Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
File: tfrsS42ZLda5zYmoSJ08OmUq7NI.mft (raw, json)
Hash identifier: SmDliH585eZPnMNtdsU1zwsQwwFj5t71qcb+dlzZtC0=
Subject key identifier: D0:03:54:F4:0B:9B:0E:A5:70:23:57:42:77:DA:4C:0D:31:4A:F9:E9
Authority key identifier: B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
Certificate issuer: /CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Certificate serial: 0198D54EAE7AD5D8CB404EABE1F71B2548F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 05:02:40 +0000
Manifest this update: Sat 23 Aug 2025 05:02:40 +0000
Manifest next update: Sun 24 Aug 2025 05:02:40 +0000
Files and hashes: 1: 4yLFcyM54Hv8nF5ON-TIrD-1oYQ.roa (hash: hE+OT4FiIcXi0TRuDiRDYqpuBeR4hhUYci4sdFCd/CY=)
2: jKEy0LJLh7AqTPNLnCDWho1dIJ0.roa (hash: BKRsVG5h+FxIv9YJSObhtgL9EqcN1BIPxpc/4d7NHx4=)
3: tfrsS42ZLda5zYmoSJ08OmUq7NI.crl (hash: M1+BbdKnCC5lyUk5BBL4lk3MAVIXHuaKv6wHeV5TtFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:ae:7a:d5:d8:cb:40:4e:ab:e1:f7:1b:25:48:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Validity
Not Before: Aug 23 05:02:40 2025 GMT
Not After : Aug 24 05:02:40 2025 GMT
Subject: CN=d00354f40b9b0ea57023574277da4c0d314af9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:2e:1e:24:9f:39:69:4d:53:b1:1c:75:d1:
e8:ed:cc:74:b2:78:23:dc:bf:3a:6d:b8:5c:a5:a1:
94:a5:4f:34:d1:4a:18:bd:d8:ac:cd:c2:ff:9c:59:
f1:bd:49:40:56:27:dc:23:91:dd:a6:56:77:9b:92:
ca:9f:9b:cc:27:1d:93:37:dc:b2:91:c9:89:fc:32:
2a:5a:aa:17:56:d7:cc:ea:f8:9b:8b:ac:8c:bc:48:
3c:b4:92:8e:14:7a:b5:e7:91:65:db:25:8a:bf:2a:
ad:02:5e:0f:04:33:5d:2a:24:0b:70:30:07:da:02:
8d:58:68:9e:0b:dd:d2:90:3f:d0:b3:22:99:9a:d1:
4f:03:68:bf:54:15:cd:d7:84:27:11:83:80:e4:59:
3a:cf:9c:9c:ac:7c:f3:c9:4a:4d:09:c9:ac:07:0e:
33:e5:fc:73:c4:08:af:56:ab:9f:76:d4:82:1c:ad:
78:30:74:d4:97:6a:81:6f:cc:58:a8:0f:d8:bf:70:
c2:70:c7:16:02:57:12:7d:1f:2d:42:a0:6c:89:38:
bd:4d:f7:3e:56:32:bc:57:15:06:65:79:ef:e9:05:
fc:1d:7f:4b:b2:2b:18:aa:f5:cd:4d:6e:a4:81:c2:
6f:72:3f:41:55:64:d3:70:da:86:51:f2:dd:f8:08:
b2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:03:54:F4:0B:9B:0E:A5:70:23:57:42:77:DA:4C:0D:31:4A:F9:E9
X509v3 Authority Key Identifier:
keyid:B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7b:ba:53:6e:c9:a3:da:8d:03:95:bd:4d:04:f4:e9:18:7e:
e2:d7:82:cc:59:94:20:60:24:54:cb:51:e8:20:2a:56:24:7d:
b8:47:fd:96:cf:5a:d8:f8:4f:07:4a:1a:ba:72:f3:93:d5:e1:
24:6d:d7:65:6c:59:fd:80:c4:96:3e:86:1e:95:0a:34:73:84:
67:2f:eb:b0:90:6f:04:75:96:8a:73:df:a5:55:c5:71:f5:1b:
70:7b:8f:5b:77:02:0e:96:eb:65:9f:d5:c7:05:ed:0b:7c:36:
a5:92:88:4f:2f:e1:bf:03:f3:62:41:26:2f:bb:2d:e0:bf:7f:
c1:5d:55:8a:fe:ad:43:8a:3b:04:04:11:98:22:9f:14:2a:01:
af:3c:a5:b4:c6:a5:73:87:cd:29:b8:97:3f:d3:5f:e5:6a:de:
6c:fa:bd:d2:e3:93:d0:4d:78:17:82:02:b0:f5:7e:fd:3f:24:
82:45:a4:c5:a8:38:b4:ae:21:20:55:cb:35:52:42:47:2e:72:
8d:b2:2a:30:ef:45:c1:e4:ea:11:e9:ba:88:a7:cc:64:89:14:
71:0d:d6:4b:6a:7a:bd:66:84:bb:c6:e4:03:84:5c:b5:7a:11:
c3:05:ef:c5:9c:2e:dc:a3:3e:6d:df:25:e1:4d:b4:78:c6:33:
4b:06:2c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:53:40 2025 by rpki-client