Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json)
Hash identifier: 62azaiwtFtOl/x14iJgorTU5Ns3axxmt8+WJ1NwiCMo=
Subject key identifier: 5D:6F:E0:9C:ED:5E:FF:23:9E:FC:26:A9:0A:3C:55:34:34:7D:24:FD
Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Certificate serial: 0198D54DCE0335A9E8E4E1CC169178DAD50C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 05:01:42 +0000
Manifest this update: Sat 23 Aug 2025 05:01:42 +0000
Manifest next update: Sun 24 Aug 2025 05:01:42 +0000
Files and hashes: 1: pA8DlYtcvRNA-jdEe_3R7YRB6rk.roa (hash: XB3O2NdSBoC9ldQGDUty/6gqx/qt/ZpvhUOCQP6iI1c=)
2: rg67AeqtMD0wJ1IIvMd4YeaFTyI.roa (hash: po3w7Qi8ZlRiTSE2vYAsVYJZWCbY0SnfvN8Hrjn9vnc=)
3: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: aOoQYMoiS5c9q2L2uSRPxXYBqrHvhfnKlB7WZfu/sVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ce:03:35:a9:e8:e4:e1:cc:16:91:78:da:d5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Validity
Not Before: Aug 23 05:01:42 2025 GMT
Not After : Aug 24 05:01:42 2025 GMT
Subject: CN=5d6fe09ced5eff239efc26a90a3c5534347d24fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d9:31:1f:eb:28:0f:ad:b6:fc:b3:9b:e4:95:
a0:5f:4d:a1:a0:4b:6b:3b:e4:e5:21:63:99:98:c1:
fd:1f:8b:77:1c:54:05:4a:fa:03:37:2c:fb:d9:b2:
d2:dc:45:e8:8a:fe:8b:c8:ea:a3:66:e1:58:8d:1a:
b7:90:8a:4e:70:20:48:fe:30:9f:39:54:b0:1a:ef:
3d:a0:d0:de:97:35:3c:15:e7:a2:f1:d2:19:a2:81:
5b:c0:de:f9:fe:71:16:3f:cd:f2:bb:26:65:71:74:
0c:f4:fc:32:f3:9a:b8:78:e1:1d:b2:42:7f:04:3c:
b6:b8:44:a7:dd:7c:c3:f0:43:58:1a:09:24:ca:ea:
c0:24:ad:39:5b:b0:b1:25:59:84:cd:0f:09:52:34:
f4:67:74:9a:77:ba:70:ec:18:68:79:aa:71:c1:32:
f7:0a:aa:c4:a1:14:a7:25:a8:ba:e5:7f:af:29:3e:
a8:e2:55:cb:8b:66:83:01:81:09:14:85:cd:a1:64:
09:ba:de:69:62:b6:94:6c:cf:d9:b4:00:19:5e:b2:
42:96:b8:65:92:7f:4c:f6:fd:2f:59:ea:af:f8:4e:
86:b0:c6:43:7c:10:80:16:18:c3:bb:4a:a8:d7:42:
43:31:56:4d:66:07:67:5d:e1:8a:c7:0e:7c:a2:89:
eb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6F:E0:9C:ED:5E:FF:23:9E:FC:26:A9:0A:3C:55:34:34:7D:24:FD
X509v3 Authority Key Identifier:
keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:55:3a:2d:60:2e:1e:23:e5:9e:7c:49:0e:d6:3a:48:c3:2c:
c8:3e:37:2c:ba:e6:ce:07:5d:66:00:d0:cd:4d:3c:1a:ac:8a:
64:69:22:d0:9c:fb:52:4f:6d:c7:9d:33:6e:1d:31:6e:a0:53:
3a:47:e3:f0:5f:83:cc:75:7d:5f:2a:39:e6:92:a3:a4:0d:ca:
a9:07:a2:ad:4c:fe:87:a2:25:cc:f3:98:96:d2:1d:89:c0:51:
52:f5:7a:8d:4e:04:4d:b9:ee:78:7f:72:f2:cd:a4:92:9f:78:
6b:9b:8c:29:8d:15:42:9b:ed:72:75:c6:a6:d2:99:44:30:5c:
62:7b:86:3e:f2:e3:03:aa:2a:a7:ee:38:57:b2:61:32:d7:3e:
59:5b:2f:d5:13:08:41:70:8a:95:f6:a1:5f:b4:bf:56:dc:ab:
88:33:45:4c:c0:29:ae:86:a7:53:ef:e1:1d:f7:94:88:89:0b:
22:c8:80:3f:97:a4:85:af:92:c9:3a:bf:07:79:ca:f0:32:f2:
d4:e8:f2:e4:67:59:33:81:e7:71:50:56:e4:1e:0e:64:67:85:
88:3f:cc:de:e1:f1:ca:2b:d3:8a:4e:0a:33:bb:61:26:d7:a0:
0b:57:2a:2b:b4:e2:d9:50:a2:f6:67:8a:e1:91:80:3b:90:1f:
fb:15:f2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:20 2025 by rpki-client