Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
File: tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft (raw, json)
Hash identifier: 4OviYyVZAmbkaVCcI38gpAj+XxRxCUlXuYWo3ctDQw4=
Subject key identifier: 41:FE:A9:7B:7E:C9:50:AA:F4:A5:EA:83:0E:10:32:0A:62:CE:78:18
Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Certificate serial: 0198D4735C399CE3A2C6E9027B4DA2645087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
Manifest number: 08E7
Signing time: Sat 23 Aug 2025 01:03:06 +0000
Manifest this update: Sat 23 Aug 2025 01:03:06 +0000
Manifest next update: Sun 24 Aug 2025 01:03:06 +0000
Files and hashes: 1: Tj8ieaPk-ZVdznj4QGZQsDa6PTU.roa (hash: rpKu+SpVkA4o9g3c9SIuQedHFHqzu4mcB4TaNuy/SKw=)
2: tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl (hash: BJbsLQxmkxat0+u/fWzMpl+MSPazbO0dn/IRplXAf+0=)
3: uWZIzr5sI_obeqk4P_AP6Hrzzsc.roa (hash: Ao6L2xVS/ORm+dRe6MtZy2PpenoZKqpKXENIdtVG26s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:5c:39:9c:e3:a2:c6:e9:02:7b:4d:a2:64:50:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Validity
Not Before: Aug 23 01:03:06 2025 GMT
Not After : Aug 24 01:03:06 2025 GMT
Subject: CN=41fea97b7ec950aaf4a5ea830e10320a62ce7818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:90:c8:b7:ae:04:62:cc:a3:eb:62:2e:63:
ab:16:ab:45:13:0d:09:71:2b:93:08:9d:b8:7b:f6:
c9:29:e2:8c:0e:5c:dd:55:9e:ff:d7:38:7b:53:a0:
bf:e6:3a:52:5b:cf:16:fc:35:0f:71:02:9d:8e:75:
7a:47:44:3e:ff:f5:67:d7:ed:36:81:5e:c8:be:80:
24:de:dd:01:3b:e0:0c:a5:c3:3d:ac:a6:1a:e5:53:
2b:cf:1d:b8:72:41:34:8a:73:d5:aa:98:19:7b:b2:
5e:25:bf:ca:de:76:08:d6:9e:b6:a1:0c:03:0b:f5:
02:8f:14:37:50:29:4f:a6:21:e7:d5:ef:8a:15:3e:
57:2a:2c:6c:e1:0c:86:a8:2a:7c:4a:d2:15:94:e4:
c7:c1:cc:55:c7:ac:c6:54:80:25:c6:b0:9c:11:fc:
5b:89:21:60:d6:26:5e:16:58:33:e5:6f:c7:7a:de:
ec:aa:4c:16:79:af:0c:9c:0c:d4:57:bd:b9:92:e2:
f0:db:14:ef:5f:dc:cb:40:e9:fc:57:65:42:1c:49:
4e:3d:10:ec:27:61:ce:fa:4e:8c:39:34:55:ad:11:
0d:75:16:47:e8:dd:94:3f:73:25:71:a5:f3:fa:3c:
b2:f1:b9:ac:27:c9:f1:bc:19:b1:c7:66:20:db:12:
9f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FE:A9:7B:7E:C9:50:AA:F4:A5:EA:83:0E:10:32:0A:62:CE:78:18
X509v3 Authority Key Identifier:
keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d4:e9:bf:74:ee:cb:fa:ad:a8:02:a7:02:ac:72:fc:c8:98:
b4:be:ad:e8:fe:6c:59:31:44:a1:25:d0:75:1c:ed:3d:aa:65:
a7:0e:97:d6:12:52:31:9d:d7:52:a8:c6:31:b9:32:07:2a:32:
b4:77:3d:a4:d9:b8:e2:28:c1:16:f5:26:80:17:e5:0a:01:78:
af:be:80:16:39:cc:62:83:a9:e6:7b:c3:c5:f0:52:a6:8c:9f:
7c:5b:f2:a8:44:02:22:aa:ca:20:e3:8e:87:fb:17:7b:22:72:
e1:00:9f:dc:c5:48:ab:e5:ab:36:29:8f:8b:fd:4d:eb:12:af:
6a:1c:0b:cf:df:c4:1a:e7:a6:dd:d5:03:b4:ba:e4:9b:0d:94:
5f:08:5c:59:b2:80:f7:ad:e7:22:6b:1c:a0:ef:54:61:2f:05:
fa:5e:de:e0:3d:c5:d2:2e:45:66:e6:59:17:d3:fd:60:70:31:
3f:17:75:28:9f:c7:b9:0d:79:5c:12:ef:41:62:40:68:b6:60:
08:83:e3:a4:f4:91:94:85:69:03:fb:65:5f:51:9d:f0:b2:16:
99:eb:56:2b:26:8b:aa:9c:00:b2:81:7b:16:95:c2:8a:9a:ac:
53:0e:ef:00:b2:9a:df:f0:6e:9c:e5:4a:83:88:cb:d8:fc:be:
f8:6d:7a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:11:07 2025 by rpki-client