Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
File: tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft (raw, json)
Hash identifier: CWkRT+LCnar3bd7gm1apAeCG+TNhbb/DETUE//+h/Zc=
Subject key identifier: 94:DE:12:92:67:24:5E:A7:11:AE:31:7F:B3:9F:6D:21:DE:85:62:75
Authority key identifier: B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
Certificate issuer: /CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Certificate serial: 01987450A67196ACFBCD1B89F4458A05B427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
Manifest number: 02B5
Signing time: Mon 04 Aug 2025 09:01:39 +0000
Manifest this update: Mon 04 Aug 2025 09:01:39 +0000
Manifest next update: Tue 05 Aug 2025 09:01:39 +0000
Files and hashes: 1: ZmF3lPkl3dsARIFpHN7vz5QHbFs.roa (hash: ukfiioKav9S2J4a6qVoPDRL9RQGgYfvHu1FXDGi1Nzg=)
2: tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl (hash: qbmOAmiCjZrjs2wXV+AfqirUeYO7wGWcem0oqeF6kKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:a6:71:96:ac:fb:cd:1b:89:f4:45:8a:05:b4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
Validity
Not Before: Aug 4 09:01:39 2025 GMT
Not After : Aug 5 09:01:39 2025 GMT
Subject: CN=94de129267245ea711ae317fb39f6d21de856275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:24:24:82:7a:61:e1:fe:f0:72:96:32:bb:
af:31:b3:79:b2:87:09:92:d2:27:c3:d6:03:9f:0f:
7b:22:4c:f1:8e:ad:ef:06:9b:7c:e9:da:96:e8:01:
ac:04:77:dd:3d:2f:73:da:78:56:6f:aa:18:87:5f:
6f:77:c9:ea:0f:06:b0:6b:61:31:14:96:0d:bc:b9:
2d:be:3b:2f:a3:5d:79:cb:d5:fa:9a:d0:ca:d8:e1:
53:86:b1:36:5a:96:16:4f:d0:c8:24:b5:e6:14:10:
ca:99:3e:0f:91:fc:40:2d:03:99:5e:b7:6e:84:07:
5b:f6:a4:4a:93:c6:15:37:04:61:9b:10:67:1c:c6:
46:b6:ba:77:8c:19:d9:e6:1a:d3:5e:c9:a2:e3:43:
82:c3:92:5c:fc:bd:0c:87:0c:84:87:c3:00:78:a7:
ea:21:3c:04:33:82:62:54:d2:fc:70:28:c1:a9:c7:
fc:38:51:c9:80:45:43:42:29:62:dd:af:f7:b8:5e:
5d:2d:16:34:4a:f2:7f:37:59:98:83:db:b6:ca:00:
f1:07:55:58:b9:77:e5:36:91:ea:a4:c2:12:cb:d6:
b6:62:7d:09:10:c7:7c:00:46:6d:43:54:c5:fd:2b:
19:ec:a1:30:9a:a2:65:9b:79:51:68:8b:e7:62:8d:
40:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DE:12:92:67:24:5E:A7:11:AE:31:7F:B3:9F:6D:21:DE:85:62:75
X509v3 Authority Key Identifier:
keyid:B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:74:1d:b2:5e:77:17:4e:b3:ab:75:86:80:5c:4b:f4:81:a8:
19:39:33:f6:21:46:51:5e:ee:f4:41:dc:1b:fb:35:1c:66:80:
01:05:4a:d5:16:4c:04:26:78:2a:e2:4f:d4:57:cb:40:a9:9b:
d8:c2:57:ae:8d:8e:b7:e2:37:70:a6:df:e8:06:ed:00:5b:61:
c7:49:43:a6:ca:fb:65:1e:5b:c9:43:73:7c:d6:ce:a7:83:9b:
ba:71:df:d7:d8:a2:6a:e7:41:df:77:58:11:46:12:37:6b:3e:
6b:46:96:ff:aa:d3:22:72:df:80:0b:ba:04:36:a2:18:9d:9c:
be:3f:ba:7d:5b:e8:95:61:27:c4:56:dc:8c:89:32:80:6f:e1:
7c:19:56:f6:06:60:47:8e:fb:5f:a8:03:d2:f9:db:2e:f7:5a:
0d:66:97:d7:92:07:22:f2:84:60:e8:8d:e9:65:8f:89:80:c7:
17:49:7f:f5:f3:2d:7d:2b:0a:91:26:75:e4:8a:fc:01:75:76:
61:57:e6:66:97:28:ad:d1:9c:95:46:78:ce:90:d0:b8:5a:0a:
07:34:48:9b:d2:f2:66:dc:4a:87:94:31:a1:2c:15:82:d7:fd:
dd:e9:f9:07:3d:71:32:19:94:cf:c6:d9:37:c8:fd:63:0c:67:
21:f7:88:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:52 2025 by rpki-client