Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
File: TjbM4hQsoYtQWJcVjSblg50rQX8.mft (raw, json)
Hash identifier: 1PRbsNXMusFd0Iieu2Y9AVS/cwasSjVIWhe/AAuq+Iw=
Subject key identifier: DF:D2:50:53:26:42:A7:5F:7C:9E:7E:CC:10:D6:41:6E:C4:63:E3:1F
Authority key identifier: 4E:36:CC:E2:14:2C:A1:8B:50:58:97:15:8D:26:E5:83:9D:2B:41:7F
Certificate issuer: /CN=4e36cce2142ca18b505897158d26e5839d2b417f
Certificate serial: 0198D660CD227E26A432FF81571DBAFA32A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:02:04 +0000
Manifest this update: Sat 23 Aug 2025 10:02:04 +0000
Manifest next update: Sun 24 Aug 2025 10:02:04 +0000
Files and hashes: 1: TjbM4hQsoYtQWJcVjSblg50rQX8.crl (hash: B2V0pk5TtWro4GBzIeyLWTFID1yIB/Ec0ZbsNZ6v7pM=)
2: XbP44H3vmNpq_6C_0jvpv9umOf0.roa (hash: DcrY51YDFwazT333yz0LqnUGv8gSeHfRdQ2uMNMEV+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:cd:22:7e:26:a4:32:ff:81:57:1d:ba:fa:32:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e36cce2142ca18b505897158d26e5839d2b417f
Validity
Not Before: Aug 23 10:02:04 2025 GMT
Not After : Aug 24 10:02:04 2025 GMT
Subject: CN=dfd250532642a75f7c9e7ecc10d6416ec463e31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9c:91:54:0d:e4:67:b7:a8:74:52:f9:80:5f:
aa:37:87:ee:0c:f6:88:0a:f7:81:b5:b6:a0:d5:2e:
b5:a5:f1:a9:80:f1:6e:4c:72:c9:57:58:46:9b:44:
44:08:63:af:20:b8:fd:3e:1c:a2:e3:34:30:4e:33:
18:d9:c0:0a:be:ee:82:92:87:97:0a:7e:5e:8d:18:
a9:7c:8c:43:7a:e2:c4:17:b1:eb:7c:61:32:93:62:
3f:d9:fb:ca:02:6e:8a:46:6b:72:bd:7c:10:a5:5a:
77:96:13:56:92:5f:1c:ac:0a:98:3c:9b:d8:3d:b8:
6d:9f:d3:37:80:bf:ad:44:fb:27:6c:14:98:68:f8:
d3:42:d1:42:18:a4:09:4b:28:ac:14:ca:fa:35:81:
19:c8:46:28:69:be:1b:82:8d:1f:19:fa:0b:59:6d:
22:e6:55:3f:21:b6:af:00:d6:9b:05:a2:05:5e:3c:
37:20:66:5d:5d:43:94:c6:b7:ac:1d:70:13:51:30:
4e:fd:5e:8a:54:de:22:d5:05:30:50:38:6c:71:0c:
11:e3:dd:f1:e7:38:e4:c8:ed:02:0f:a9:49:24:ca:
cc:91:bf:42:38:8e:63:78:ee:de:4f:12:72:91:cb:
28:6c:1b:0f:a0:0d:8e:f5:b2:06:36:3d:c5:3e:3a:
83:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D2:50:53:26:42:A7:5F:7C:9E:7E:CC:10:D6:41:6E:C4:63:E3:1F
X509v3 Authority Key Identifier:
keyid:4E:36:CC:E2:14:2C:A1:8B:50:58:97:15:8D:26:E5:83:9D:2B:41:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5e:eb:b2:f8:fc:70:78:45:98:ce:72:e8:fa:48:d3:5a:3e:
6f:a7:0b:c7:5c:05:4e:4b:07:fc:0d:5c:48:d5:57:04:55:f1:
5e:f9:b8:5b:6c:96:b0:fe:45:cb:32:41:74:e4:bb:6b:2c:b6:
48:3d:a1:27:37:0a:40:e4:f5:bf:e8:31:bc:0d:26:e0:8b:67:
e0:e6:e8:46:00:44:4f:7b:7d:d5:86:8b:3c:de:34:4a:a2:9f:
27:86:a5:f7:a4:a0:3b:5c:4a:49:76:6a:5b:53:e9:12:2f:69:
7c:e1:03:6e:c5:5d:f7:93:2b:1b:ae:cd:b0:bc:dc:44:c0:05:
44:c0:0d:0c:0a:6d:73:fe:d5:6b:2f:6b:7f:ac:df:fe:03:6f:
98:b4:99:9c:93:99:5e:86:03:a2:76:28:99:8d:2c:1f:88:4e:
76:76:a1:c4:87:59:60:41:ce:76:70:e3:0c:38:ab:0d:33:fa:
9c:9c:aa:6c:5f:4f:b8:1f:08:37:e7:f4:59:68:53:a5:dc:54:
27:eb:4a:a8:34:e0:2e:d8:9f:21:e6:7b:d0:ae:ce:0d:6a:50:
08:b7:86:17:95:fa:d1:5a:46:81:ca:19:5e:77:a6:df:7f:60:
c5:1c:4f:d9:c8:bc:f4:04:e2:e5:23:51:75:7b:76:f1:96:cc:
79:1c:58:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:31:06 2025 by rpki-client