Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
File: tDuXodIfY3tUkTDwhXpoHMf2iEw.mft (raw, json)
Hash identifier: 7bGd2RFlkBlRgBzDJAOIBVnJyfsY2u+XmVvR/MUqrCw=
Subject key identifier: 3D:C2:A5:7B:C7:90:8C:74:1F:B7:7B:4F:36:29:B7:AB:94:C9:AA:92
Authority key identifier: B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
Certificate issuer: /CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Certificate serial: 0198D6612C5F707E4CB4D81CF723738B3469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:02:29 +0000
Manifest this update: Sat 23 Aug 2025 10:02:29 +0000
Manifest next update: Sun 24 Aug 2025 10:02:29 +0000
Files and hashes: 1: 3-CNHKGdJXMpTXntAh-s3qj--cM.roa (hash: 2BpPHYt1k/l10pBcIexz0ktK+xFvs5F87gVofFcEgls=)
2: tDuXodIfY3tUkTDwhXpoHMf2iEw.crl (hash: o0KfTbP0OpTPvvu3QcSjiqko782D3tymDT05xl2Wi6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:2c:5f:70:7e:4c:b4:d8:1c:f7:23:73:8b:34:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Validity
Not Before: Aug 23 10:02:29 2025 GMT
Not After : Aug 24 10:02:29 2025 GMT
Subject: CN=3dc2a57bc7908c741fb77b4f3629b7ab94c9aa92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:b7:4d:0c:b7:7d:c2:6f:a0:5a:86:55:83:
46:05:7a:63:f7:ec:92:23:f4:3c:96:56:ac:17:f6:
b1:d9:15:02:a0:5a:fe:34:38:3c:4f:c4:0f:1c:a0:
a1:1c:0b:5e:1f:9c:4b:1f:99:67:02:e4:15:69:3a:
1f:dd:33:27:fe:44:2f:09:ba:af:8e:71:84:d3:13:
2e:b2:2a:33:29:53:f7:53:e0:02:48:bc:a1:44:10:
96:38:4b:da:a4:36:cc:52:cd:cb:66:92:73:39:5c:
89:89:15:ba:3e:31:13:4d:38:2f:61:82:60:c3:4f:
21:fe:56:b4:11:5f:b8:73:be:6a:f2:c7:5e:88:0b:
31:e5:16:92:3c:6b:2d:0d:cd:b8:b5:cc:87:e5:22:
9a:94:e9:33:94:56:06:10:6d:56:5f:97:cd:d9:39:
f7:94:8e:77:ac:99:e7:87:15:b9:57:18:ac:ec:43:
40:bc:9f:6f:4f:ce:98:6b:a6:46:d4:30:1c:ef:50:
3a:a8:6d:f5:71:5d:38:0d:b9:81:f1:10:74:96:69:
73:05:71:52:3a:81:80:5e:26:8f:7f:dd:83:a0:60:
fe:a5:e6:4b:8c:fa:d5:17:ee:27:62:57:71:21:d7:
3f:01:14:b7:26:76:c7:58:22:26:ec:c8:74:6e:09:
8d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C2:A5:7B:C7:90:8C:74:1F:B7:7B:4F:36:29:B7:AB:94:C9:AA:92
X509v3 Authority Key Identifier:
keyid:B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:65:84:96:45:a6:3d:6f:cc:de:9a:3c:3e:61:de:7c:d7:fe:
ea:2c:59:fc:e2:78:f1:34:b4:f5:6d:b5:38:aa:d7:5a:db:86:
82:8d:5f:5f:02:4a:0d:1f:1f:da:2d:3c:7e:bc:02:c2:af:32:
9d:0c:c7:18:6b:90:86:d7:8a:8c:65:ac:e1:fe:70:13:29:3f:
5c:09:60:01:93:f7:be:2d:ca:a7:8c:ac:9d:df:5a:f2:3a:ac:
55:5b:82:10:64:f1:60:5e:88:b4:1d:65:4c:95:20:19:53:4e:
29:0a:3d:1f:27:d2:e8:c6:f0:43:0f:c3:7d:2a:da:25:2b:46:
8b:87:e5:db:46:ce:ee:76:c2:38:44:75:d9:f4:5b:03:05:ed:
88:18:07:67:80:ea:d0:d8:dc:ca:b2:93:a3:3d:38:09:3c:ca:
56:3c:96:dd:8b:e4:d9:35:e4:20:4c:2e:c7:26:5d:4d:bf:cb:
2f:b9:7f:68:3c:5f:ce:ed:52:b3:e9:a5:1c:02:af:40:68:09:
fb:78:1f:7c:e0:10:49:b7:ec:37:c7:65:0c:aa:5f:ff:d3:3d:
6d:20:32:88:69:b9:0d:60:ab:63:76:82:fd:a0:96:d8:b1:05:
05:63:48:e9:86:b0:75:db:ae:a9:65:d1:92:9f:9e:a1:31:51:
5f:2c:72:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:26:08 2025 by rpki-client