Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
File: TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft (raw, json)
Hash identifier: K+NV8PaK+1NwLZWXbi/MP9TNdjCT5AhrjC7CipmFZik=
Subject key identifier: 0F:5D:8C:13:D3:A0:C4:E6:DD:A4:D6:3C:6C:94:0A:B6:CE:ED:76:64
Authority key identifier: 4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
Certificate issuer: /CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47
Certificate serial: 01987A88A2B4B3E754D5CB1706677F0B75E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 14:00:31 +0000
Manifest this update: Tue 05 Aug 2025 14:00:31 +0000
Manifest next update: Wed 06 Aug 2025 14:00:31 +0000
Files and hashes: 1: TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl (hash: htFUKBvkchcltxBxSZ5w1XSqtwKNWlYQfIJxqFYteus=)
2: gtQnPoHQAssVploPdQKF3wMqPqg.roa (hash: oTvtYktXpzo6IvRkclIhI8X73gjSVVDXnm/5bjUENeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:88:a2:b4:b3:e7:54:d5:cb:17:06:67:7f:0b:75:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47
Validity
Not Before: Aug 5 14:00:31 2025 GMT
Not After : Aug 6 14:00:31 2025 GMT
Subject: CN=0f5d8c13d3a0c4e6dda4d63c6c940ab6ceed7664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:d2:39:2d:37:c9:ba:df:eb:f3:f6:06:0c:
b2:a6:65:20:b4:de:41:b9:4f:dc:ca:e3:79:be:09:
c7:13:a8:c3:b5:7d:a1:64:1b:ab:de:9a:e9:5e:c3:
d3:cf:3f:f7:61:f4:5c:da:2e:6b:ce:6e:c8:65:0b:
ff:a7:b4:59:e9:ef:9b:f2:95:0f:fb:71:62:0d:8e:
96:c8:7a:d5:8a:49:93:d0:15:f3:1f:3b:33:b7:b0:
0b:90:25:8e:ee:90:04:40:13:7a:5c:67:f9:b1:a8:
f5:a5:29:fc:9d:2e:9d:ec:39:1a:08:70:9d:78:11:
26:cc:9a:f7:35:b5:de:62:32:1e:a5:e2:19:b7:b6:
4c:0d:af:9a:d4:3d:eb:c3:25:20:95:38:e1:a8:43:
d8:b2:3b:c6:1c:6b:b7:0d:41:71:fd:f0:c8:2c:f2:
c3:db:32:d1:c2:9c:0b:06:04:35:96:1f:c7:2b:0e:
45:af:47:3a:ea:3c:be:7e:a6:e3:30:3b:4c:72:fc:
82:10:9d:72:44:8e:0a:41:04:98:37:3d:84:37:75:
1e:b7:89:0c:54:cc:01:16:02:ce:75:92:34:83:29:
5f:2c:b5:32:24:0b:bd:54:84:b4:8d:4e:b1:b0:2b:
4e:ed:fe:2c:49:0b:bb:59:43:cc:6b:db:cd:c7:a2:
a4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5D:8C:13:D3:A0:C4:E6:DD:A4:D6:3C:6C:94:0A:B6:CE:ED:76:64
X509v3 Authority Key Identifier:
keyid:4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f2:25:16:08:39:4b:62:15:3a:51:42:8a:9b:e1:d2:60:16:
a2:16:12:e1:32:6e:43:c2:3f:07:28:60:bb:1e:d6:5f:43:b0:
ca:ac:ac:7c:33:63:16:71:e6:f2:f7:7e:ab:72:10:26:be:8e:
1e:d6:e0:71:c9:09:ed:3c:e3:e0:9b:54:d3:65:ad:4d:98:b8:
1f:9c:50:f5:be:91:8c:53:44:22:90:6c:2a:38:28:f1:ca:27:
11:9d:1b:2d:ed:d2:7d:10:97:48:0c:cf:8e:ac:a1:5c:ae:e1:
20:db:68:12:e0:38:33:25:d5:a8:76:65:76:dc:52:1a:e2:bc:
0c:ec:4d:c7:76:b2:f5:2a:2a:ad:f9:64:5b:99:12:63:9e:83:
e3:49:f3:eb:74:30:34:4e:db:c0:79:ec:3f:3d:f2:f2:6f:b2:
71:40:3d:06:ad:15:15:06:2a:72:18:60:57:57:97:ff:c4:49:
cc:41:e9:ba:45:2a:34:cc:1b:52:62:dd:7c:64:4c:e8:45:9e:
d0:22:0f:5a:40:cf:8d:80:4d:63:70:61:f8:5a:df:f4:c2:82:
1b:4c:9f:92:93:94:b5:1e:37:2a:5c:1a:e9:5c:18:7b:f6:08:
27:8e:bf:fc:e6:f7:fb:ac:8f:12:66:fe:8e:84:e8:c8:ff:56:
c3:2e:2c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:22:59 2025 by rpki-client