Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
File: tpHQC9tiauVzB9XNTord2UdWgLM.mft (raw, json)
Hash identifier: g7aJJ/01vTVaE0UK+ZTTItkLWGZgUNM/vNocibJv2NA=
Subject key identifier: 5D:49:82:69:93:0B:B7:A7:D0:D1:81:1B:FE:96:57:01:FB:1C:45:37
Authority key identifier: B6:91:D0:0B:DB:62:6A:E5:73:07:D5:CD:4E:8A:DD:D9:47:56:80:B3
Certificate issuer: /CN=b691d00bdb626ae57307d5cd4e8addd9475680b3
Certificate serial: 0198D54E3D5C1846886425A1427B63152629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
Manifest number: 0F1D
Signing time: Sat 23 Aug 2025 05:02:11 +0000
Manifest this update: Sat 23 Aug 2025 05:02:11 +0000
Manifest next update: Sun 24 Aug 2025 05:02:11 +0000
Files and hashes: 1: AQvnwjdpCCJVGghqg0nwe9L0mVk.roa (hash: lmMkrxQHgFH9/tCkdiNxxBNSfZZ+AeKUjyZG6YnOW/4=)
2: tpHQC9tiauVzB9XNTord2UdWgLM.crl (hash: 6rfdKWRQf3P0SsBxmfPH4ZtLuTtUx7+MwxlMMSklJwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:3d:5c:18:46:88:64:25:a1:42:7b:63:15:26:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b691d00bdb626ae57307d5cd4e8addd9475680b3
Validity
Not Before: Aug 23 05:02:11 2025 GMT
Not After : Aug 24 05:02:11 2025 GMT
Subject: CN=5d498269930bb7a7d0d1811bfe965701fb1c4537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9b:ab:ed:76:f8:cf:eb:8d:b1:cb:f7:d0:57:
18:cc:38:8d:bc:8e:19:2a:34:bb:1d:51:96:ef:4e:
e9:0a:5a:ef:95:18:6d:56:03:5b:45:1c:79:9d:54:
9a:51:02:57:45:1b:04:96:36:4e:2d:b2:94:dd:8b:
f3:4f:17:e4:01:8f:18:94:e5:de:2a:60:b6:87:d0:
0b:18:c9:0c:9d:7b:bf:29:26:9d:3e:a9:e9:67:f3:
94:ad:8e:d6:7d:92:5a:fe:d9:0c:26:c0:be:13:25:
8e:81:ed:85:28:20:aa:f5:ae:b3:5e:02:0a:70:da:
92:36:58:df:1d:c8:e4:4d:cb:50:e5:91:f6:e9:07:
e8:49:c5:e1:02:a3:29:b7:f7:8d:90:7e:7d:37:6e:
c7:19:52:b4:70:05:c0:6b:5b:cd:7c:af:52:d6:87:
a7:b6:04:cd:34:66:a2:5f:cc:1e:65:f9:ab:96:0e:
56:5a:e7:bf:93:75:e8:e7:52:7e:da:c9:5d:83:dc:
6e:e0:c4:8f:b6:a5:b4:19:97:27:25:95:3b:92:b2:
21:3b:48:4c:e5:e2:ae:8f:63:8c:99:c1:29:fd:08:
9c:59:42:ac:ce:de:8b:61:12:17:c5:81:56:e7:e2:
64:b3:1d:c5:ca:ed:5a:0c:77:e4:b3:39:86:20:ca:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:49:82:69:93:0B:B7:A7:D0:D1:81:1B:FE:96:57:01:FB:1C:45:37
X509v3 Authority Key Identifier:
keyid:B6:91:D0:0B:DB:62:6A:E5:73:07:D5:CD:4E:8A:DD:D9:47:56:80:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d2:69:ba:d5:16:b2:44:21:e2:d2:44:7b:b5:65:ca:a6:1d:
b4:6a:82:e8:de:79:5b:98:b9:b5:ba:b0:f7:1e:06:ee:eb:e2:
2c:ee:d7:b8:46:31:c7:3d:52:81:e3:4a:bf:29:0a:1e:71:6a:
1c:8e:8d:87:97:ca:c4:00:46:8c:e1:4b:49:84:52:78:b6:5e:
c5:36:0c:8a:30:53:d7:70:fe:df:3c:60:d9:03:a1:d4:69:5e:
11:50:79:ba:aa:df:b9:11:c2:77:2b:9e:b6:a8:9b:6d:bd:72:
a1:0c:ba:d9:72:7a:1b:54:7b:c6:73:b5:42:f7:a3:81:80:c4:
a8:bf:cd:36:40:0f:d9:b8:f2:da:e7:0c:c8:80:a8:40:0d:76:
04:7c:b7:3b:2e:bb:77:69:98:28:dd:35:2a:43:ef:85:c7:e8:
61:33:bf:4d:a2:7c:92:97:c5:a5:e7:89:22:44:94:ac:dc:3c:
1f:a0:03:cc:11:c4:b3:12:04:25:b3:74:88:9f:8c:07:96:50:
40:9c:76:62:26:a3:81:e0:7f:19:c0:c0:f2:9c:38:13:5d:a8:
61:ba:62:71:0a:77:77:e8:60:cf:c8:94:bc:d3:e4:cf:b0:37:
33:97:da:cc:3b:7a:bc:d7:07:a0:00:a5:fa:4d:15:dd:53:f9:
97:54:59:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:11 2025 by rpki-client