Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json)
Hash identifier: E/t2a7w0/KcQDaqa4SX2+O57zhQcC5DAx1HDZLRa98A=
Subject key identifier: D8:93:77:09:6B:62:7A:A6:F3:41:C2:3E:8D:D2:19:C5:22:CA:13:33
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial: 019893A49430CEEDB1329DB8F009FFE0E9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 11:01:33 +0000
Manifest this update: Sun 10 Aug 2025 11:01:33 +0000
Manifest next update: Mon 11 Aug 2025 11:01:33 +0000
Files and hashes: 1: 1lSa1sl-dNBGB6RIspgIufADhjs.roa (hash: ZUkq8NELozqtJDfHgnQK7IOC8L6Hnu5OT9um+2WKleM=)
2: TB1SNMK17klLvRw1OV09EGXDsjg.roa (hash: 3s2Ua7bRSNfwEdFtiO4U1p/wzm3QtvPjfYSSDJ4385k=)
3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: FUfg5Kz4oImvRFZK3BVF2/3pMsqldEzJ1wlJLZsX9nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:94:30:ce:ed:b1:32:9d:b8:f0:09:ff:e0:e9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
Validity
Not Before: Aug 10 11:01:33 2025 GMT
Not After : Aug 11 11:01:33 2025 GMT
Subject: CN=d89377096b627aa6f341c23e8dd219c522ca1333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:85:b3:ec:10:b1:43:d2:f1:5a:28:90:23:1f:
b8:25:0c:24:f1:83:ef:c8:f8:1d:74:a1:39:a3:3c:
aa:57:a2:5e:b7:e2:93:6d:e8:8f:11:b0:66:49:94:
7b:58:9c:fd:64:26:23:eb:6f:1e:a4:2c:50:8c:46:
46:46:cc:01:3b:21:ac:d4:5e:a5:e5:ff:cc:49:32:
a6:c9:a4:f1:fa:4c:7e:45:90:bf:14:c2:3e:06:6e:
cb:f8:7d:39:5e:b9:8a:65:5c:32:b6:e9:7d:0e:4e:
cb:40:d1:fe:22:99:03:55:1d:f7:97:f9:33:31:33:
c7:1a:b5:cb:f7:12:10:ae:d4:55:97:fe:f1:e7:c8:
87:2f:b1:89:8a:6d:7a:85:d5:8d:3e:15:5d:93:41:
5d:da:32:7f:b1:b8:53:1f:00:5a:30:a4:46:4b:1f:
35:7c:d6:08:d6:cf:3e:0f:ad:f0:67:28:0c:f0:db:
e2:a3:2e:f4:dc:59:8e:9a:37:c5:21:7b:77:f5:91:
a7:54:99:84:e5:d7:80:3d:98:82:fa:e5:eb:30:2e:
57:0b:5b:3b:97:21:3a:78:0d:60:a2:42:13:b3:3e:
cc:f8:af:bd:57:b8:f8:42:22:88:0f:03:d6:f3:25:
6f:4f:5b:a6:02:84:c3:49:69:31:12:f3:89:62:3d:
40:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:93:77:09:6B:62:7A:A6:F3:41:C2:3E:8D:D2:19:C5:22:CA:13:33
X509v3 Authority Key Identifier:
keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:cc:40:8c:63:48:95:74:6f:0f:fb:d5:ee:72:5a:0b:96:d1:
fe:11:d6:92:e8:2e:cc:f4:99:8e:15:87:f6:78:36:15:5d:4c:
18:81:e1:c8:ef:00:d4:02:f5:ef:66:dc:da:37:91:c6:3e:0c:
89:31:7f:f6:40:79:53:8a:6e:7f:71:26:f3:db:91:27:01:dc:
1f:ad:ca:15:f1:f7:03:86:a2:2b:c7:fb:d0:9f:70:ea:dc:7c:
e4:35:01:fb:a0:5f:59:03:d7:8e:ff:2f:38:d9:ed:ff:4e:a3:
45:5f:fe:a3:a7:9b:a2:20:ac:6d:a7:26:75:9b:97:15:a0:10:
2c:c1:dd:4b:d1:14:85:05:67:22:6c:8e:a9:84:4f:2c:c0:d6:
75:9f:9c:49:72:9c:db:6c:63:fc:49:12:ae:cd:01:98:49:a2:
bf:49:d3:af:55:07:16:15:06:6d:f7:5f:2c:99:fb:4f:25:df:
96:80:41:b4:5d:71:10:e9:79:27:c9:e0:45:e4:56:8f:cf:81:
e0:55:b1:cb:53:8e:80:06:23:ca:d4:74:1d:63:ac:e7:4c:a4:
67:0d:a0:36:14:a9:e1:9e:8f:fb:6f:39:10:54:8b:d6:66:ad:
b1:67:57:21:ee:1a:a8:94:81:c6:56:fa:f7:db:ee:fb:1b:f4:
e1:5b:fe:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 20:59:26 2025 by rpki-client