Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
File: TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json)
Hash identifier: bns5UcNgFmIK3AAzw+8tUIKT+xMO8wSiPaA2QQUV9M4=
Subject key identifier: 5A:25:67:44:28:13:3D:08:FB:EE:CD:90:0B:8C:A0:DB:ED:79:7C:FE
Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
Certificate issuer: /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Certificate serial: 0198D73B34AF4A80B1A52C72E9204B299A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 14:00:37 +0000
Manifest this update: Sat 23 Aug 2025 14:00:37 +0000
Manifest next update: Sun 24 Aug 2025 14:00:37 +0000
Files and hashes: 1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: qkKcRlAtfP17F+S5q4nPjCW1bXwUAtZlXjMZwMSr/oo=)
2: V-oDOUzOLBq0RjtBmicPhW9GyFQ.roa (hash: iuJ5R7a61uv63vftS3TPCits4UE3OCvlD1Io0BilMuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:34:af:4a:80:b1:a5:2c:72:e9:20:4b:29:9a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Validity
Not Before: Aug 23 14:00:37 2025 GMT
Not After : Aug 24 14:00:37 2025 GMT
Subject: CN=5a25674428133d08fbeecd900b8ca0dbed797cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:98:35:0c:b3:3c:3f:a8:a7:d2:a6:10:b2:1d:
68:cc:d1:c3:a1:53:4b:f2:40:69:c3:b8:77:06:b5:
1b:77:76:e7:82:67:bd:d9:29:31:61:fd:15:ac:9f:
9f:87:90:f2:29:65:5c:13:05:a8:9a:0e:27:05:31:
71:88:0f:84:7b:dc:b5:2d:97:1b:58:77:d2:29:31:
46:e7:d0:e5:fb:f9:6d:e2:43:74:4d:79:7e:04:5d:
dd:f5:bb:03:d7:7c:a7:6a:ec:57:40:10:da:3e:22:
66:b3:04:fb:72:28:d7:fb:18:71:e7:9c:01:bb:7f:
0e:2f:41:3a:8c:6c:25:3e:a3:a0:11:1f:74:0e:19:
ac:0a:a5:5e:2d:78:36:19:79:f0:75:ce:f4:68:51:
99:a2:56:c0:a5:e8:a6:91:9a:1f:25:86:a0:cc:dd:
7c:bc:12:e0:83:f2:74:49:41:1f:af:2a:3a:f6:0a:
3f:67:a7:9d:86:be:9d:80:07:78:b1:3c:bd:43:15:
1b:c2:f4:cc:99:b0:87:95:3c:6d:ba:da:b5:c6:12:
f1:4b:b5:f9:20:00:bc:1c:0d:f4:f1:5d:8f:d5:1c:
18:c9:af:64:5a:f6:13:63:c5:6e:68:b4:df:ea:35:
e6:b6:7c:d9:5e:ae:0a:2d:20:1f:07:19:48:41:65:
75:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:25:67:44:28:13:3D:08:FB:EE:CD:90:0B:8C:A0:DB:ED:79:7C:FE
X509v3 Authority Key Identifier:
keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1c:f1:96:60:32:41:8c:71:0f:82:cb:09:bf:f5:b4:0c:fa:
48:96:82:e7:26:a2:44:93:1b:93:f3:d1:0f:ec:03:a3:32:b2:
69:a1:b4:64:35:9c:80:f0:79:12:39:b0:09:88:ee:7e:4d:87:
85:46:d8:9f:9c:de:4c:d5:8d:5a:e7:de:2a:13:62:e9:50:6f:
10:94:fd:ad:be:8c:61:8b:ee:07:54:0a:07:69:bc:8d:c0:61:
ae:a2:02:94:1a:b8:a5:57:55:72:b1:f9:75:eb:49:b8:2c:64:
48:d9:a5:ff:6c:7a:ee:ec:59:1d:d8:b1:17:c5:2e:1f:71:de:
f6:2d:2c:1b:d2:5f:78:e7:f0:77:00:6e:a3:19:e8:75:86:70:
db:e8:e6:e9:51:c6:0f:a5:53:af:b9:55:84:59:03:c9:3e:b8:
0d:22:27:b0:92:0e:52:4c:67:4b:2b:2f:2c:17:7d:6f:72:fd:
29:07:fd:42:ae:47:74:18:e5:a2:50:da:21:bb:fd:43:e5:84:
59:92:cd:04:ec:06:c2:53:08:33:73:da:70:35:c4:6b:c8:95:
44:40:78:a4:ba:5a:41:51:7f:17:c0:97:e6:eb:03:a2:b2:1c:
d5:95:0a:bb:a0:88:37:b1:f1:17:68:f1:c4:1f:2e:7e:d1:5e:
ec:b6:4b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:47:28 2025 by rpki-client