:0d:6d:da:c2:39:
4f:43:0c:b7:36:c9:07:70:8e:0b:8e:04:34:87:9a:d2:32:84:
3a:7e:9f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:27:16 2025 by rpki-client