Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
File: tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json)
Hash identifier: VcY3y43sfzucFhGnCxOi/Oh/6+lhs69TsnrCdKd1mhM=
Subject key identifier: 6B:D2:94:BA:7A:22:80:3F:FC:96:58:10:4C:8B:D8:17:33:43:93:8B
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial: 01987D1C05A8B82BE6243A00ABEDAB3969E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 02:00:44 +0000
Manifest this update: Wed 06 Aug 2025 02:00:44 +0000
Manifest next update: Thu 07 Aug 2025 02:00:44 +0000
Files and hashes: 1: dMyCW0_TBkO1nYNBL_n11IKNaBI.roa (hash: WTKaBFp1QPSs1ROafjR4WJfZR1PRtcVHfjnPURoJWEQ=)
2: iWujOO5h_XVMHY2nSFxBko0o46E.roa (hash: hfZ0O6pRdbOdpr8hVRCYtXgEcI0jSP4lHjfs8kAt2hk=)
3: qrrQR7WuIleyYS2sO7I0VvjROUo.roa (hash: 4JE74Aq/xmpPqZIRbZrMja/xvjU3RSpM11pAC7vf4sE=)
4: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: rUTFAZ45i5fHru7z41IHMuirjYMWLwCi34QVJwZQCLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:05:a8:b8:2b:e6:24:3a:00:ab:ed:ab:39:69:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Validity
Not Before: Aug 6 02:00:44 2025 GMT
Not After : Aug 7 02:00:44 2025 GMT
Subject: CN=6bd294ba7a22803ffc9658104c8bd8173343938b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4d:de:48:f2:1e:15:5a:9a:13:e0:ae:5b:65:
da:31:bc:11:df:44:cf:a2:39:23:7a:6a:5d:1d:db:
f2:9c:0f:52:70:f2:27:95:eb:a5:85:bd:7c:8d:f8:
23:0c:ff:4e:83:ad:79:f4:0c:1d:67:7d:67:b1:81:
32:25:65:4c:1c:8d:f3:d0:bf:6a:5a:58:5d:5f:34:
f1:c5:48:81:cd:8d:cd:a9:19:cb:ad:cc:6a:52:c1:
4b:ff:82:0a:66:3b:62:ab:4f:23:a3:f8:6d:96:6c:
e0:9d:71:9a:05:e6:7d:04:05:ee:64:c9:49:8b:64:
a4:61:62:a8:08:c3:d5:ab:13:99:6c:e9:2e:b8:cc:
a6:aa:ac:d6:80:4c:23:08:b1:8d:d5:9c:55:ad:9d:
09:f4:c3:c7:7a:6d:e1:b4:ec:be:c8:45:92:cb:f5:
b1:0e:35:f9:52:62:5a:07:45:83:34:69:03:8e:f4:
f3:cc:f4:e8:33:bc:87:c1:3b:1a:a5:43:ba:11:e9:
2d:5b:fc:a1:b7:de:73:5e:fc:8d:0d:8d:ed:06:bf:
34:43:7c:1a:18:35:61:71:da:97:b5:b1:63:d6:ba:
82:2b:62:cb:bf:b7:cf:96:cf:84:b4:09:d4:50:eb:
0d:a8:0f:aa:6f:17:cd:29:da:8e:8f:59:7d:7d:0e:
a3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D2:94:BA:7A:22:80:3F:FC:96:58:10:4C:8B:D8:17:33:43:93:8B
X509v3 Authority Key Identifier:
keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:91:69:a9:2d:0c:37:e2:3e:d0:78:2a:c9:93:6d:a7:88:34:
3f:47:b9:9f:ba:b0:c0:d7:3b:c2:2a:26:2e:97:78:7f:48:e6:
be:08:7c:b2:22:f8:01:bb:17:ab:a8:cc:fe:a7:d8:5b:2d:1f:
4c:1b:f5:91:32:b1:04:62:f1:53:25:f5:1a:18:1b:4d:92:39:
7f:b8:c2:80:27:c9:5d:3f:41:32:c5:2a:84:f8:6b:12:f0:14:
de:fc:af:81:6d:d4:63:5a:fb:07:32:73:ab:e0:ce:03:e2:92:
53:fe:7a:a2:3c:e0:02:80:0b:86:db:3c:9d:73:62:d1:e0:f8:
76:a9:6c:11:99:91:b9:34:cf:dd:d8:b6:20:a7:67:30:48:92:
4c:79:d6:07:f4:09:b2:6a:44:3e:17:8e:87:90:a8:4a:ce:2f:
2e:f8:58:0a:5b:1c:a5:f4:da:6d:67:ca:20:10:83:5a:c4:8c:
35:75:d5:80:b8:43:19:4a:b7:08:4f:dc:94:f6:4e:1c:a0:18:
b7:ab:0f:a2:63:cc:ff:78:25:b4:a7:14:04:b9:f5:17:37:ef:
48:9e:4d:75:b4:6b:d3:b6:55:87:da:20:64:ff:45:1c:b2:23:
a0:ab:6f:9f:e0:72:cb:e2:ad:33:8a:6c:f7:67:ca:eb:ec:67:
19:f3:10:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:38:52 2025 by rpki-client