Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
File: TdL8TSP9nCQgxASRhxgI7FQkpnA.mft (raw, json)
Hash identifier: YiVAXsK1CVxUbHvXXvAYhiKpqLsdEn4M/DJQTzKVsDw=
Subject key identifier: B3:F1:B1:C2:5E:B5:71:9C:C4:18:6B:3F:F1:20:9D:33:9D:38:AF:2B
Authority key identifier: 4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70
Certificate issuer: /CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
Certificate serial: 019872CFBC020705AD102EBF59221218681E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 02:01:13 +0000
Manifest this update: Mon 04 Aug 2025 02:01:13 +0000
Manifest next update: Tue 05 Aug 2025 02:01:13 +0000
Files and hashes: 1: 6PYHTPLOKPA_a6iVYvGQByWG7yU.roa (hash: w5WzWtoII8U9oezorMTaJGrRrTvsQaItUP16lTCSY7s=)
2: TdL8TSP9nCQgxASRhxgI7FQkpnA.crl (hash: iYHENtvvTpjCDZgiJy5T/W1GWPl4N8dAGgnD0vaeH5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:bc:02:07:05:ad:10:2e:bf:59:22:12:18:68:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
Validity
Not Before: Aug 4 02:01:13 2025 GMT
Not After : Aug 5 02:01:13 2025 GMT
Subject: CN=b3f1b1c25eb5719cc4186b3ff1209d339d38af2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:57:cc:76:9e:3f:b4:40:1e:14:78:f2:64:03:
21:b5:b0:99:93:42:f6:3e:47:9a:bd:ec:00:1a:05:
bd:8f:d5:57:12:23:e3:6d:b4:0b:62:a9:0a:6c:a2:
10:8b:75:6b:f6:f9:9a:75:6f:38:b3:54:cb:2a:e4:
08:3f:4f:c4:ec:30:e5:ed:18:d2:f9:65:cf:52:7b:
f4:83:56:81:df:af:4d:1e:a7:83:f9:b2:fe:ee:c0:
1a:b5:6e:c6:fd:4c:6c:d1:3f:39:79:76:cb:30:55:
61:ff:3e:a7:ef:55:1a:da:01:d5:77:82:e6:d0:83:
1c:82:a1:d8:7d:ac:00:0d:6b:24:4b:ab:55:1e:1d:
0d:be:ae:8d:78:ac:72:5c:4a:1c:41:a2:72:06:16:
65:10:02:8e:3d:7b:00:a8:09:b5:f8:61:ae:b2:8d:
11:65:db:22:af:e9:b3:6b:53:8b:53:f4:f5:26:d9:
78:b1:9f:fd:99:d0:06:f9:bb:9a:ff:89:5b:bd:b7:
37:5e:2e:bb:a5:26:a7:67:35:64:ed:94:72:c9:38:
d9:aa:72:30:36:39:c2:d4:a7:1e:d3:39:45:eb:cc:
6e:cc:2f:b0:b4:60:38:51:8c:1f:2f:e1:cc:37:bb:
5e:50:64:5a:56:d4:f4:93:7d:d4:72:11:2d:05:38:
eb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F1:B1:C2:5E:B5:71:9C:C4:18:6B:3F:F1:20:9D:33:9D:38:AF:2B
X509v3 Authority Key Identifier:
keyid:4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ca:63:3c:c2:44:23:db:a1:59:50:dd:58:e3:45:df:36:76:
ed:b3:a5:56:86:aa:a1:9e:6d:7d:01:bc:f0:42:95:a3:a4:55:
8c:54:dd:2b:8b:a1:38:12:7a:5a:26:34:c4:c1:5d:c7:6b:cc:
2e:3d:f1:f8:87:ec:f3:17:5e:d2:56:51:4b:9e:af:95:fc:6e:
a5:fb:f2:29:d0:b3:87:1c:0f:31:f2:08:e7:2c:24:89:86:ba:
68:5e:6a:b4:e0:43:5f:e0:a1:63:c4:0b:93:93:85:48:5a:90:
99:3d:33:1f:f5:d0:b1:61:b8:da:00:84:35:2d:cd:92:82:c8:
59:0b:f3:2d:42:01:08:b6:96:ba:69:71:b6:7a:9e:16:4b:4b:
4c:ee:a2:69:cd:06:6a:f5:93:6f:a1:46:6a:f9:bc:ee:82:a0:
c2:5c:f8:22:1e:a9:2e:2f:15:2d:d8:92:0d:59:23:ac:dc:06:
1f:b9:2e:bd:46:9b:63:2b:e5:79:e1:37:96:0b:49:31:ed:4d:
90:3f:3a:54:8f:2c:be:f3:5d:c9:f6:b6:3c:93:47:94:7c:2e:
d1:8a:35:41:29:0e:fd:ab:2f:d8:93:96:fb:7a:b9:83:42:a8:
2b:20:e1:37:f8:87:c8:ef:cb:f8:19:52:db:e6:7e:f6:1a:27:
46:d1:41:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:40 2025 by rpki-client