Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
File: t2lbmOCKN4vw3JRNLxpgofaVSYE.mft (raw, json)
Hash identifier: /QRMUWdI1hUeQjeQm9AFLYCg7pt1Rk3RLrj5OVAKq6Y=
Subject key identifier: B9:AD:32:69:D0:DB:EF:21:06:4B:48:55:10:DF:27:CA:33:F1:3E:23
Authority key identifier: B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
Certificate issuer: /CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Certificate serial: 01987C777A56AB1540AA4935DAE42E100ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 23:01:01 +0000
Manifest this update: Tue 05 Aug 2025 23:01:01 +0000
Manifest next update: Wed 06 Aug 2025 23:01:01 +0000
Files and hashes: 1: RqpmvtEuocHrmP7Ze69kHKJjV2o.roa (hash: VpfnBez6Qe55xKI1hHxTR48bK27mTUWeo89TggdAg0Q=)
2: t2lbmOCKN4vw3JRNLxpgofaVSYE.crl (hash: c/+mj/CMxdplsVeGx+T01c085z50OodyPP1cnxu6nQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:7a:56:ab:15:40:aa:49:35:da:e4:2e:10:0a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Validity
Not Before: Aug 5 23:01:01 2025 GMT
Not After : Aug 6 23:01:01 2025 GMT
Subject: CN=b9ad3269d0dbef21064b485510df27ca33f13e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:d6:67:77:21:f0:68:42:b7:90:be:3e:ca:
c9:31:71:2d:44:9b:26:bf:5f:3c:14:71:ae:6b:c6:
e4:fe:a4:08:28:f1:36:92:f2:8f:c3:89:91:31:61:
9b:5b:90:86:47:4c:f0:73:40:bd:6a:1d:a8:fa:a4:
ca:ee:66:39:ca:85:7f:fa:7a:c0:56:d7:9b:1f:20:
df:66:65:d0:02:07:c5:34:c0:36:35:e8:18:98:47:
42:f9:23:61:b2:69:20:12:bf:bc:7d:c2:cf:09:4a:
a6:b5:b6:18:5d:58:a3:6d:9c:ce:73:62:d7:75:7f:
0f:73:55:45:3b:87:3c:1c:4c:ce:76:92:e2:b8:3b:
11:12:8b:de:5f:88:f7:70:94:b3:bf:bb:72:cb:ae:
63:9f:ed:92:67:a7:c0:d6:66:26:8c:8a:9a:4f:f0:
3f:9f:d0:39:7d:b4:f7:00:7f:c9:70:a4:46:da:e1:
16:9a:36:94:b3:70:c9:9a:26:8a:52:dd:b2:e4:ed:
fa:64:bf:ef:c4:47:26:eb:5a:b3:33:42:3b:1c:13:
3c:85:84:96:e4:48:4d:80:ce:81:b9:eb:d1:b9:21:
2e:2b:39:4d:2e:08:76:f5:61:55:c4:94:13:68:44:
92:dc:9b:b5:1f:43:48:40:c8:39:b8:d2:99:a3:41:
6c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AD:32:69:D0:DB:EF:21:06:4B:48:55:10:DF:27:CA:33:F1:3E:23
X509v3 Authority Key Identifier:
keyid:B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:28:0b:bc:49:a9:4c:d7:84:50:8b:e6:13:75:05:85:34:1d:
51:59:90:9d:14:84:42:59:d7:cf:e1:c7:e3:67:5e:fe:e3:f8:
3a:23:f6:f5:0a:29:96:d2:c4:f4:eb:3f:a5:3c:df:42:34:9b:
35:f4:21:1c:68:f2:2f:79:f6:6b:50:f1:fb:0f:2d:74:57:e8:
58:98:8c:78:26:3c:7f:28:a8:b3:88:ab:f4:f7:dc:09:c9:dd:
6a:96:ed:6d:6e:70:28:e6:35:24:d6:7e:fe:29:be:50:01:15:
97:5c:df:97:aa:1a:c7:69:b0:90:74:0a:5e:2a:b3:a7:e8:6f:
23:1f:94:1c:48:f8:af:8a:f2:ee:80:31:13:b5:60:ec:e1:87:
b8:8a:28:bd:a9:3d:c7:dd:57:28:f2:d7:cc:ee:d2:02:c7:f2:
12:cd:c1:3b:ef:ea:b1:0d:36:79:c8:22:77:a2:de:4f:48:33:
70:d1:2e:b7:cc:cc:a1:5d:b7:19:d1:b1:a2:56:b6:8d:b9:93:
f7:cd:4e:e3:b6:b8:eb:07:3b:3e:67:ac:ca:cf:99:ae:8a:10:
dd:28:1e:92:98:d8:d0:3a:d1:e1:9b:98:36:c5:11:d1:93:39:
ab:17:c4:9e:25:f8:10:a1:5e:08:b1:4d:05:1f:a1:74:ed:59:
08:46:1d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:30:20 2025 by rpki-client