Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
File: tXZXfSAIXEwi_IARyNGpP2MhHA8.mft (raw, json)
Hash identifier: LXrwOrilJBaEfCUTi7UPonb+olGoUM0uSJ5BIcOk2z8=
Subject key identifier: 05:38:E1:3F:88:C0:3A:6A:66:7C:DA:49:AE:11:B5:E7:72:A5:A5:C2
Authority key identifier: B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
Certificate issuer: /CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Certificate serial: 0198D54DFBBC88DC9C0AAE79B01566B97A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
Manifest number: 016F
Signing time: Sat 23 Aug 2025 05:01:54 +0000
Manifest this update: Sat 23 Aug 2025 05:01:54 +0000
Manifest next update: Sun 24 Aug 2025 05:01:54 +0000
Files and hashes: 1: 0NGpBZClfqdkwT-g1SQX2TG7Voo.roa (hash: SbCdNlkd4RVvBhJ9C9nlFY+4pjkHAYs+BVh1BZ1ld+c=)
2: FrJWtoZemJx4JKpSKfeY_d7A8KU.roa (hash: mn6H512YQAxp8Xgyg/tGQdGcCEfihV9UXWWT70uzA50=)
3: tXZXfSAIXEwi_IARyNGpP2MhHA8.crl (hash: YmdQT2dNEmnEmwXBY0O29Renptrz07Jvsy+Xd1A77CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:fb:bc:88:dc:9c:0a:ae:79:b0:15:66:b9:7a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b576577d20085c4c22fc8011c8d1a93f63211c0f
Validity
Not Before: Aug 23 05:01:54 2025 GMT
Not After : Aug 24 05:01:54 2025 GMT
Subject: CN=0538e13f88c03a6a667cda49ae11b5e772a5a5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:66:e7:ba:3b:69:01:fc:32:29:25:38:52:
d9:be:19:85:64:0a:ab:b9:45:10:9a:1a:7b:7e:a1:
95:63:fa:76:77:75:19:2d:d5:05:4f:05:a7:75:ee:
a5:3b:27:09:2a:c6:7c:14:03:79:0e:9a:2d:cb:c9:
9a:d3:38:28:52:08:08:7a:13:90:f1:78:c5:a3:18:
21:ac:6e:92:24:ea:b2:56:2b:7c:fc:9a:af:2d:b9:
0c:1d:1c:df:52:b4:07:e7:f6:9e:66:e8:bb:d1:64:
4a:c4:50:a4:22:a1:61:2a:02:6b:1c:f1:81:1c:c6:
e6:17:f3:8f:93:8f:bf:ba:29:d8:c0:7d:a3:c2:fb:
a7:45:18:a6:3c:e8:a1:9e:19:f6:b5:6d:7d:85:ea:
46:90:06:0c:32:a2:fe:6e:8d:bb:cf:8c:d9:e0:b0:
da:97:46:4a:19:e6:cc:63:70:53:40:10:96:ee:5b:
68:ed:f6:05:b6:36:ec:07:f1:78:ae:0a:f8:16:dc:
09:03:99:3c:97:99:28:f7:a1:34:67:8f:fe:00:2e:
32:c3:33:ec:38:93:84:ac:af:f3:4a:fa:09:bd:64:
60:b4:da:a4:33:2b:ba:86:8f:36:28:f5:c7:05:28:
56:38:d4:df:0b:a9:ec:4d:ed:23:9f:70:b8:cb:fc:
af:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:38:E1:3F:88:C0:3A:6A:66:7C:DA:49:AE:11:B5:E7:72:A5:A5:C2
X509v3 Authority Key Identifier:
keyid:B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f8:bf:dd:20:8a:b4:d3:ab:f1:89:af:71:02:0b:c1:cd:d3:
35:33:15:e0:e3:8b:90:15:09:2e:f1:60:9b:fc:8c:06:9a:89:
4d:5c:c9:e5:0b:7d:a0:d0:af:39:fb:27:c4:5a:5e:dd:e5:65:
45:c3:40:00:54:3b:cc:dc:3c:51:dd:99:07:5d:89:9b:a1:2f:
16:d7:ee:c6:1d:d7:63:b3:97:05:b7:16:d0:48:c0:4c:86:c4:
6f:34:76:72:79:12:14:d5:97:c5:71:82:d6:51:6b:41:69:f7:
6c:b3:55:17:87:54:75:f6:67:12:b0:df:63:11:24:a1:dc:b3:
9c:94:10:04:79:63:e7:28:06:8a:79:1e:4b:7a:c4:85:f5:ad:
c0:b6:0b:ae:d6:55:40:b6:b1:db:ba:fb:df:08:7a:ae:e0:76:
41:0d:ac:ec:5f:f3:28:29:b9:15:86:bf:7c:ce:30:fe:ea:29:
d4:58:36:bc:05:b0:a0:aa:c5:d3:50:5e:dd:88:8f:75:af:b9:
cf:94:bc:e6:61:cf:f1:c9:ff:70:d0:9e:f7:94:25:dd:e4:d0:
7e:91:a4:99:ff:d5:fe:2f:8b:f9:51:af:90:ff:b2:a7:67:37:
16:53:4f:a8:e6:c5:8d:89:76:6a:31:df:d9:bc:71:30:97:34:
d9:77:8b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:36 2025 by rpki-client