Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.mft
File: tmlTqin4JZqgLBImpGzgnt1Fzp0.mft (raw, json)
Hash identifier: QVQesBIl7c0QjACNv8JuJqbW/fBd920+lPXBUehtdZE=
Subject key identifier: B5:65:95:8F:6E:A3:11:EF:1D:63:BC:82:84:1D:63:A1:02:82:4A:3F
Authority key identifier: B6:69:53:AA:29:F8:25:9A:A0:2C:12:26:A4:6C:E0:9E:DD:45:CE:9D
Certificate issuer: /CN=b66953aa29f8259aa02c1226a46ce09edd45ce9d
Certificate serial: 0198A04D135A1501ACC931F6FCB387885552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmlTqin4JZqgLBImpGzgnt1Fzp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.mft
Manifest number: E3
Signing time: Tue 12 Aug 2025 22:01:02 +0000
Manifest this update: Tue 12 Aug 2025 22:01:02 +0000
Manifest next update: Wed 13 Aug 2025 22:01:02 +0000
Files and hashes: 1: pqvRnrkHquypsw02knASEmaM8CA.roa (hash: iRr4/5L2X3HFedqB9qSGokTGPgu0NihU0rX3BfoQgdM=)
2: tmlTqin4JZqgLBImpGzgnt1Fzp0.crl (hash: 6N7VjZmtoqxT9cHNxsa4Yux+7UQ8+eU8uk2AqIIO1lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmlTqin4JZqgLBImpGzgnt1Fzp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:13:5a:15:01:ac:c9:31:f6:fc:b3:87:88:55:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66953aa29f8259aa02c1226a46ce09edd45ce9d
Validity
Not Before: Aug 12 22:01:02 2025 GMT
Not After : Aug 13 22:01:02 2025 GMT
Subject: CN=b565958f6ea311ef1d63bc82841d63a102824a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bf:e2:4f:cd:2c:49:d1:67:17:a5:ff:c9:72:
9e:c4:04:0a:9f:61:be:1f:7f:57:2a:4a:e0:cc:ce:
7f:f9:48:e5:bf:97:f8:89:0d:2f:cc:5a:7b:06:40:
e5:b5:65:7b:15:0b:9f:f6:df:37:2e:f4:3e:31:31:
70:57:cc:90:ab:06:26:ed:f8:98:08:c0:1c:a5:04:
c1:aa:44:b1:05:26:01:e5:7e:f3:34:e4:9c:54:6c:
5d:6e:c1:79:63:88:81:d3:20:8a:46:72:db:97:f0:
ea:fd:f9:f6:fa:8c:89:37:ad:a7:97:fd:40:79:ed:
eb:7d:af:4b:56:23:31:5d:b5:5f:34:28:ea:30:dd:
bf:d1:c1:01:02:a8:0a:41:4e:3b:e8:62:a9:1f:bb:
be:eb:25:f5:d6:cb:47:58:a9:5b:a9:ec:7d:9f:20:
01:ad:78:ee:41:76:bb:fd:a4:c6:ce:f3:68:6d:05:
52:1b:52:d1:35:f6:5d:bf:42:e9:5d:71:d2:f8:30:
cb:d7:f7:64:c9:b4:7a:fb:35:5d:5d:4f:cc:d7:29:
b0:20:09:96:19:49:26:64:9b:33:6b:fe:91:df:e3:
6d:93:80:f6:d9:c3:0e:96:9f:d0:93:2b:50:90:bc:
55:1c:65:75:38:09:5b:9f:f6:4e:4c:23:73:f1:6f:
40:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:65:95:8F:6E:A3:11:EF:1D:63:BC:82:84:1D:63:A1:02:82:4A:3F
X509v3 Authority Key Identifier:
keyid:B6:69:53:AA:29:F8:25:9A:A0:2C:12:26:A4:6C:E0:9E:DD:45:CE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmlTqin4JZqgLBImpGzgnt1Fzp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:1b:81:05:94:f8:39:ad:34:17:43:e8:c1:de:06:a6:d3:36:
3d:9f:9d:57:c3:27:cc:63:ec:48:0b:a8:ff:7b:1f:66:85:61:
25:ce:fe:78:37:53:12:7c:13:4f:92:f4:39:7b:7e:dd:a0:9f:
15:ba:7a:55:34:30:87:ae:b5:6a:13:42:55:f5:7b:e6:dc:bd:
15:84:5f:52:e3:49:04:b6:15:7e:45:f4:af:d9:ab:8b:4e:69:
76:32:e3:74:44:32:32:29:35:d5:cb:81:18:fc:2e:07:f6:72:
0e:c3:27:8f:b4:f5:87:8a:a8:f9:54:61:95:cf:0e:11:64:cb:
29:c6:e6:8b:18:eb:36:2c:17:3a:6d:e8:8a:a9:7d:32:93:95:
b9:2f:53:c9:17:9b:64:f7:17:e7:ff:ea:64:58:ce:4e:43:fc:
11:b2:52:d7:73:ad:2b:7e:48:ad:4e:58:55:cf:ff:3d:4b:db:
ac:3b:a5:ed:97:44:fc:6d:18:28:ce:b3:82:38:8d:0f:55:61:
92:de:1f:23:3b:15:0d:0a:7d:75:78:fb:1c:c8:77:28:95:ba:
31:b2:4a:a1:d8:bf:76:85:90:fa:f4:c3:8a:e5:c0:d8:b3:9c:
c4:ea:e2:1c:93:44:aa:3a:f1:2a:ff:33:8c:d0:76:c1:e0:2d:
31:4e:34:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:47:27 2025 by rpki-client