
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft
File: tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft (raw, json)
Hash identifier: qT3FzoEd7/2NL+E++wS6EIrcbaYV0J90uZ3U6cgApM8=
Subject key identifier: 71:7D:3A:50:90:E6:AB:50:7B:DE:46:F0:B9:EC:95:09:5A:B2:B7:64
Authority key identifier: B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7
Certificate issuer: /CN=b6380000fb7e45f8976261a698d418f08e8d67c7
Certificate serial: 01987D8A35A1B892A437C88353F104A459A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 04:01:06 +0000
Manifest this update: Wed 06 Aug 2025 04:01:06 +0000
Manifest next update: Thu 07 Aug 2025 04:01:06 +0000
Files and hashes: 1: 4BOoh9ZvRlX2US_OZJ_A9kCTrtI.roa (hash: +tR3y1xSs3M/3+ZhTBHMrJWVz7B8nzvm5Sr9MdXyV2U=)
2: Kn6zCRrJAIpDU3vbBWFNfgedDNo.roa (hash: azRFjdZrexayFU12UNmkO7T6vISzK8GYJvKGqUFKldQ=)
3: eIluNbW1Lh7F9iIJxb6GVbd5mxQ.roa (hash: d+Tkp5gG5B2wX0ED2hhsWjApqTUL3iqth+z1QSZwDac=)
4: tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl (hash: g78xP5ndFsjaYYsEgZI6DwoxuI2zGlyM8nQ2T84BHHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:35:a1:b8:92:a4:37:c8:83:53:f1:04:a4:59:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6380000fb7e45f8976261a698d418f08e8d67c7
Validity
Not Before: Aug 6 04:01:06 2025 GMT
Not After : Aug 7 04:01:06 2025 GMT
Subject: CN=717d3a5090e6ab507bde46f0b9ec95095ab2b764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:07:3c:0e:84:82:6a:1c:2b:95:cc:e2:cb:d1:
d9:4a:8d:74:eb:a4:7a:11:37:50:0a:29:8d:2f:8b:
a1:73:e9:cb:c9:ed:0a:ef:46:2a:9f:b5:5b:e5:b1:
2c:8b:1a:b1:b1:37:91:cf:9d:14:52:63:a1:cd:64:
a8:8e:de:da:68:13:b3:f8:ab:c6:80:70:f1:dd:19:
7b:71:6b:27:96:97:a6:22:0e:ae:4f:d6:a9:91:6a:
9a:bc:93:de:a9:16:5b:35:71:fb:e8:62:75:8e:6e:
be:96:55:d2:5d:19:88:d9:76:b7:11:95:7d:e2:8c:
bd:fd:c2:27:ae:b1:51:95:51:67:ea:d6:ba:e8:ca:
79:28:2b:b4:f8:76:50:b5:26:c8:9d:ce:bc:5e:fb:
00:49:3b:fd:47:d1:43:64:5e:85:e8:62:d9:03:f3:
4d:6b:b3:28:ec:ea:5c:39:6e:8c:dc:38:e5:ff:87:
a9:80:68:c5:b3:79:88:ce:f8:e7:12:86:f0:78:0c:
9d:cb:dc:32:71:f0:88:1f:d0:3d:61:6c:dc:59:5d:
33:45:19:8d:aa:fd:86:24:d9:f0:8a:5d:4b:f0:1f:
09:2f:a5:42:22:fe:17:58:1b:c7:e3:d4:19:04:31:
d2:7d:4c:22:47:fb:7d:f5:f3:99:01:d8:e3:03:f7:
00:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7D:3A:50:90:E6:AB:50:7B:DE:46:F0:B9:EC:95:09:5A:B2:B7:64
X509v3 Authority Key Identifier:
keyid:B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a5:4a:d2:9c:89:68:70:d9:d9:03:3e:ef:cd:5c:af:44:b2:
5b:0d:3b:9d:5d:b4:95:0f:6b:81:e0:fa:a2:fa:70:8d:6a:df:
df:78:ee:6c:16:8d:ae:6f:42:c2:52:3d:36:86:b6:35:ae:c1:
48:34:6e:44:0d:2a:da:6a:5e:f7:78:a7:14:b0:11:d0:f4:9b:
ff:5f:f0:bf:b9:84:c8:f0:bb:a5:80:ac:cc:c1:be:bb:7c:56:
d5:b7:58:5c:f6:9d:0c:1a:e4:4d:e2:98:52:6b:ae:91:b4:91:
eb:8e:8c:ac:76:05:6e:55:2e:10:18:4d:13:bb:5c:36:d4:4f:
8c:6d:ae:82:b3:41:76:1b:16:02:8b:86:8d:a2:7c:61:24:73:
ba:0b:b9:43:ee:86:50:95:3c:a2:9c:f8:c8:9e:89:b2:ee:2c:
b6:b4:f6:5f:33:f9:70:ae:73:eb:f6:10:21:93:7f:73:a0:f3:
0e:7f:1b:f5:ea:85:66:a3:2c:af:2d:b9:87:f1:87:d6:05:8b:
b5:fb:20:2c:67:45:4f:3c:33:c9:c1:11:07:ca:6b:39:3b:e8:
30:0d:17:ef:04:b8:54:10:4f:ba:ee:5e:02:6f:35:36:96:14:
92:f3:61:42:7a:e6:7b:d4:45:63:61:bb:2d:c3:ea:1b:7a:60:
71:47:4b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:12:42 2025 by rpki-client