Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
File: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft (raw, json)
Hash identifier: Qd2e4KJvyY6Wk23jU7HR3mTwxpxFbwvbmmAE/tfUGRE=
Subject key identifier: 00:9F:CB:46:BB:EF:74:74:5A:6A:CA:23:41:83:A4:79:26:91:84:04
Authority key identifier: B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F
Certificate issuer: /CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
Certificate serial: 0198793F92E3D0949078DA9449F8E645873E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 08:01:06 +0000
Manifest this update: Tue 05 Aug 2025 08:01:06 +0000
Manifest next update: Wed 06 Aug 2025 08:01:06 +0000
Files and hashes: 1: QdWm_iYTkmRwOlae6fa_m0n_xoY.roa (hash: GAwdxYROZcqJfJWKya6QGN1+Dp1F3FkjXyRiudeAVk4=)
2: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl (hash: dgJAyUqNRyXgy66r/DzT7pIjqMjzy33T6FGVL9pW0EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:3f:92:e3:d0:94:90:78:da:94:49:f8:e6:45:87:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
Validity
Not Before: Aug 5 08:01:06 2025 GMT
Not After : Aug 6 08:01:06 2025 GMT
Subject: CN=009fcb46bbef74745a6aca234183a47926918404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:99:84:86:ba:d2:c6:8d:4f:b0:e2:bc:58:
24:ea:9a:e3:e3:4e:e7:47:6c:98:97:31:0e:3b:32:
84:7d:a3:b9:9c:49:63:0c:9e:f0:f4:54:4f:c4:a5:
64:99:ec:46:14:f6:54:f5:32:b6:e0:b4:63:7a:bb:
be:d9:b0:b1:41:38:23:b6:c3:48:89:2e:e5:a4:35:
88:71:ac:50:b1:d3:03:03:66:21:41:0a:01:79:89:
93:bd:3e:c7:95:c4:92:92:6b:62:19:63:5b:9d:86:
62:64:f3:d8:d2:fd:63:f5:fd:46:44:18:3b:1d:f1:
d2:1c:0e:54:07:f0:58:81:0f:cb:86:e7:69:6a:55:
d7:3c:43:c9:b4:e4:0d:5c:f4:fc:4e:43:16:33:72:
b4:68:db:b7:13:b7:6d:64:23:82:ea:f7:22:86:27:
82:18:26:4e:62:98:34:d0:b8:90:c4:d9:1c:3e:d1:
98:5c:65:74:69:d8:77:4e:17:30:32:e4:92:7e:00:
37:08:00:c1:78:74:88:2d:c9:86:90:07:a5:86:6b:
74:50:cb:61:14:4d:e9:55:e3:f2:8a:81:09:ba:93:
85:88:08:8c:d5:67:3c:62:fe:1f:1c:13:8b:9a:43:
b0:36:85:ea:ec:b9:e9:88:f8:41:e2:84:3b:c3:65:
bf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9F:CB:46:BB:EF:74:74:5A:6A:CA:23:41:83:A4:79:26:91:84:04
X509v3 Authority Key Identifier:
keyid:B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:01:b1:29:39:51:af:ab:ae:8b:c2:18:a4:89:2e:fb:e9:5f:
b5:48:30:ab:3b:8d:06:bb:ad:b6:61:06:0a:5d:7a:23:86:0e:
81:21:56:b2:56:4b:24:65:5e:26:90:97:67:ae:b0:19:63:1a:
d0:a3:0a:43:36:a2:fb:da:77:66:a0:38:cc:d1:e4:9d:08:4d:
72:20:97:af:44:2c:ed:55:d9:a3:a9:91:f1:1c:e5:33:fc:e6:
52:d3:79:31:3f:1a:4f:08:8d:5e:25:f9:8d:d7:be:09:c1:78:
a2:2c:e2:f4:44:ea:d3:5a:49:fa:4f:fd:d5:dc:a4:bc:62:aa:
26:56:6b:7c:1b:83:38:ac:0c:bc:39:aa:68:13:23:89:5a:e6:
80:b3:1f:8b:02:b7:0a:e8:73:d1:fa:f7:02:76:a9:54:8b:80:
d4:6c:60:f1:56:a3:21:f6:be:f0:de:49:78:ac:5f:c4:86:c8:
12:be:dd:ba:eb:77:a9:2d:f0:bc:a8:41:b5:4d:bc:a2:bf:14:
61:ca:9b:73:de:c6:03:07:a5:11:c6:74:ef:9b:a8:f3:06:08:
b5:8a:ac:c1:95:48:78:e7:af:18:7e:8e:a1:f7:39:a3:2b:23:
e2:dc:63:06:5a:79:45:b6:5e:40:97:23:03:e7:21:72:dd:1b:
2f:40:de:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:13:14 2025 by rpki-client