Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
File: TKE73qVPdrioVxKv22FRhrM4OME.mft (raw, json)
Hash identifier: jxwde2xAuiHEzetEdHX9khYPlTRlOJPBb9XnWDWJ+S8=
Subject key identifier: B7:E5:C1:E5:C7:3D:FA:18:81:0F:0E:D9:3A:0F:00:6D:74:EF:4B:C5
Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Certificate serial: 0198D5BC0C52837B52984840048C560A49B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:02:07 +0000
Manifest this update: Sat 23 Aug 2025 07:02:07 +0000
Manifest next update: Sun 24 Aug 2025 07:02:07 +0000
Files and hashes: 1: 8axKv1QeNdYLl5PRbdXwvujzyH4.roa (hash: P16odh3n69wKkHb8t7qySEeaYC3/LuUW9W8sAY8jUTo=)
2: TKE73qVPdrioVxKv22FRhrM4OME.crl (hash: e65dhVZXBxU5xLI/QP/gzzrBSWn3WWreIXoONx6N6wA=)
3: WNroR83uzcjISqXHww42f1zYgLY.roa (hash: ZAQula8xqSNg9/XEOBi+pmskOiJ5Nh7rkmicK30wwYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:0c:52:83:7b:52:98:48:40:04:8c:56:0a:49:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Validity
Not Before: Aug 23 07:02:07 2025 GMT
Not After : Aug 24 07:02:07 2025 GMT
Subject: CN=b7e5c1e5c73dfa18810f0ed93a0f006d74ef4bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:3c:97:c5:3e:4a:32:ba:1f:64:ae:f6:8a:10:
43:6e:94:fc:64:4e:55:b4:cd:50:25:cd:5c:27:ee:
11:cc:80:a3:b4:8e:5a:a1:a8:36:b2:60:82:c0:5e:
11:a5:6b:d4:93:98:8f:32:52:4e:b3:35:1e:b0:6a:
6c:8d:de:69:6b:09:68:86:f7:73:15:dc:06:6d:e4:
bf:c8:c8:46:53:c4:40:03:72:f7:ed:e1:5e:8a:d2:
19:aa:ba:88:57:37:bb:9b:0c:7c:f3:5f:51:4e:ef:
0f:cb:9b:16:b7:dd:a1:10:19:c3:18:97:63:fc:bd:
81:fe:ad:06:00:ce:08:0c:ba:96:1e:59:83:00:94:
55:9e:11:a8:66:cc:db:2e:91:af:f5:f9:74:9b:4b:
cc:32:32:0f:1a:b6:4a:69:bd:1c:6a:17:e7:16:4f:
39:c1:6c:35:2a:06:57:7f:ef:38:60:f2:f8:e6:04:
75:ea:aa:a8:95:f1:cb:9d:8e:3a:bc:c9:fa:af:d5:
62:18:e7:e4:1e:7e:ce:98:80:24:89:b5:35:66:28:
46:45:e5:a6:43:52:84:01:b0:df:0e:ee:13:18:57:
b6:23:4e:2b:44:6c:e5:b3:c1:b6:bf:c1:c3:e5:e0:
be:cf:df:1a:a6:7b:fa:34:a7:eb:c1:a9:62:f2:f3:
1d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E5:C1:E5:C7:3D:FA:18:81:0F:0E:D9:3A:0F:00:6D:74:EF:4B:C5
X509v3 Authority Key Identifier:
keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1f:b6:86:27:19:10:59:9f:2d:50:d9:a3:73:2b:21:27:b2:
71:5c:57:07:22:6f:4b:a1:02:d3:9e:5b:fc:90:05:11:f2:d6:
b9:f3:d1:7d:ea:63:28:a5:0c:85:e9:85:b4:ba:fc:46:c4:23:
00:04:03:fd:fe:3e:3a:55:8a:d7:75:c8:64:98:f3:91:fe:bc:
17:1a:ff:1d:8a:3d:d7:4c:5b:69:02:11:2f:52:ca:b6:19:80:
ee:cf:2b:37:e7:50:7b:35:14:45:8b:0b:4c:e1:7f:31:f1:4b:
5e:a6:82:ad:84:55:af:6a:21:23:cd:1c:72:9d:c0:44:11:43:
d8:74:c9:de:88:ea:86:36:29:29:c8:a7:fd:b6:8e:8d:80:71:
65:82:07:75:10:a9:1d:c3:4e:c7:f0:d5:68:3a:7b:a6:0c:c2:
be:6b:b5:ac:46:1f:d9:50:f3:9c:44:96:a3:15:24:d3:fd:63:
d3:01:55:2b:f7:77:f6:cb:56:32:2d:e0:f2:b2:9d:3f:91:44:
a0:29:4f:48:ac:2b:29:ba:b4:0f:6d:ca:b4:1a:d3:d7:38:d5:
f4:8f:0b:04:47:0d:d6:fc:f3:27:52:54:ae:66:0c:d8:d9:3d:
a3:63:7a:66:aa:d2:3f:be:1a:ef:0b:15:8f:70:10:e4:5d:0b:
67:c7:15:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:24 2025 by rpki-client