Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
File: TuFxPha0_Y8zAYh95qERmARJsp4.mft (raw, json)
Hash identifier: KQqqrrnfGRDJJ/eDqv/QGYLc24tBDkYdmdp7pDh/5+E=
Subject key identifier: 48:26:9F:AB:9F:55:84:BA:4C:46:85:69:B9:10:59:85:C5:49:F7:A2
Authority key identifier: 4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
Certificate issuer: /CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Certificate serial: 0198D5BB893647FA4FEDAF3ABA717F4BC797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:01:33 +0000
Manifest this update: Sat 23 Aug 2025 07:01:33 +0000
Manifest next update: Sun 24 Aug 2025 07:01:33 +0000
Files and hashes: 1: IJqJkkG32juZ9JC_-n807ugagLE.roa (hash: a5ckR7gAH5+zi6QRTimZRXE/Wgs09xk/gP8A83O6nQM=)
2: TuFxPha0_Y8zAYh95qERmARJsp4.crl (hash: +bi38WeiOQ2BOtxRmU2MluvKrTAGca8lsYiJQ8AJgao=)
3: yXKulFLipTbjSUmowLRqtzSALEA.roa (hash: LNf43mdJtw9mAKFqBqZr/MgvJNf0ToK4qGWZ05MJPz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:89:36:47:fa:4f:ed:af:3a:ba:71:7f:4b:c7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Validity
Not Before: Aug 23 07:01:33 2025 GMT
Not After : Aug 24 07:01:33 2025 GMT
Subject: CN=48269fab9f5584ba4c468569b9105985c549f7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:38:09:d7:ce:a8:51:50:c9:20:a7:bd:2f:b6:
d3:4d:ef:98:46:93:04:ce:a9:57:5e:00:d6:ab:33:
ef:84:96:d9:4c:5e:dc:ab:b1:1a:d5:bf:5a:10:c1:
9f:0b:04:a5:b2:4c:2e:08:16:39:b1:58:4b:92:b6:
5d:4a:fb:ee:1e:2c:2a:bd:d4:3c:e1:68:d8:5b:38:
c1:5e:50:0c:93:8b:62:83:eb:1b:36:12:a2:f4:72:
e7:81:bf:19:6f:50:03:c5:15:b4:f8:73:95:63:86:
12:21:e1:50:fe:66:bd:b8:94:49:fc:1e:4b:7a:fe:
e1:06:e0:cd:14:78:55:89:76:25:b7:88:b6:0e:c5:
77:b3:09:08:ff:07:97:13:8a:b3:65:c6:a5:9b:87:
73:6f:cd:03:a7:ef:a1:83:c4:3a:76:ee:e6:2b:5e:
b4:eb:26:57:12:5b:ca:26:a0:9e:a2:73:aa:cf:1f:
06:8d:d9:32:68:43:0a:dc:ed:48:7a:97:68:16:0a:
5c:f2:69:98:2e:7d:e7:bb:9e:5b:c7:36:83:57:14:
ec:22:fd:13:c6:9e:f6:2c:2c:14:37:31:a7:43:d3:
35:0f:61:0b:7f:01:ab:ed:ca:8a:f2:bd:f6:ee:bc:
d2:fb:54:c5:e4:38:19:1c:e3:2c:5c:d5:a3:d9:c1:
1a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:26:9F:AB:9F:55:84:BA:4C:46:85:69:B9:10:59:85:C5:49:F7:A2
X509v3 Authority Key Identifier:
keyid:4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7a:aa:f4:44:ca:b9:6e:ef:ce:97:db:7d:cb:9c:32:a5:f9:
b1:dc:07:b5:62:a1:71:16:ee:7c:23:71:71:58:3d:8b:a2:11:
24:37:05:2e:9c:ce:60:c3:30:a0:b0:4c:a5:c0:fa:f5:d0:a7:
66:51:13:46:bf:de:00:ee:79:5a:17:e5:35:1b:cd:78:c6:85:
99:8d:df:cb:17:37:dd:8e:70:01:ea:00:55:3e:9c:26:dd:92:
59:b0:76:46:0c:32:23:ae:9b:a9:23:28:75:26:54:23:95:de:
13:4d:40:8e:9d:bd:9f:d8:c6:9e:39:e4:b1:cc:c2:df:7e:1a:
28:a2:47:11:69:2f:db:5a:fd:96:7a:09:93:8f:5a:a2:2e:d0:
46:c5:d2:b2:68:14:96:95:55:f0:1d:da:9f:e5:5d:96:87:94:
17:b0:94:11:3f:b8:54:08:e1:f7:63:ed:2c:ad:ac:21:95:08:
35:ef:1f:fa:10:7a:3f:92:aa:54:b9:a2:bf:75:eb:8c:b9:9b:
aa:37:c7:a9:44:4c:ef:ee:11:10:b2:fe:4d:c8:53:1e:a2:32:
93:20:43:3d:d2:b5:00:0c:9d:a8:79:cc:6c:58:8f:19:ca:9d:
51:95:8e:50:bd:8f:c7:99:a0:7d:a9:34:3a:de:cb:e3:6f:5c:
03:00:c0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:58 2025 by rpki-client