Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
File: _ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft (raw, json)
Hash identifier: /dF22uH0vDOYYO4oMQHCRNCCvifyUKuPuxUtZChhNec=
Subject key identifier: 4F:99:8C:F6:F6:AA:17:C5:32:4B:60:C2:E7:35:75:55:73:1F:C5:6B
Authority key identifier: FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6
Certificate issuer: /CN=fde72d43f4c82b1146737b116197231830bf65d6
Certificate serial: 01987D8A041EF2762455E3426B1678DF2CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 04:00:53 +0000
Manifest this update: Wed 06 Aug 2025 04:00:53 +0000
Manifest next update: Thu 07 Aug 2025 04:00:53 +0000
Files and hashes: 1: NEbsKu77gYfpibY3_TC8dQH80XA.roa (hash: aeVQJbng3C7RHWncwne+AehQ3FDANQdssqp/Bjc9vag=)
2: _ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl (hash: TLgtVTNE5bFNCWWRdPwwO7Q2A4ok+B+6T63yH5OSgY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:04:1e:f2:76:24:55:e3:42:6b:16:78:df:2c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde72d43f4c82b1146737b116197231830bf65d6
Validity
Not Before: Aug 6 04:00:53 2025 GMT
Not After : Aug 7 04:00:53 2025 GMT
Subject: CN=4f998cf6f6aa17c5324b60c2e7357555731fc56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6d:9d:03:fa:61:52:49:03:85:b1:4a:19:81:
d1:87:17:71:ee:42:a8:52:c3:e7:a7:0f:08:e1:cd:
d9:03:c6:61:72:9d:ca:8f:2e:de:3c:f3:f1:cd:a3:
5b:8a:fa:03:1a:64:7e:0a:5a:aa:5f:92:5f:81:3f:
fd:ae:5b:5e:33:86:f6:7f:da:b3:e9:a6:97:d8:40:
02:02:68:5f:0a:0e:79:65:a8:a4:76:4e:1a:c9:7e:
16:8e:63:fa:5c:7a:07:b8:0c:ee:5b:eb:07:c7:14:
17:07:2c:59:fd:20:af:f2:fc:82:09:39:4f:4b:cb:
d0:6c:d6:42:52:7b:b5:ff:cd:bf:f5:61:05:8c:ca:
d2:1c:4c:40:94:35:5a:32:8a:0c:d5:be:7f:1b:4e:
9e:0d:c6:0f:cd:6f:2d:50:4e:bd:83:5e:ed:47:b8:
06:5d:51:01:fb:0f:e1:74:fc:ff:11:97:d6:ac:78:
16:c6:1c:f5:20:7b:dd:43:19:44:03:09:f3:d8:fa:
d7:b2:cd:46:5e:a8:e2:23:6b:0f:26:60:5d:a2:0b:
3f:0c:75:4e:1f:33:17:16:7c:d7:6b:54:2d:8c:b5:
08:9b:31:1c:1f:52:a1:34:d1:d0:a5:84:32:2d:b3:
37:88:b7:3b:53:94:92:6a:cf:cd:9c:7a:8e:8e:ec:
fb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:99:8C:F6:F6:AA:17:C5:32:4B:60:C2:E7:35:75:55:73:1F:C5:6B
X509v3 Authority Key Identifier:
keyid:FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9e:82:a9:1b:3a:11:27:21:d0:06:df:50:24:d0:58:f6:ae:
b6:55:8c:06:56:01:c3:ce:08:4b:74:28:0b:45:da:a7:45:8a:
21:2a:eb:b4:81:30:3a:af:4e:ea:8c:52:9c:94:9d:19:e5:22:
82:bb:56:7b:9f:a9:7e:25:b7:d1:9c:8a:99:53:b8:07:53:4b:
06:a6:da:0e:6d:dc:29:22:d0:e2:61:06:0d:0b:76:8b:45:06:
96:8c:42:e8:7e:7d:26:38:fd:d2:02:17:43:e8:78:75:17:4c:
0c:be:3a:a8:b6:4a:42:ee:ad:16:3e:56:9b:3f:ea:0a:b8:b2:
9b:cc:5e:f5:64:e6:03:b4:84:c8:13:cd:fe:aa:f2:77:0b:0a:
66:9c:95:8b:d5:46:59:af:6f:4a:95:ca:4e:43:a5:0a:66:e9:
97:57:fc:69:eb:73:bd:2d:09:59:67:be:9e:7b:a3:7a:8c:f4:
35:ce:d4:e2:c8:cd:4b:cb:2e:f1:cf:04:d4:5f:f8:9c:91:a1:
88:d9:87:d5:a4:b2:93:40:e2:06:a4:64:91:31:16:7d:e5:81:
ab:19:92:a2:68:43:78:cd:61:cf:d8:5a:8c:f5:22:4f:ad:9e:
54:87:98:f1:97:c4:d4:8e:0d:28:4f:c1:bd:f7:34:35:9c:c3:
97:69:42:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:22:09 2025 by rpki-client