Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
File: tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft (raw, json)
Hash identifier: +TxVhQ5saZnp9Gr+mEB2wlkAcaNMUoZBSXj34j4kpb4=
Subject key identifier: A6:96:76:64:3B:66:6C:7C:D5:95:4F:12:AF:D0:35:FC:D4:89:11:76
Authority key identifier: B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
Certificate issuer: /CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Certificate serial: 0198D54EC19F3F397142B3DA10DFEEB08DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
Manifest number: 08EA
Signing time: Sat 23 Aug 2025 05:02:45 +0000
Manifest this update: Sat 23 Aug 2025 05:02:45 +0000
Manifest next update: Sun 24 Aug 2025 05:02:45 +0000
Files and hashes: 1: P4_VmIDFfqYiDiPBdVVMzIA4LMY.roa (hash: fbL8P+MktK6PkeO1KtnH7o+BeC/FNslw8AAfJjr38OY=)
2: WKELc_W8mdXUUZ324MSWDeu1wXI.roa (hash: 0tteI0ps1fiC7XdrvhsFyeYnjz3rCzmXkLHL3vxN7GA=)
3: tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl (hash: oaYTXGhEBJVNYASUMXz+vxEAlVCcKjxA6z0AaVyYltc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:c1:9f:3f:39:71:42:b3:da:10:df:ee:b0:8d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Validity
Not Before: Aug 23 05:02:45 2025 GMT
Not After : Aug 24 05:02:45 2025 GMT
Subject: CN=a69676643b666c7cd5954f12afd035fcd4891176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:19:1b:9e:e6:09:b1:34:97:e6:6b:25:70:
a7:34:b1:89:ce:6b:1e:11:d7:a3:17:cd:a8:24:e0:
e4:09:90:df:5f:f2:3c:0f:cb:20:f4:a6:e3:ce:7a:
4f:7e:7c:84:35:2d:87:e1:f6:81:9a:a3:31:a9:a1:
67:68:fa:a4:51:70:66:c4:65:46:ff:d6:b9:d3:d2:
41:a7:c8:ce:41:3e:d6:62:ad:e6:63:62:0a:76:58:
88:0a:a8:93:30:44:27:b4:55:1d:02:34:8a:3b:f4:
67:fd:8f:d6:36:0b:19:e9:70:7f:34:76:a5:30:81:
f5:19:4b:2a:11:90:5d:de:d2:77:ec:32:a7:cd:d1:
35:90:4e:8f:c9:a0:3c:5e:eb:14:59:f1:6e:03:10:
56:0f:8d:4b:5c:b0:3e:18:0a:46:3e:4b:eb:5e:90:
ef:dc:09:1a:a4:10:ce:2a:29:a2:d9:7b:37:8d:73:
1d:c2:74:96:a5:c5:c0:af:91:fe:52:1f:e9:fb:01:
58:8d:03:86:72:c8:64:76:9f:24:6e:76:55:c7:03:
3e:6e:c8:d1:81:4b:ac:47:c9:ab:c2:0a:de:bc:d9:
fd:82:6a:88:b5:e5:32:95:bf:3c:fd:09:05:18:c0:
a7:d9:1c:53:40:18:ac:9d:b8:4f:59:20:39:f1:01:
23:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:96:76:64:3B:66:6C:7C:D5:95:4F:12:AF:D0:35:FC:D4:89:11:76
X509v3 Authority Key Identifier:
keyid:B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4f:3a:28:e9:cc:b1:e3:a3:bf:22:6d:44:f7:ed:fd:a0:1d:
02:fa:91:66:18:52:86:9c:75:1b:fa:23:2c:2c:f7:06:48:fa:
47:88:65:ad:d5:2e:7f:b7:ee:de:70:79:0b:d6:f2:cc:3f:53:
39:ae:0e:c9:cf:21:88:1d:40:3b:c2:57:e6:21:d9:94:33:cb:
fe:a6:40:08:38:3b:a9:bb:01:37:e2:1b:f1:bb:0e:2e:0d:b0:
86:27:36:93:ef:ed:db:d7:87:f0:4a:b4:63:2f:ed:90:e7:c2:
16:42:6d:b9:1d:c2:7a:78:d7:d9:3a:fd:cd:6a:1e:1d:d8:9f:
0c:d2:c8:97:17:71:e2:56:63:fe:a1:d1:9b:cc:8c:6a:6f:fd:
c5:2c:32:86:e2:58:c7:d6:6b:ce:20:79:0b:f2:1a:ef:ec:33:
58:e8:15:50:5c:c9:b8:6f:62:ef:e4:ac:14:75:e0:7f:7b:42:
8a:5f:33:bf:9b:f6:ef:d8:39:c0:ef:12:e2:59:01:93:f4:10:
70:4e:2b:c3:1d:52:1d:8d:9c:5c:b8:f7:82:71:17:fa:ee:f8:
5c:2d:bb:28:f4:48:3e:cc:a7:ac:40:bd:c4:e2:ec:3f:57:08:
02:98:89:50:74:ca:f5:a4:1d:7e:e0:5c:70:8a:5d:49:79:d9:
d5:10:3c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:08 2025 by rpki-client