Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
File: Tk9mXUbWoqvwUh5csffEUcozeoc.mft (raw, json)
Hash identifier: mvb80il+PnZysHAuZ+2/+n7pGOJqb+H7Zi1wpBynqRY=
Subject key identifier: 63:9C:B5:36:B4:A7:31:28:08:30:20:61:4C:B0:45:53:9A:09:A9:60
Authority key identifier: 4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
Certificate issuer: /CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Certificate serial: 0198D773646CFD0E7BA5DC240857110E7CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
Manifest number: 022C
Signing time: Sat 23 Aug 2025 15:02:00 +0000
Manifest this update: Sat 23 Aug 2025 15:02:00 +0000
Manifest next update: Sun 24 Aug 2025 15:02:00 +0000
Files and hashes: 1: 1KxZYvxri1sxva3r2G7KLnG5z_Y.roa (hash: 9JXmyyV6BbeWSwFTBJAUkp5UHelZgOhj8wsWM2RqVyk=)
2: HrSejbS-39NivWEqBB6_ezmUBgQ.roa (hash: 8T3MTXu6asTJ46RNeuQMt6iMOXHZ2zW1uZEJeSesDDw=)
3: Tk9mXUbWoqvwUh5csffEUcozeoc.crl (hash: 6aaiBa0VjzarLtHngVdNrQvy4dtLfczcYZFtMDMXn1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:64:6c:fd:0e:7b:a5:dc:24:08:57:11:0e:7c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Validity
Not Before: Aug 23 15:02:00 2025 GMT
Not After : Aug 24 15:02:00 2025 GMT
Subject: CN=639cb536b4a73128083020614cb045539a09a960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f7:24:74:55:33:1a:9b:47:78:4d:66:b2:4d:
f7:ce:8b:4d:5a:cb:82:18:46:e6:98:9d:f9:8d:ac:
9e:a6:b5:33:ae:4a:d9:1f:38:c5:2c:f8:d8:09:72:
2a:61:09:fb:d0:15:aa:57:2b:f9:34:fc:ff:1b:f4:
e5:ef:67:e2:3f:1a:29:54:a0:8e:cf:68:82:a3:6f:
95:56:79:21:11:04:80:88:c2:fb:37:3a:1a:89:39:
ed:5b:02:8b:d6:bd:3c:73:16:bf:c2:02:1c:66:4f:
26:ce:58:94:18:87:57:49:36:ac:c4:bf:fe:12:8a:
d8:31:13:59:e6:3b:4f:6d:17:7d:79:11:4a:1a:cd:
60:ea:57:fc:00:ac:7b:58:72:60:77:0b:9d:54:a8:
8f:0e:f8:66:67:d5:04:d2:cc:8c:5b:bc:33:d6:41:
7f:22:1a:df:8f:8a:db:02:0b:c5:fe:88:42:53:8f:
c1:63:bb:f8:7b:86:19:a4:d8:4e:6e:66:64:e1:59:
dd:e9:6f:8d:e6:02:80:a9:a5:05:42:40:8f:27:1e:
50:a0:10:f9:6e:8d:7e:74:db:f1:c4:a9:6e:08:00:
fb:dc:dd:27:b5:d0:48:f8:1d:94:d1:ab:52:2f:a1:
ff:97:de:0b:2a:57:44:bc:21:bc:09:b8:5a:c5:f0:
b4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9C:B5:36:B4:A7:31:28:08:30:20:61:4C:B0:45:53:9A:09:A9:60
X509v3 Authority Key Identifier:
keyid:4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ad:51:f5:b2:35:86:14:1f:61:15:97:46:cb:e1:c7:25:2c:
21:3f:80:33:e1:a4:81:6a:89:7c:bb:c4:2a:01:85:51:06:0e:
bf:6c:e7:91:44:41:fc:7f:f1:a2:0a:4e:9c:f8:fc:a8:f9:1d:
b3:68:c0:4c:65:0f:42:d7:f8:5d:a8:d3:cd:ff:ec:78:10:3c:
ce:9b:02:e5:37:b0:25:5c:99:98:db:29:58:31:ce:b2:e7:ab:
bd:a0:18:60:a0:92:85:f5:79:81:d0:2c:dc:f2:25:e6:48:1a:
7c:91:82:2b:3c:26:72:51:62:a6:8d:a8:d3:ed:0c:36:6d:e6:
6e:a7:ce:8f:2c:a6:a0:78:fd:c7:8a:6e:00:91:b1:33:25:4b:
15:e7:b2:3d:f3:f7:b9:a4:ce:bf:07:35:6b:46:47:8c:71:c4:
65:64:ec:28:0d:77:53:d3:29:0b:fd:49:be:43:9e:93:a7:db:
f8:18:47:4e:5d:06:fe:f8:30:88:b7:2e:2e:47:43:a4:da:c8:
47:c9:89:cc:14:b7:1f:e6:f1:54:00:94:46:6b:59:9e:2f:db:
97:06:45:b0:4c:84:90:e6:8d:9e:25:7f:e8:e3:ce:19:b4:be:
2d:2e:4b:de:ca:bc:65:13:64:79:2e:9d:89:cf:b1:dc:61:76:
2b:03:65:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:12:55 2025 by rpki-client