
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
File: tK4oip3bDvUKKUs8rpY-FHycfck.mft (raw, json)
Hash identifier: Qb2oR8EyJYjCHaxr+6tRj/QToIcSN5MipJG+1MzJqpQ=
Subject key identifier: 22:45:FA:55:9E:20:AE:69:03:FA:5D:5D:84:93:34:3B:1D:9E:ED:0B
Authority key identifier: B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
Certificate issuer: /CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Certificate serial: 019893DAC2F7BB626D6A0390C8FCB12AFFED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
Manifest number: 1626
Signing time: Sun 10 Aug 2025 12:00:44 +0000
Manifest this update: Sun 10 Aug 2025 12:00:44 +0000
Manifest next update: Mon 11 Aug 2025 12:00:44 +0000
Files and hashes: 1: tK4oip3bDvUKKUs8rpY-FHycfck.crl (hash: aSW1bKIWP+cbv7ZwgYZ9PyxENMAi/LX0DB4IRQvpulQ=)
2: u16TB_X_VEL7--qGdSVXn8Zs3wY.roa (hash: m8sRTErDjjsLnDtgYn9w7y6plArnvxsTKmxxZwh54Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:c2:f7:bb:62:6d:6a:03:90:c8:fc:b1:2a:ff:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Validity
Not Before: Aug 10 12:00:44 2025 GMT
Not After : Aug 11 12:00:44 2025 GMT
Subject: CN=2245fa559e20ae6903fa5d5d8493343b1d9eed0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5e:50:73:3c:5d:e6:82:bd:6c:62:17:08:f4:
5c:df:b2:01:c3:40:b5:fc:d4:08:e6:2d:97:05:a0:
82:b7:81:45:07:57:2a:57:6d:e0:10:b2:7e:f8:df:
82:8a:2a:c6:41:82:0d:4e:19:23:fe:44:3c:4b:62:
d1:48:3b:07:dd:fe:05:17:c0:2b:6e:9f:ee:9f:f3:
e7:99:81:cc:9e:c1:4e:bc:73:2e:8d:85:39:1d:3d:
ae:7e:52:f2:6c:1c:01:1f:81:c9:58:ae:b3:4e:7b:
0d:ba:d2:fd:4a:bd:d4:a3:6e:f8:79:f7:c4:d2:70:
06:2d:23:9f:a3:b7:85:7b:b2:29:73:1c:1b:58:f7:
af:0d:92:51:c7:08:5f:17:74:a7:3a:61:67:2b:16:
26:3f:bf:dc:ca:ea:0f:41:b0:b2:15:4a:5a:cb:e1:
6f:46:f0:ae:2a:fc:76:ef:39:90:8c:15:80:29:dd:
15:bc:5f:74:25:8f:56:5b:12:e4:43:0b:49:6c:4c:
59:48:85:7f:86:98:97:1d:dc:69:cc:85:22:1f:aa:
ca:c2:1f:b2:aa:ea:d0:93:bb:8b:3e:a0:11:89:64:
01:2b:34:98:d1:12:d4:37:d8:92:32:67:5d:13:d9:
33:29:d1:8b:2b:6e:09:bf:02:e6:df:75:84:ad:03:
06:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:45:FA:55:9E:20:AE:69:03:FA:5D:5D:84:93:34:3B:1D:9E:ED:0B
X509v3 Authority Key Identifier:
keyid:B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:88:1e:71:77:4a:1d:a8:b8:55:ab:03:57:9e:57:0a:13:c0:
75:76:db:b5:99:87:59:3d:b2:63:33:a2:9e:8b:bb:cf:09:be:
44:24:f9:41:17:5b:69:f8:b3:4e:fd:12:7b:05:9a:83:39:46:
e7:69:61:bc:ce:80:e4:ab:15:a9:ca:74:4d:8e:0e:a1:6d:e3:
0c:b0:88:12:0a:be:2b:07:74:3f:81:4c:c2:a4:8b:96:5b:ac:
2a:74:14:04:72:87:37:76:07:96:c9:2b:dc:41:ab:70:71:71:
de:20:f3:82:69:ec:57:9b:a0:23:57:1b:6d:92:47:52:13:e3:
78:2f:28:4f:c4:98:06:43:54:19:ac:03:e2:f7:4b:4c:39:11:
0e:19:3c:17:b3:ce:f6:14:0e:6c:05:7d:5f:c8:fa:5f:c1:ef:
72:7d:c4:22:63:85:57:16:a0:0b:b2:38:b2:2b:24:96:3c:b0:
a6:1b:0c:ba:77:22:63:d1:b4:c3:c3:e3:6d:85:41:d1:4d:a8:
eb:e8:12:a8:7e:a1:c5:4b:21:9e:30:b3:69:2a:6c:11:37:62:
c4:7c:67:c0:aa:dc:be:a5:0a:6f:b4:f8:1b:5a:c8:f3:b1:68:
57:c9:fa:8b:e9:18:48:f5:f2:11:86:a9:0a:71:fa:ef:84:af:
13:57:a9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:56:06 2025 by rpki-client