Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
File: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft (raw, json)
Hash identifier: f79st+82pwy1+ghwnRY6pOJDlV95fcg5qWYGJSygS3E=
Subject key identifier: 22:84:32:C3:B8:53:70:75:7E:05:81:AC:98:81:E3:EA:CE:51:12:E7
Authority key identifier: B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
Certificate issuer: /CN=b48184549e12e9934bffb7615bca3d0c25681360
Certificate serial: 01988C580161DBA35943A5269B71028A61DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 01:00:34 +0000
Manifest this update: Sat 09 Aug 2025 01:00:34 +0000
Manifest next update: Sun 10 Aug 2025 01:00:34 +0000
Files and hashes: 1: Pmrx9HZexDjQdROL1xOD1S-BjzQ.roa (hash: aBRM8zJUU2ZF0wAF5h20OpU3VGQ3W++oIRE8v06cZXM=)
2: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl (hash: fFYrTkgSZ3LAfBhib6xIfextumBW0Ek72jZo0cCy/qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:01:61:db:a3:59:43:a5:26:9b:71:02:8a:61:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48184549e12e9934bffb7615bca3d0c25681360
Validity
Not Before: Aug 9 01:00:34 2025 GMT
Not After : Aug 10 01:00:34 2025 GMT
Subject: CN=228432c3b85370757e0581ac9881e3eace5112e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b7:35:7b:93:79:bb:97:df:aa:62:c1:32:7e:
f3:3e:cb:d7:dd:bc:a4:a0:a0:70:52:e3:ec:31:d6:
05:e9:f3:d5:1e:97:0a:36:c0:12:b2:a8:b6:25:ed:
23:0e:29:d8:e7:16:78:b8:38:b4:fc:a5:39:45:64:
16:aa:2d:d4:57:24:fa:5c:a6:48:5f:ab:7c:6e:5f:
be:6c:c4:08:c9:27:6b:1d:cc:d1:fa:da:21:b9:4b:
5b:2a:3c:05:ce:74:62:64:76:d0:98:ef:e5:c7:3f:
54:11:ab:5a:d6:18:7f:ff:2d:a5:a9:d2:fc:90:98:
14:cb:9a:82:b3:e7:86:fb:c6:59:8c:cc:c2:3f:92:
d8:18:fa:58:13:da:38:ac:88:cf:6b:d7:60:dc:c3:
80:de:3b:51:bd:6e:e6:95:a0:c6:88:21:0d:a2:ba:
65:85:aa:71:34:2e:3e:8a:2c:db:5c:4e:d8:80:a3:
45:80:29:c9:70:6a:10:37:f8:31:21:c9:79:2e:b5:
63:ea:4a:ac:e5:93:c4:17:01:21:d7:f4:9b:6a:4d:
85:e1:6b:74:e3:db:7e:64:1c:9f:24:be:22:72:dc:
e2:68:99:af:6f:78:b5:15:df:33:05:42:14:01:14:
d3:a6:41:df:38:84:86:d0:07:bf:96:fe:3c:40:1f:
18:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:84:32:C3:B8:53:70:75:7E:05:81:AC:98:81:E3:EA:CE:51:12:E7
X509v3 Authority Key Identifier:
keyid:B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4b:03:a1:42:97:d7:46:80:70:98:53:56:e3:ae:a2:a8:01:
0d:11:ac:b1:d2:fe:e6:2b:4a:76:f1:67:29:4d:69:74:85:35:
90:f1:9c:fa:16:41:39:08:0f:a5:b3:82:8f:cc:e2:5a:aa:95:
0c:f1:04:59:a9:1d:a4:92:ac:29:e4:63:5d:00:31:5a:4b:77:
95:25:f5:72:98:08:d3:66:61:88:d9:a7:a6:39:b6:98:ac:70:
1c:57:cf:4c:1b:62:44:f6:d0:0f:2a:86:56:f0:46:a8:ee:62:
b8:2e:31:41:e0:d9:1c:b9:33:40:12:b5:1a:cf:be:d1:cf:28:
21:8b:ee:e7:f3:0d:89:79:65:55:5c:f9:42:fc:46:36:a0:fa:
60:08:99:2f:16:77:ab:84:f0:22:1d:32:66:07:30:b4:04:14:
f4:44:bc:71:95:f7:2d:17:bf:21:76:ec:c4:33:57:40:43:37:
36:2f:d9:32:4e:3b:35:e1:91:4c:c2:63:4a:10:f6:c5:92:5c:
eb:d9:4d:72:14:91:94:1c:de:23:3b:5e:a6:d3:13:5e:3b:3b:
31:56:c8:dd:9d:91:96:c6:0b:69:49:46:08:a8:9f:f8:14:d6:
a0:f4:ea:0d:ea:08:93:7d:1f:97:6d:91:08:42:8d:92:84:ca:
aa:c6:e0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:37:58 2025 by rpki-client