Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
File: TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft (raw, json)
Hash identifier: 781lM/p3K3FMRKDe5AByH+5BuIrZKBPEzAMrYK2aoR0=
Subject key identifier: BB:BC:7A:32:4D:93:35:8D:A3:C4:87:48:A8:1F:0B:20:08:B2:83:16
Authority key identifier: 4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
Certificate issuer: /CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Certificate serial: 0198D51626AFACF9FEC27A1A68449311C930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 04:00:55 +0000
Manifest this update: Sat 23 Aug 2025 04:00:55 +0000
Manifest next update: Sun 24 Aug 2025 04:00:55 +0000
Files and hashes: 1: TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl (hash: rDByUby5cIrTCRb8aGEYu5R5477fKb/MbzzF3g4o2JM=)
2: bs1HYE5HpmfRDe1IWRWlAw4_YbQ.roa (hash: /9wCX+4PJTuFTnMcFlhOot3PdJrbFSkbu3ySPd314JY=)
3: kvulLtgS7l9j5cL5cr_z1UEgt1M.roa (hash: lwycUBIUeNB/fogCEgMYVAepQLASER5k8Ye40EXBAoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:26:af:ac:f9:fe:c2:7a:1a:68:44:93:11:c9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Validity
Not Before: Aug 23 04:00:55 2025 GMT
Not After : Aug 24 04:00:55 2025 GMT
Subject: CN=bbbc7a324d93358da3c48748a81f0b2008b28316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:36:2b:6b:08:a0:78:f5:51:d5:67:73:f4:d1:
14:b0:c1:24:c3:63:0e:68:34:7c:76:f1:7f:7a:3f:
a7:32:1a:c1:3d:0c:9f:f0:12:f4:64:ca:ff:f2:53:
fe:b0:7e:53:6d:cc:27:64:5b:af:9b:eb:4c:b0:d4:
94:71:ae:a2:ce:ae:41:23:77:ad:23:b8:23:f6:87:
16:1d:3d:83:0b:22:f0:79:b5:1a:bc:aa:26:80:a4:
eb:84:53:9c:30:ed:e2:2d:fa:01:b5:d0:cb:b3:04:
61:2a:ed:58:63:23:13:41:56:4c:e1:c1:f8:2c:32:
d9:41:e7:92:40:bd:46:fb:0b:cb:90:3a:90:07:63:
cf:5d:42:42:d7:0e:3b:86:9f:96:fb:18:e5:67:77:
86:27:36:7a:d9:71:64:53:f1:5f:9a:14:58:48:30:
06:e1:59:72:ba:ad:62:1b:c7:7a:c5:64:92:06:8b:
46:e8:2f:7a:41:02:8b:ca:db:52:ee:1c:a5:05:1c:
97:a1:12:3f:27:fa:ac:6b:ab:17:79:a1:81:14:9b:
6f:4c:80:f8:67:2f:c6:bd:36:bf:b8:09:03:36:75:
bb:e4:ad:3d:c9:4f:d8:db:d2:9a:f1:38:ff:7f:f1:
7f:9f:9c:39:93:d9:7a:04:9b:a3:55:04:15:bf:1a:
76:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BC:7A:32:4D:93:35:8D:A3:C4:87:48:A8:1F:0B:20:08:B2:83:16
X509v3 Authority Key Identifier:
keyid:4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:15:5b:a4:c6:20:02:b5:47:87:c3:61:bf:ed:ab:40:55:24:
f0:eb:45:32:c2:90:bc:13:f4:ad:37:ce:b9:bb:c7:4b:2f:73:
bc:6a:f7:39:3c:fd:8d:ac:7f:17:84:d1:bb:96:b5:26:61:b4:
a3:79:44:38:21:c4:87:82:8f:38:87:55:72:61:ac:02:f7:84:
b9:6d:3f:da:0a:32:4f:c9:79:49:70:a1:44:f8:d3:b8:f6:5a:
cd:6e:66:a9:c8:07:e0:bb:46:0a:b6:33:8d:67:02:92:0d:72:
ed:82:7a:c4:5d:4d:9c:5f:c5:1d:f5:7e:0e:de:47:47:77:c9:
b0:1f:ed:8c:e5:78:43:e5:de:80:4a:37:3e:de:04:06:8c:5e:
bb:0b:90:97:fb:3a:6e:24:61:35:20:82:cc:3a:b9:a4:e4:f4:
6e:96:e3:48:08:0b:5a:7d:29:2b:23:27:db:a1:f9:4f:a0:85:
a1:58:ae:22:cd:b8:ba:7b:ce:e8:66:cd:c6:85:a7:21:d6:c2:
f3:11:a8:08:5e:06:16:23:8e:46:b4:d0:01:69:e0:fe:99:ff:
b0:59:da:89:37:e2:7b:ff:71:5b:2c:ea:bf:40:18:25:24:92:
dd:d4:17:96:a3:88:c7:c0:d8:b0:2d:37:c6:ba:b5:18:bc:a9:
63:3c:79:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:42 2025 by rpki-client