Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
File: tMBDnHlVURAtbx5M620cUvvF6j8.mft (raw, json)
Hash identifier: LCffxg/5oa77wZ9/pGIAbAdIQ2fGkMubOLraTFsLE18=
Subject key identifier: BC:E0:93:16:23:C0:C9:75:07:CC:4B:61:96:F5:BC:ED:BB:B2:AD:06
Authority key identifier: B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F
Certificate issuer: /CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f
Certificate serial: 0198D4E00CC10521E4966BBCC5FFC419EEB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 03:01:49 +0000
Manifest this update: Sat 23 Aug 2025 03:01:49 +0000
Manifest next update: Sun 24 Aug 2025 03:01:49 +0000
Files and hashes: 1: n5jiYoIoGZQqwQOVrCfprt-PApk.roa (hash: MrCF/3iJ71+/LWf1gBDblDTWmF567DIjZvwBvhh1aT0=)
2: tMBDnHlVURAtbx5M620cUvvF6j8.crl (hash: R3iXyAbN/6VX2YJYPdJYdq4mp4XH+1vnObqB4mKbKok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:0c:c1:05:21:e4:96:6b:bc:c5:ff:c4:19:ee:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f
Validity
Not Before: Aug 23 03:01:49 2025 GMT
Not After : Aug 24 03:01:49 2025 GMT
Subject: CN=bce0931623c0c97507cc4b6196f5bcedbbb2ad06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:f6:cf:67:2f:c0:b8:05:87:31:b4:85:9c:
62:29:9a:74:0c:64:ed:ad:ff:3d:6c:ef:07:83:83:
19:9e:54:36:0f:17:87:2b:71:22:c3:3a:f5:1c:50:
f7:f9:20:f6:ec:9d:f1:a8:a2:72:ee:1c:69:77:0f:
bf:bf:59:e5:c4:7c:88:61:6b:83:15:57:18:69:c7:
60:c2:bf:b0:b8:e4:c8:30:48:6d:d2:70:9e:ee:7a:
86:17:e2:cf:1e:3b:ca:7a:38:19:0d:3d:74:3c:76:
5f:ad:22:4e:be:8b:3f:bf:88:e2:71:68:da:7a:13:
9f:d6:1f:61:aa:21:c0:d7:0b:92:be:1d:9d:70:f1:
1b:fd:83:38:68:f7:03:7f:4b:1d:65:a2:bc:a1:47:
97:d6:cb:69:01:46:e2:80:74:96:29:cb:ed:19:d0:
ef:f8:5e:d3:81:02:56:7a:18:80:69:38:50:bd:5e:
10:95:c6:6e:bd:46:b1:e3:5c:22:f2:ed:89:6b:55:
d0:11:14:ba:7f:ae:db:63:83:e1:a1:eb:35:87:09:
b4:c5:d7:7a:36:e1:e5:fc:30:6b:6f:26:79:ae:dd:
c5:26:91:ee:7c:ef:dd:d7:cc:22:7a:f8:0b:b5:bd:
6c:dc:24:b1:17:70:a1:95:77:3d:1b:cc:20:13:40:
e0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E0:93:16:23:C0:C9:75:07:CC:4B:61:96:F5:BC:ED:BB:B2:AD:06
X509v3 Authority Key Identifier:
keyid:B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3f:63:6c:e4:3a:9b:39:fb:ca:92:e1:cf:6d:1f:63:8d:e3:
88:a0:63:cc:52:f4:33:c2:6b:fa:ce:9b:d5:b0:f1:c1:e9:f8:
36:ba:bc:2d:6f:47:0b:29:27:24:89:a3:c2:66:b5:5b:6b:f8:
7f:fc:cf:38:be:ad:95:fe:b0:67:e6:ef:21:cf:e1:54:7c:e6:
91:eb:b2:0f:7e:49:bc:42:30:44:5c:52:2d:2b:e1:3e:fc:89:
d0:4b:71:d3:59:88:0e:b9:a3:31:df:e1:83:2f:db:56:c7:9a:
f9:1a:e9:29:27:e2:0c:d8:60:a3:e5:9f:af:32:59:69:09:f3:
22:86:e2:2a:d6:49:d3:b4:27:8d:f9:40:d5:d9:01:ad:56:77:
82:23:db:d3:e7:14:40:d7:c7:1d:f2:42:70:7e:be:fe:51:b3:
93:de:2c:6e:43:7e:4a:15:ad:dd:a1:99:d0:cf:7a:46:50:b4:
dc:32:75:76:1e:20:0e:ec:f3:4b:47:02:42:23:67:55:98:11:
0d:44:30:34:0e:d1:3f:2d:72:21:d7:fb:61:11:8e:7c:3d:66:
3b:92:b1:6e:5e:b5:b3:31:b0:04:c8:00:a2:df:20:af:7a:7b:
62:17:98:7d:2d:61:96:bd:8b:23:f3:e6:a0:4a:e1:ea:4d:c4:
06:04:c1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:33 2025 by rpki-client