Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
File: tKkPaJZnhEKvruG6qqayot7KzTs.mft (raw, json)
Hash identifier: ICLfwi6kxroNlJ5Kj/xXKOz662pBYGs2m2xZ4Ey5zro=
Subject key identifier: 67:43:2D:E9:1D:90:9F:81:62:89:F0:0A:07:D7:23:FE:31:6C:46:87
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Certificate issuer: /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial: 01988F22BBCE134F57DAC91709AB3E3C856C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
Manifest number: 162A
Signing time: Sat 09 Aug 2025 14:01:14 +0000
Manifest this update: Sat 09 Aug 2025 14:01:14 +0000
Manifest next update: Sun 10 Aug 2025 14:01:14 +0000
Files and hashes: 1: 39ZjK9ko_rOoFQIzT57AAjvsCVs.roa (hash: BIzWpSHIVnRCyLi48qy1GipHxFT8YyuZOYnCzfTHwBQ=)
2: OazFtN4IiCarucNk5wRvdseM_QM.roa (hash: EMG8IwLgN/B9dcK6/rw77xxT/QPgwRqBDKE5biLAPVI=)
3: tKkPaJZnhEKvruG6qqayot7KzTs.crl (hash: z4eZlNemde64K15dnkb0ObbLw8WV+T67NK0LK4fFVXM=)
4: v1Ryzz_N409NzbmRAuen4MQjOWo.roa (hash: nCjeo/lqPblEWttxGqrN/iF+J58uOtYvtP5cDeaC0E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:22:bb:ce:13:4f:57:da:c9:17:09:ab:3e:3c:85:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Validity
Not Before: Aug 9 14:01:14 2025 GMT
Not After : Aug 10 14:01:14 2025 GMT
Subject: CN=67432de91d909f816289f00a07d723fe316c4687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7a:30:c3:9a:20:77:92:dc:c3:fb:26:18:aa:
d6:5b:c5:2f:e2:33:4a:a9:8d:20:78:9f:98:11:8c:
9d:af:f5:59:b2:95:30:d7:1c:ce:78:39:32:1e:35:
d2:73:a7:f8:a5:6d:ff:27:08:bb:33:b2:99:da:10:
82:5c:94:67:4f:a2:d9:fd:6a:38:09:d2:de:4d:9c:
27:db:bd:cb:bb:c6:06:18:df:f6:69:71:e4:cd:4f:
b1:af:ff:da:8d:59:2d:d2:c3:3b:61:32:ac:89:e5:
05:29:be:95:75:c0:43:ab:c0:3d:92:51:ba:b2:eb:
c3:a9:92:51:95:85:2e:62:10:43:6a:bf:f6:a6:49:
8b:56:25:42:d9:1c:98:e0:49:6b:0a:b6:58:d4:7d:
c1:86:2d:b7:4a:87:e3:5e:b4:53:2c:7d:3a:f2:3e:
ad:4e:91:cd:c5:91:ac:43:c3:d8:99:c7:f8:7b:1b:
da:49:28:59:8e:6f:72:61:68:48:bb:0d:62:e2:25:
c2:c7:13:e6:54:26:e0:d0:19:8e:82:f7:00:d7:3b:
e6:72:e3:c7:a5:62:17:fd:fa:5c:ad:15:e3:7f:67:
5c:d7:9a:4a:7d:13:91:52:9a:86:35:a4:e9:dc:35:
e0:2e:d4:1a:03:0d:f8:76:fb:b6:7a:45:c9:37:ea:
a9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:43:2D:E9:1D:90:9F:81:62:89:F0:0A:07:D7:23:FE:31:6C:46:87
X509v3 Authority Key Identifier:
keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e9:96:03:7f:64:86:d0:d1:90:bc:99:4b:93:27:a9:ef:73:
79:fa:27:d8:71:71:07:d5:0d:c8:49:f1:38:54:0c:f3:43:5b:
16:76:a3:e1:6e:b2:9d:18:fc:dc:c4:79:9a:8a:55:fd:62:4d:
c4:71:1d:a5:84:b2:9a:44:89:42:1b:4e:e0:d0:73:f3:56:83:
18:9a:ba:5c:7e:8d:36:b4:78:4e:2d:15:16:02:3c:5e:f0:87:
23:6c:f9:cf:69:4f:4f:05:ba:59:1c:52:eb:14:10:7b:8b:bb:
e5:1e:af:92:4b:24:1d:e4:b4:2b:27:66:45:40:e5:1a:de:b5:
57:6b:d1:08:80:e0:9a:04:ec:0e:4a:a5:37:e7:4a:6d:73:f0:
0f:98:fe:dc:c2:02:64:bc:4b:3c:e4:f6:36:c5:c4:fe:bf:68:
b0:68:cf:6d:ed:1c:68:52:7f:dc:f0:f3:44:13:f8:d5:7c:6b:
6a:0b:49:e3:f2:96:91:21:6d:3f:78:25:03:51:33:f8:36:86:
7e:70:41:34:15:1c:d3:10:52:db:f8:47:1b:9b:30:74:b9:1a:
20:74:7c:e5:28:01:6b:dd:f8:29:4b:8c:7b:be:44:35:21:89:
e9:f0:a4:16:6b:a8:03:79:39:b6:e7:f6:a3:ef:c5:fc:4c:ef:
84:f0:28:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:21:34 2025 by rpki-client