
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
File: tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft (raw, json)
Hash identifier: KDYk8xQVdOY28T1LR0oJTyv9dboOvcXCJQbl82Fl1fU=
Subject key identifier: 48:70:F1:AB:77:35:D4:44:B4:9B:04:6E:6B:59:0C:52:85:40:F6:C3
Authority key identifier: B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
Certificate issuer: /CN=b46320188098520c366277f749a4f77a1d444439
Certificate serial: 0198D65F5EC9D40BF9AF0A42B5BA7477B0A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:00:31 +0000
Manifest this update: Sat 23 Aug 2025 10:00:31 +0000
Manifest next update: Sun 24 Aug 2025 10:00:31 +0000
Files and hashes: 1: 1c-Abo0LxBVDDE4sBrG9JS_ePzI.roa (hash: rxDs0I1CVbIWmreeYb6ePZfwtg9Spev7LU71wCrsp/4=)
2: tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl (hash: PYnT65eVuHR2ipd2JjJLQx6JDyYEKqtfkmbfJA/E0hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:5e:c9:d4:0b:f9:af:0a:42:b5:ba:74:77:b0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b46320188098520c366277f749a4f77a1d444439
Validity
Not Before: Aug 23 10:00:31 2025 GMT
Not After : Aug 24 10:00:31 2025 GMT
Subject: CN=4870f1ab7735d444b49b046e6b590c528540f6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ab:83:01:dd:b8:f4:4d:26:11:56:bc:f9:1d:
eb:3e:ec:3f:e7:04:a2:8b:12:75:b4:17:70:16:87:
cc:4b:59:ab:76:31:84:19:d4:dd:c5:c7:46:72:9f:
0a:37:b1:44:d7:b6:02:6c:c8:d3:b1:e5:ca:85:2d:
2f:0b:0a:4f:7b:cf:6f:da:a6:c5:dc:23:01:47:a3:
37:cc:11:22:bb:6a:53:12:81:f6:ba:1f:cf:92:ae:
76:c5:97:a8:26:0b:9f:84:58:f2:6a:b8:af:18:63:
03:ec:63:3a:58:db:c8:0e:1d:aa:ad:ff:0c:4a:fd:
90:7c:fb:86:a1:2d:9a:76:39:66:59:b7:53:d4:a1:
5a:26:25:7b:42:c3:ca:5a:d1:8a:64:cb:31:4d:a8:
ca:c1:c5:af:f7:ed:e5:52:a7:56:4c:d7:65:7f:8e:
3d:36:0f:82:26:bf:8b:1d:43:78:9b:cb:28:a4:78:
6a:32:7e:79:5d:83:83:7a:b5:c2:0f:25:fb:19:86:
00:34:d6:df:a3:f9:4d:45:d5:5d:ea:61:04:60:aa:
07:4b:d7:8d:59:98:02:19:31:a2:47:1a:31:bc:98:
4e:ca:2e:d4:fe:5c:b8:24:e4:4c:bd:da:ad:72:af:
b1:4a:39:ad:77:4d:6a:95:f3:54:fe:64:52:bc:96:
7c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:70:F1:AB:77:35:D4:44:B4:9B:04:6E:6B:59:0C:52:85:40:F6:C3
X509v3 Authority Key Identifier:
keyid:B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a8:71:9a:98:56:8e:51:31:52:d6:5c:31:f3:db:83:30:95:
cc:f3:ed:75:4f:11:bb:84:13:b6:39:7f:56:bc:95:1f:eb:9b:
0b:59:18:0d:79:cd:24:9d:24:01:c5:7a:54:09:1c:2a:58:19:
e6:23:cb:60:7b:8a:cb:aa:37:7f:6c:7d:14:a9:f0:dd:8a:30:
91:2b:9b:0d:aa:a3:59:56:21:13:01:67:00:2b:ca:fe:51:78:
ce:1b:19:9e:c0:8a:d5:be:39:ba:b1:c6:45:ef:2c:29:ac:90:
17:b0:10:3b:99:0f:73:af:01:7a:d9:cc:76:8e:70:bf:21:b9:
0e:d0:04:3f:3e:8e:1d:34:4e:e1:71:86:b8:de:42:2b:26:b4:
69:8a:78:2c:3c:2d:c9:eb:ef:4b:52:cf:9e:a4:99:30:b7:05:
37:16:a4:44:6f:55:01:9d:a5:c3:d5:4c:d7:98:66:01:65:1c:
0f:36:7f:1e:71:1a:2b:40:46:ba:76:75:cf:10:63:2d:84:dd:
b8:25:bf:7e:c0:06:e7:8f:c2:1d:7f:02:c1:1c:3f:3d:2e:ed:
7c:4e:31:11:5d:8c:6b:0f:45:0f:0c:86:71:35:1b:90:94:dc:
a1:45:f9:d0:cf:61:30:26:29:42:61:b2:b7:f9:a0:7b:64:1b:
19:f4:5b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:23 2025 by rpki-client