Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
File: tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft (raw, json)
Hash identifier: 6VL6GQWedVg5fjg7UkOfh43CoaKzwhWB3GPZVte6mzo=
Subject key identifier: 70:43:39:AD:85:3C:28:E2:98:C8:73:B5:56:3A:A9:FE:42:8A:C2:4B
Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
Certificate issuer: /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Certificate serial: 0198D4E04A8C01274CAC9C4470CD33BDBD1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
Manifest number: 10A8
Signing time: Sat 23 Aug 2025 03:02:05 +0000
Manifest this update: Sat 23 Aug 2025 03:02:05 +0000
Manifest next update: Sun 24 Aug 2025 03:02:05 +0000
Files and hashes: 1: Tm8yT_3vBgLrxw1Lr4A3GN1Cjk4.roa (hash: cpwfuPoZQp9+xwJvstUEZKWWh0LDOj40EbCeSJBVSfw=)
2: tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl (hash: SOKMELSLhY6rb7E9JbM+08Un77Xq/FgCUf4whkO/28c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:4a:8c:01:27:4c:ac:9c:44:70:cd:33:bd:bd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Validity
Not Before: Aug 23 03:02:05 2025 GMT
Not After : Aug 24 03:02:05 2025 GMT
Subject: CN=704339ad853c28e298c873b5563aa9fe428ac24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:9a:39:02:c1:d1:09:6a:77:35:87:5a:de:
7f:90:81:9a:ad:66:5b:7a:7a:4b:04:28:00:c8:ec:
14:07:48:4e:70:f7:b8:b7:cf:86:6d:c7:c4:f9:dd:
e0:b5:f1:ff:71:1a:3c:9d:b7:ca:29:2b:2a:4b:01:
51:51:7a:a7:3f:5c:d2:0e:da:f0:11:96:02:d0:86:
46:8c:53:ca:5d:f4:69:e8:e4:b7:6c:3d:a9:3f:58:
7e:75:56:57:82:94:40:19:c0:eb:33:0d:94:55:94:
67:fb:e3:e6:39:fa:ca:8c:a5:08:6d:31:b9:b1:67:
00:2d:da:a7:48:5a:1d:71:0d:67:13:10:8a:5e:72:
72:80:6d:d1:c6:31:33:43:8b:95:e5:d4:d7:69:fa:
e0:d7:dc:90:3c:45:2a:bd:95:71:5c:89:90:45:88:
2f:70:c9:26:e2:a1:94:d3:3e:b4:83:10:c7:d5:a2:
e6:8e:b8:dc:5b:a5:a1:b4:17:bf:56:ff:5e:b1:d4:
57:23:43:4b:25:0d:c3:ce:6b:f7:67:71:ae:0c:df:
6e:71:d6:ce:b6:d0:0e:d5:8d:42:98:c0:f0:80:fb:
d1:70:f2:cd:0a:16:43:43:2e:e9:db:da:90:3e:eb:
a3:99:65:82:96:e5:28:4a:d5:e5:b9:b9:eb:6d:ff:
5c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:43:39:AD:85:3C:28:E2:98:C8:73:B5:56:3A:A9:FE:42:8A:C2:4B
X509v3 Authority Key Identifier:
keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:89:9d:b1:09:7a:e5:29:1a:79:ff:31:e1:27:d1:1a:ca:66:
09:78:9e:e0:4b:a1:5c:de:6e:c1:13:fe:37:b0:6d:f9:61:3e:
61:d6:18:69:10:58:95:72:ba:82:a6:f7:89:d8:86:b3:30:25:
7e:da:a6:94:ca:2c:e3:d8:4e:b8:cf:fb:b3:74:29:b5:fe:8f:
58:d9:78:f1:e4:a0:c2:cc:95:1c:ff:22:a8:70:88:04:22:59:
68:96:7d:1a:2a:ef:27:90:eb:ea:52:70:9e:ca:a6:5e:dd:01:
92:d9:7c:6e:4e:f9:04:d7:fb:a1:5d:c7:92:88:81:2f:84:23:
7a:02:3f:00:b0:7c:cf:ce:c4:e1:41:fe:0f:6b:35:fb:c6:27:
5c:3c:63:74:8b:c5:90:49:db:b9:4e:c8:87:80:a6:c7:95:44:
8a:6c:19:c6:1f:13:08:e7:f1:e9:ee:ea:a6:38:85:4c:a4:32:
51:09:9e:fd:49:c3:ac:d4:f3:fe:2e:77:2c:f8:40:74:01:eb:
17:e7:cd:8d:7c:02:ff:97:57:d8:c8:57:dd:fe:96:8f:ec:99:
b4:f0:90:3e:fc:c4:82:6f:96:4c:c6:95:e9:f6:d7:9e:3a:d0:
f5:48:5b:b3:72:7f:b5:5f:2f:9d:e5:79:9c:d3:12:e7:7f:18:
9a:ef:45:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:39 2025 by rpki-client