Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.mft
File: tDlfbOqaAYpMyEgY5qo1INMiIYs.mft (raw, json)
Hash identifier: Wci9unP7XnhfuUbBL2N9AZPpTajc5mPWbZtfilQBUNE=
Subject key identifier: 4B:2A:68:74:9F:72:58:2F:31:53:48:71:DD:DD:EA:CB:89:4F:43:11
Authority key identifier: B4:39:5F:6C:EA:9A:01:8A:4C:C8:48:18:E6:AA:35:20:D3:22:21:8B
Certificate issuer: /CN=b4395f6cea9a018a4cc84818e6aa3520d322218b
Certificate serial: 019873E3C93E4056CAA450A564E8AA9A1381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDlfbOqaAYpMyEgY5qo1INMiIYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.mft
Manifest number: 0C99
Signing time: Mon 04 Aug 2025 07:02:44 +0000
Manifest this update: Mon 04 Aug 2025 07:02:44 +0000
Manifest next update: Tue 05 Aug 2025 07:02:44 +0000
Files and hashes: 1: UoFhfe1D4fv5504pD16hAMtOHqM.roa (hash: f5OjLqYpJfmM6P+Sc+etueFJmxpiBV6zei8gZZWeXpE=)
2: tDlfbOqaAYpMyEgY5qo1INMiIYs.crl (hash: sm9mzWfEBMoMyxYKHkDzvHGoLVPbhGmws+2zIf5R8oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDlfbOqaAYpMyEgY5qo1INMiIYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:c9:3e:40:56:ca:a4:50:a5:64:e8:aa:9a:13:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4395f6cea9a018a4cc84818e6aa3520d322218b
Validity
Not Before: Aug 4 07:02:44 2025 GMT
Not After : Aug 5 07:02:44 2025 GMT
Subject: CN=4b2a68749f72582f31534871ddddeacb894f4311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cf:a9:07:5f:d5:e5:4d:b0:bf:b0:e1:88:5a:
e7:4b:19:40:4f:4c:75:8d:1c:c1:a8:24:14:76:c1:
17:af:f0:81:ec:c8:33:20:1a:b1:38:26:37:4b:97:
20:83:ee:28:31:2a:58:37:4a:cb:47:48:34:46:16:
bf:0e:0b:1c:9f:fe:a0:52:11:20:f6:8f:d0:ec:f8:
9e:b5:42:8e:60:71:07:d5:8c:19:98:14:b8:51:65:
73:1b:0f:91:32:25:40:c0:12:2e:8b:30:94:43:f6:
e3:73:f7:5b:81:48:b4:e8:03:fc:92:07:df:ba:77:
5b:7c:e3:3f:4c:2a:c7:d4:23:37:bb:09:a1:7c:7d:
8e:f6:64:b2:54:8a:9f:0c:be:ea:c1:c3:ed:14:72:
1e:25:97:cb:a6:88:e5:5e:ac:a0:9c:7a:59:10:64:
c1:21:9c:5f:a2:ef:ed:08:ac:53:b2:5c:69:3c:a3:
ae:ea:e5:64:57:e6:5f:be:2e:43:e3:79:43:7f:9e:
a9:12:ba:a6:81:1b:30:07:b3:5a:2d:a8:69:df:67:
f8:91:fd:44:48:35:87:35:c8:c7:00:50:eb:ea:c9:
d0:33:3f:76:82:7f:ea:87:e9:a6:ff:4a:4a:00:cf:
7e:9a:dc:bd:94:3b:7f:33:98:3d:9a:4e:23:bd:04:
99:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2A:68:74:9F:72:58:2F:31:53:48:71:DD:DD:EA:CB:89:4F:43:11
X509v3 Authority Key Identifier:
keyid:B4:39:5F:6C:EA:9A:01:8A:4C:C8:48:18:E6:AA:35:20:D3:22:21:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDlfbOqaAYpMyEgY5qo1INMiIYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:20:dd:5f:1f:fb:68:eb:c5:4d:f3:5f:0b:7c:c1:16:89:29:
07:87:5a:9b:05:8b:bd:50:17:00:0d:96:76:df:13:60:a8:1c:
2d:1f:eb:b0:c6:ca:0f:bf:2a:20:84:30:48:2a:9c:18:e9:d5:
86:b2:86:50:64:12:53:b3:53:bc:70:bb:e3:f2:fd:02:8e:e1:
ef:6e:06:5b:c9:47:70:26:8f:4e:48:0c:78:ba:b4:2d:ce:c1:
1c:05:01:bd:df:e2:9c:1e:e1:f6:68:a6:04:20:78:61:8d:1c:
72:07:7b:f0:48:d3:6c:27:d0:b0:d5:0d:a2:f7:13:95:00:08:
de:34:4e:10:79:83:bb:4a:c5:11:a4:dc:4b:c8:71:e2:b0:ff:
2b:e5:7c:9f:46:cc:99:54:22:f8:25:b0:22:6e:5b:fb:27:9e:
89:19:0e:ce:e3:1d:a3:25:26:cb:a9:84:74:7a:a4:4a:1d:2c:
b0:c1:cd:96:be:24:2e:be:01:30:20:1d:48:1f:4b:76:3b:3d:
25:6e:a7:73:a4:18:46:3d:cc:89:31:61:da:18:3d:11:a1:32:
95:58:0d:9f:00:7d:7c:fa:a1:4b:83:3c:0c:60:33:87:70:ec:
9d:25:61:4e:ae:fc:a1:ba:e5:f2:cc:c4:0b:2e:09:7a:49:35:
0a:6f:e4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:36 2025 by rpki-client