Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.mft
File: Tom7FOgJr_PsljCL2a6GUafndio.mft (raw, json)
Hash identifier: IkN5WesTRpvMBAFAZOy0xO/ZLbUevuTfSJlNsa+KGnU=
Subject key identifier: E6:89:29:24:0F:81:89:E3:F3:14:92:77:94:E9:CE:B4:92:A5:71:B0
Authority key identifier: 4E:89:BB:14:E8:09:AF:F3:EC:96:30:8B:D9:AE:86:51:A7:E7:76:2A
Certificate issuer: /CN=4e89bb14e809aff3ec96308bd9ae8651a7e7762a
Certificate serial: 01987DF83ACFCFD25657178F3685C6BFC8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tom7FOgJr_PsljCL2a6GUafndio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 06:01:16 +0000
Manifest this update: Wed 06 Aug 2025 06:01:16 +0000
Manifest next update: Thu 07 Aug 2025 06:01:16 +0000
Files and hashes: 1: Tom7FOgJr_PsljCL2a6GUafndio.crl (hash: IX/ub+0A6BGm0jMJKdU9EkUO0tRS5FQza8tBOA8PGPg=)
2: fxuqWXx_O_zewgAff6HXjyvgKp0.roa (hash: cm4JBhg0Zq8hHGX0z/7BWc/vnIZVK86NCDFtwq+RrhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tom7FOgJr_PsljCL2a6GUafndio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:3a:cf:cf:d2:56:57:17:8f:36:85:c6:bf:c8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e89bb14e809aff3ec96308bd9ae8651a7e7762a
Validity
Not Before: Aug 6 06:01:16 2025 GMT
Not After : Aug 7 06:01:16 2025 GMT
Subject: CN=e68929240f8189e3f314927794e9ceb492a571b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:45:54:86:1e:2c:33:a8:6b:35:51:14:c5:
59:30:8e:77:4c:47:93:b7:18:e1:96:bd:84:d4:52:
eb:24:6a:93:da:66:39:87:35:64:f5:f2:50:7f:76:
0d:a1:dd:0b:04:f8:2c:4e:74:f1:ca:b0:48:ed:5e:
7f:23:b8:28:ea:9b:b7:26:49:cd:0e:02:b0:a6:44:
1d:46:cb:95:60:41:b9:48:84:e8:82:ca:0a:4b:62:
f4:86:56:d1:fd:08:d2:9f:5d:65:ea:43:03:38:e0:
b1:49:90:24:a3:dd:ac:97:8a:d4:56:a1:79:14:a3:
8c:75:3a:94:2b:05:77:df:70:60:c8:26:1f:92:d4:
b1:2a:16:19:57:8e:6a:fb:4c:01:35:56:eb:cb:fa:
c2:4e:35:53:2f:00:b9:5a:0c:6e:43:e4:23:3c:f0:
07:86:00:b4:54:6c:d5:7f:d1:fa:c2:ac:18:cc:b0:
ce:16:2f:c7:02:09:bf:8c:8f:46:2f:ef:a9:89:1d:
b5:1d:0c:0a:79:4b:4c:a0:b7:8f:63:53:fe:84:9d:
15:e2:39:e4:ba:bd:07:f3:5f:8f:6c:49:d1:ba:da:
54:e7:5f:6a:53:d3:8d:fa:11:65:01:fc:9b:52:c4:
37:ec:60:65:98:34:51:f1:9b:48:c4:3c:c8:0c:2c:
64:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:89:29:24:0F:81:89:E3:F3:14:92:77:94:E9:CE:B4:92:A5:71:B0
X509v3 Authority Key Identifier:
keyid:4E:89:BB:14:E8:09:AF:F3:EC:96:30:8B:D9:AE:86:51:A7:E7:76:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tom7FOgJr_PsljCL2a6GUafndio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:6b:e3:4d:24:f9:1f:64:fe:7d:6b:72:07:e8:3f:6a:f4:ea:
61:b8:2b:83:c1:7d:b1:7d:81:c9:31:01:2b:b6:27:19:6a:f4:
b3:f8:17:de:20:0c:f1:eb:b5:f8:a3:88:9f:38:42:4d:47:27:
ac:5f:51:67:4a:7a:a5:be:be:54:64:66:81:c2:41:3c:7d:59:
80:74:ac:df:af:1e:84:8f:dd:73:0d:73:df:dd:db:e1:74:fb:
8a:71:44:1c:b2:36:1b:58:cb:bc:d3:d2:15:82:28:48:53:dc:
6a:ee:93:58:0a:a6:db:64:05:52:3d:02:12:8d:94:eb:3a:72:
c9:e5:9b:df:c1:e0:e7:14:c6:82:36:2b:15:10:4b:7e:5b:87:
1b:28:a1:86:ef:f4:3f:94:e0:cf:fb:9b:1c:69:d6:20:aa:2a:
e9:37:a7:9f:15:73:be:5c:ad:c2:64:08:96:c8:82:bc:73:76:
2d:6c:fa:ba:7c:cf:e2:9b:91:1d:b8:bd:7b:6f:05:80:1e:75:
17:ca:39:df:a5:8a:29:aa:5c:04:33:f0:31:c8:78:2b:bc:18:
bc:40:bd:a3:a4:13:78:3d:3f:57:65:a4:57:d2:8d:f6:2b:f9:
3a:ef:c0:8d:27:ca:b6:73:ad:e3:ff:7c:51:60:50:21:3f:45:
d8:32:62:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:33:14 2025 by rpki-client