Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
File: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft (raw, json)
Hash identifier: Ze6WuRr99yirzwS/n5WsKekdRIeUYIirEBRo0K1OvR4=
Subject key identifier: 95:53:E1:FC:F6:EF:2E:8E:81:45:1C:66:7A:23:42:26:DF:D3:A0:7C
Authority key identifier: 4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5
Certificate issuer: /CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
Certificate serial: 0198D54E716A80943EE8098E4AFE03817BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
Manifest number: 0D2F
Signing time: Sat 23 Aug 2025 05:02:24 +0000
Manifest this update: Sat 23 Aug 2025 05:02:24 +0000
Manifest next update: Sun 24 Aug 2025 05:02:24 +0000
Files and hashes: 1: 4f1jI7-qAw-Fm-OtnESqUBoebm0.roa (hash: Yj15262IImuG/zvO4RGd+KynWz9BG4CJpl9H3lrssA0=)
2: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl (hash: kD7YwAAR0Md4XOhGNWBR2IWtnMOUYGV38E7Ks1+txy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:71:6a:80:94:3e:e8:09:8e:4a:fe:03:81:7b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
Validity
Not Before: Aug 23 05:02:24 2025 GMT
Not After : Aug 24 05:02:24 2025 GMT
Subject: CN=9553e1fcf6ef2e8e81451c667a234226dfd3a07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7b:7d:da:1d:f0:a2:88:14:9e:9e:f9:c7:46:
45:8a:4a:51:1e:54:e5:81:93:8f:61:55:94:e2:51:
17:b9:fe:41:d2:90:9f:bc:25:fb:79:e2:78:3c:45:
ce:24:87:e6:4b:f3:8b:bb:f3:25:e1:04:3b:6f:0a:
d3:3f:27:7a:b8:cf:89:fa:97:77:a5:0e:3c:f0:b2:
09:72:29:df:d3:bd:af:44:a8:95:17:f7:42:29:a1:
98:95:72:ce:97:69:ed:d2:15:af:2d:c3:63:0b:f0:
24:37:23:16:cb:f9:09:a8:3c:8c:2d:95:df:a3:fd:
14:af:86:20:1a:57:19:9e:43:bf:27:d6:4b:e4:ba:
a3:13:60:86:f6:6d:e0:79:e0:eb:85:3f:3b:e0:fb:
3e:a2:4e:89:60:1f:fe:2f:6b:40:fb:9f:01:6c:d0:
02:58:d9:6a:e1:71:95:46:86:24:07:c8:aa:45:e9:
a0:61:ca:ab:ff:fe:ad:92:8d:d1:be:da:cc:46:d6:
cf:07:cc:97:33:1e:7d:9e:3e:f8:d7:5c:b8:62:bd:
de:fe:2a:22:f5:e7:6f:49:a7:fa:07:f7:94:5f:3e:
b3:18:b2:d2:74:c6:ab:c6:a4:ca:26:f0:d6:ed:a3:
43:7b:b3:0b:8d:9a:d6:7f:51:9f:f6:7b:c0:c4:e3:
95:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:53:E1:FC:F6:EF:2E:8E:81:45:1C:66:7A:23:42:26:DF:D3:A0:7C
X509v3 Authority Key Identifier:
keyid:4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:49:30:14:93:eb:bc:a0:d5:86:d0:f4:4b:bc:9b:e0:fb:07:
b1:cc:df:fd:84:c5:77:0b:13:e8:b5:cb:ca:ac:6c:71:0b:28:
c2:e9:79:af:15:7e:41:60:4c:ed:89:57:6f:ba:4f:fd:ad:d9:
49:14:2c:98:dc:87:56:85:f8:a4:0c:ea:ae:a5:fc:7d:74:35:
06:c3:07:c5:65:a1:8a:94:fc:ee:d2:c6:e1:d0:76:2f:3f:a5:
fa:e7:36:af:7d:a8:6b:c1:76:80:98:31:4f:20:4a:4d:db:ff:
56:20:7c:9c:99:02:3f:01:12:24:e5:33:bd:0b:0e:53:51:30:
55:04:47:ad:de:b4:2a:60:c7:d2:0e:7b:1d:91:05:dc:69:10:
7c:6e:07:07:e5:65:20:47:70:84:4e:53:f3:b7:cc:ab:59:eb:
36:a2:02:6c:6b:94:f5:39:9a:68:85:e8:56:d3:06:26:24:12:
91:1f:a5:69:95:30:d7:fd:44:e3:08:87:cd:ae:ad:76:a0:15:
b9:50:3f:e1:6e:29:b2:f0:c8:01:57:5b:96:99:e8:08:d6:63:
77:85:80:e0:68:30:a9:b0:fc:fb:b5:f0:19:50:a0:bc:0c:94:
bf:d3:b6:1f:80:c8:6b:52:8b:4f:f0:db:4f:58:2e:ee:e1:cb:
c7:a0:26:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:07:10 2025 by rpki-client