Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
File: tm6nNZIhwbd9bMAG97ZwapqQgpk.mft (raw, json)
Hash identifier: iIWjyEHR2d30V3Dj9wr3iz2UhdNH2OpK6Bj4StB2j+Y=
Subject key identifier: BE:F5:96:9C:00:CC:01:E2:61:4F:0C:71:D4:EE:52:F2:C0:E8:84:E4
Authority key identifier: B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
Certificate issuer: /CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Certificate serial: 01987486C8725F2E90A02871ECF6DE799108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
Manifest number: 1626
Signing time: Mon 04 Aug 2025 10:00:46 +0000
Manifest this update: Mon 04 Aug 2025 10:00:46 +0000
Manifest next update: Tue 05 Aug 2025 10:00:46 +0000
Files and hashes: 1: NlYcoSp45z0WrpR3Tl1MptwPpME.roa (hash: sqtBfE3kNCyJie27C2GkG5RDLoXNkpYCfVwwEjHU9tw=)
2: tm6nNZIhwbd9bMAG97ZwapqQgpk.crl (hash: R/1nHrEHDSLwFnK5E7RRgAQWfAfZOaFyZWW7BOPvAEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:c8:72:5f:2e:90:a0:28:71:ec:f6:de:79:91:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Validity
Not Before: Aug 4 10:00:46 2025 GMT
Not After : Aug 5 10:00:46 2025 GMT
Subject: CN=bef5969c00cc01e2614f0c71d4ee52f2c0e884e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f0:a7:1b:2d:69:80:f0:d6:ba:a8:47:a5:b0:
ed:cb:84:d6:c8:1e:4b:0c:35:d9:c1:af:bf:b8:d7:
24:21:82:c1:09:5e:83:3b:a9:87:30:9c:85:e9:f5:
fb:96:53:1c:6d:92:f4:08:ae:cb:32:30:f1:a4:b3:
a0:e6:bf:3e:0b:62:eb:2e:c0:b4:39:ab:87:19:ad:
fc:20:26:df:f6:05:06:cc:89:51:e5:4c:a7:35:2c:
0a:b0:65:62:fe:7c:a6:ef:ce:15:44:9b:d9:72:a7:
d6:6d:6e:69:b3:27:29:50:48:58:b3:d2:2d:c5:e3:
d1:e9:1c:bb:03:9e:10:45:e7:a0:ec:e3:bf:12:17:
88:f5:ab:d9:76:2b:c3:94:52:f7:65:45:b6:ec:80:
aa:c0:80:3d:03:9c:81:43:2a:57:3f:1a:d9:80:cd:
96:9b:7b:7b:e1:2f:ae:e3:19:69:66:e2:91:93:6f:
74:51:65:2a:89:8d:f8:17:df:1a:94:59:03:61:4d:
81:c7:fc:e8:9c:c4:b7:fb:79:3b:59:f0:a7:59:84:
41:94:4d:e9:b8:d0:17:a8:74:0e:0e:ff:fa:93:04:
5b:26:93:50:04:17:1e:00:98:96:91:ac:75:3e:ab:
b5:7c:f5:b9:81:96:b0:09:e5:5d:b5:10:03:72:dd:
d6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F5:96:9C:00:CC:01:E2:61:4F:0C:71:D4:EE:52:F2:C0:E8:84:E4
X509v3 Authority Key Identifier:
keyid:B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f7:5b:a7:f6:24:29:81:e7:fb:af:1f:37:29:15:55:4c:aa:
cc:85:0f:3b:83:38:fe:27:f5:21:8d:1a:65:84:1e:b0:53:0b:
cd:e9:1c:0d:36:c9:55:3b:de:35:79:0f:05:80:28:3c:1d:7e:
54:5c:20:5e:55:0e:86:96:1f:23:b9:f1:78:1d:57:7a:4c:73:
86:5a:72:84:33:15:42:b9:2b:93:26:7f:bb:b4:7d:f9:e8:b5:
4e:7b:a8:5b:ff:b8:04:35:3d:bf:b1:f9:a1:f8:08:97:20:d9:
fa:b8:51:0d:24:e0:80:22:57:22:d5:78:92:a2:7a:02:99:4c:
95:dd:18:4e:fe:f0:58:c3:34:90:12:99:da:b9:c9:d2:b7:f3:
b3:f3:73:ce:96:94:a9:5c:8c:ea:12:3b:2d:d6:b5:ba:91:9e:
1d:57:5e:16:27:6c:aa:99:59:44:4f:04:bf:b3:eb:af:dd:07:
0d:08:3f:c9:83:ee:27:8f:e7:19:c0:27:59:0c:70:cf:5f:cd:
7f:0c:32:c8:22:89:b4:4e:8a:ad:fb:96:a4:c7:f5:9e:f9:4b:
18:7f:91:ee:4a:7d:27:40:b1:81:e6:f1:f0:be:11:33:d8:fe:
8b:ee:49:a3:a6:89:2f:57:7f:24:76:46:67:56:83:da:55:8f:
a8:1a:96:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:38:15 2025 by rpki-client