Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
File: t6hswzTG4Oq4PyUr2D7ulWklykA.mft (raw, json)
Hash identifier: 5OcoXNktPVltYkNVY/O+ewq2gE7zzN5val8MH3EASVU=
Subject key identifier: 00:25:06:39:E8:AC:5E:F2:39:8F:28:5D:5E:92:4B:F1:0B:3D:D7:FE
Authority key identifier: B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40
Certificate issuer: /CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
Certificate serial: 0198D4E0DBE0979F377A98648B6ADA0A0012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 03:02:42 +0000
Manifest this update: Sat 23 Aug 2025 03:02:42 +0000
Manifest next update: Sun 24 Aug 2025 03:02:42 +0000
Files and hashes: 1: YDZQqJLg6f9-JdbHT4bYmgUJjh0.roa (hash: cInsk0zvLYwt9OlQZPLFwtQxycESn1Vx2ttrJFC0hi8=)
2: t6hswzTG4Oq4PyUr2D7ulWklykA.crl (hash: jccuiDa9YKRez3XZVyrfPzIt7lEL8EKp0nuIc1047mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:db:e0:97:9f:37:7a:98:64:8b:6a:da:0a:00:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
Validity
Not Before: Aug 23 03:02:42 2025 GMT
Not After : Aug 24 03:02:42 2025 GMT
Subject: CN=00250639e8ac5ef2398f285d5e924bf10b3dd7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5d:9a:f8:0a:82:b0:6c:80:14:73:27:c3:fc:
f6:88:93:9d:02:65:84:33:4d:b9:b7:87:9e:7c:27:
7b:14:26:71:af:14:ec:75:dd:15:8d:97:74:d3:8c:
0c:0b:12:99:3f:0f:e6:c5:c3:a4:da:0d:7b:4a:68:
6f:1f:5f:a6:1d:b2:4d:93:01:d7:1d:bf:82:09:d0:
90:92:eb:b9:4c:3a:63:81:eb:3f:b9:4c:4a:67:4b:
92:c7:0f:8f:2e:7f:1f:b8:f9:87:61:b1:bf:e5:bb:
26:3f:13:20:95:41:b5:86:fc:9a:80:c3:ba:ad:34:
8f:d1:aa:d3:e9:6b:f0:d0:c6:e3:7c:08:2f:fc:5f:
2e:34:53:a7:c9:01:44:2e:db:4d:b0:8c:e5:62:76:
76:c5:56:3d:b1:d4:cd:ba:e4:f4:d8:4e:32:75:cf:
65:a0:9d:fb:1f:b2:fc:e1:88:da:29:74:ff:9b:00:
2c:44:40:d8:2e:ce:74:b8:80:bc:fe:1f:4b:a4:cf:
17:f1:86:f2:12:46:aa:b4:f1:ee:df:54:7e:46:6c:
be:6c:c6:1b:cf:79:2c:ca:4c:2b:86:e5:14:8b:71:
ac:4e:91:24:1b:0e:4c:06:18:09:76:b1:cb:ab:50:
2a:25:94:58:d6:e2:a2:10:fb:b4:71:de:23:28:74:
03:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:25:06:39:E8:AC:5E:F2:39:8F:28:5D:5E:92:4B:F1:0B:3D:D7:FE
X509v3 Authority Key Identifier:
keyid:B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:cf:0d:d9:0c:9e:71:c5:8f:97:b8:41:cd:8c:fc:b9:63:84:
c9:59:b1:7c:dc:da:65:64:80:2c:f3:d6:05:50:b5:11:ee:f8:
65:94:ac:a0:3f:91:4d:31:50:67:73:09:62:b4:21:ab:05:af:
47:48:af:91:19:a3:6b:82:1e:b9:d9:89:69:61:de:20:50:18:
68:ad:be:72:5d:5b:9b:cb:3a:f2:26:92:fd:92:f0:f3:af:1d:
a7:5b:01:15:5e:88:8e:93:bd:1c:3a:d0:48:c3:55:0a:08:e8:
b8:0a:1c:7f:29:01:c9:ca:cd:3f:9f:9f:c6:86:7c:0e:b3:31:
6a:98:fb:f1:22:63:27:08:d2:1a:53:e0:4b:9c:03:16:da:e6:
2e:87:0d:b6:0a:80:56:82:82:81:38:90:2e:b7:0a:0e:ba:48:
cd:48:63:d8:1a:66:a8:37:21:ee:24:34:a7:89:7d:c7:12:5d:
90:68:8d:5d:a6:67:1e:40:a7:d3:23:f6:62:87:5f:2f:23:2e:
b0:5a:5f:d9:07:7c:2d:2f:db:ea:05:de:01:73:0a:17:5e:fb:
e2:cb:4f:8b:a1:15:6b:88:d7:e1:48:9a:11:49:a5:c7:0a:d4:
00:55:c5:71:72:0b:c0:8a:3a:20:c0:81:fc:98:53:12:cb:6a:
b6:37:13:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:04 2025 by rpki-client