Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
File: Tg854squjizxS8xBsj88huGnIPg.mft (raw, json)
Hash identifier: IEjx0oV8N7C/sro1P4XNmECTVXjs089PT2+u/qf/v1k=
Subject key identifier: 25:E3:22:A8:51:03:5D:9C:8F:0C:14:21:3B:38:DD:9D:0E:11:E5:4C
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 0198955B041934635054D3A5A74CF60C97E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
Manifest number: 162B
Signing time: Sun 10 Aug 2025 19:00:26 +0000
Manifest this update: Sun 10 Aug 2025 19:00:26 +0000
Manifest next update: Mon 11 Aug 2025 19:00:26 +0000
Files and hashes: 1: 3NL0_43JO4ViZMUt6FOGd4wRJes.roa (hash: iMUE0vTHXLYCmLZqj0qdPBpz5FgK9qmOUf7yFoe48OI=)
2: 4pgipsDtjzVZOnA4qzWqk83-xSA.roa (hash: nd8vlth0pBWJ/Is/avNVqT3xb/Gc3yDSmhppSZMRqxM=)
3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: 5ndg726msgG8FEJgj0NbmmsMo7+FCSmcLFFaV+kTtCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:5b:04:19:34:63:50:54:d3:a5:a7:4c:f6:0c:97:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: Aug 10 19:00:26 2025 GMT
Not After : Aug 11 19:00:26 2025 GMT
Subject: CN=25e322a851035d9c8f0c14213b38dd9d0e11e54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d8:f0:c4:58:96:0a:9a:9d:fd:17:4e:18:eb:
20:6a:da:e3:d0:6c:4d:e0:08:6a:67:59:22:71:72:
f3:4c:ea:1e:35:08:ab:75:2e:a7:0c:3f:47:d1:03:
85:a4:aa:1b:b1:8e:08:75:18:2c:c6:a7:16:df:30:
6a:90:fc:75:27:7c:ee:48:5d:13:86:09:b9:d2:6f:
f9:8f:43:b3:cc:a0:ce:16:20:a6:2f:68:79:10:fa:
04:f5:87:58:25:76:00:10:3d:49:db:9b:25:cd:8e:
2c:8f:15:21:58:6d:d5:7c:a9:73:f6:90:40:99:cd:
f8:6f:41:0c:9e:4e:9c:9f:99:db:22:35:1e:6e:1c:
67:9b:64:43:86:77:fd:18:88:1e:e8:64:d5:b0:d1:
d6:7c:5b:37:71:ab:06:02:3c:dd:85:07:73:e4:33:
37:41:4b:9b:cc:15:c9:7c:36:64:10:73:8e:a1:38:
28:26:f4:38:ab:ec:20:c7:55:16:d6:b8:3e:a6:d3:
71:1a:e4:ce:73:a6:3f:54:c7:ab:6d:75:51:1d:50:
ad:fc:46:37:04:60:a3:f2:9d:27:3c:36:1b:cf:e8:
5e:9a:ce:8f:bd:a2:81:55:9a:5b:3b:e4:97:53:b7:
0b:b8:a6:21:a6:bf:25:40:ed:69:88:83:69:90:87:
74:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E3:22:A8:51:03:5D:9C:8F:0C:14:21:3B:38:DD:9D:0E:11:E5:4C
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:82:da:e5:4b:83:7b:3f:5d:c0:fb:c3:22:10:e6:c4:09:6a:
5a:36:df:4c:eb:38:09:c9:00:34:d9:18:f5:e9:66:58:fd:0c:
6d:0e:33:8f:a8:92:62:3d:9b:c8:d9:4c:44:c4:f9:7b:04:7e:
fd:0e:c9:4b:85:4b:99:e4:c7:f2:bd:92:d6:fb:98:fe:12:55:
86:59:02:1b:11:42:e3:06:50:2a:3d:65:e7:e8:18:b9:bf:f5:
a8:3d:4a:3c:d3:3d:e1:c6:ab:ef:c5:b6:b9:c7:87:75:87:fa:
69:ec:a9:91:24:55:c7:98:bc:69:6f:62:ff:86:d9:7a:31:41:
5e:32:41:a9:c2:f2:25:c5:44:83:e2:f0:12:3e:52:d3:01:5e:
3a:54:bd:95:b0:43:95:06:d0:c7:8f:ee:93:74:c8:ed:cd:0a:
d6:6b:9c:bf:1b:9f:1a:d6:c7:5d:30:26:cb:f4:03:48:ea:d4:
59:91:32:e4:81:6a:8f:92:85:b6:b4:bb:c5:e8:df:dd:e0:6b:
8f:04:0d:dc:02:0e:5f:3a:f1:18:1b:94:62:8c:c3:b6:56:f0:
70:0b:96:30:57:28:c1:27:9c:ef:10:10:92:15:7c:33:80:be:
0c:a5:3e:6f:0b:37:84:13:a0:88:b1:36:7a:2a:13:6a:8a:68:
44:d9:94:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:43:48 2025 by rpki-client