Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
File: tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json)
Hash identifier: X5ABlO1WENidO2SyGcf3E9bYwj5hGPwRkxqpj2hp/hw=
Subject key identifier: 27:A4:D4:86:58:ED:85:39:8D:26:17:43:07:EB:C7:E0:86:FC:30:6A
Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
Certificate issuer: /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Certificate serial: 0198D5F16A25BEB0AACA090CDA146B707F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 08:00:24 +0000
Manifest this update: Sat 23 Aug 2025 08:00:24 +0000
Manifest next update: Sun 24 Aug 2025 08:00:24 +0000
Files and hashes: 1: bCO5bqFLQTtaSqSwTRLhrpm3wCA.roa (hash: xHiR4ALGk4+cM6JODCM19LWc7pantvAdvK3viET0qj4=)
2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: AKh8Psqfs6JTX9GlJMxkSAoQkUZiJ8ly8jgwocwTLDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:6a:25:be:b0:aa:ca:09:0c:da:14:6b:70:7f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Validity
Not Before: Aug 23 08:00:24 2025 GMT
Not After : Aug 24 08:00:24 2025 GMT
Subject: CN=27a4d48658ed85398d26174307ebc7e086fc306a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:c6:78:35:f6:ba:70:7a:86:5a:e5:63:2e:
29:52:71:7f:63:79:7e:e6:00:77:88:5e:7f:92:e5:
db:d3:d8:7e:31:79:25:8d:94:cc:1f:7d:d8:6a:72:
ff:e0:7f:29:a1:b5:36:2e:b3:29:f2:ed:67:14:8a:
bf:fd:a8:b7:b9:4c:4f:13:56:ea:ad:bc:2a:b0:0e:
ab:75:28:5a:dd:9b:58:68:e5:2e:55:34:f0:95:02:
a9:ba:37:da:b0:35:bf:0e:35:63:8c:84:c4:39:30:
ad:54:6f:82:cb:97:10:b1:79:d7:dd:54:2d:2e:21:
25:00:05:8b:11:d9:ce:a6:2f:cb:3c:05:ae:48:c7:
38:b7:2a:55:70:fd:fe:43:d1:74:05:48:f0:8d:a3:
b5:97:db:8a:15:94:09:9b:94:e8:cd:37:51:6a:60:
66:96:58:0b:91:8f:90:d0:b8:7c:d9:5a:df:bd:85:
19:33:0e:7c:b1:bb:8c:10:65:74:05:74:a8:00:81:
9b:32:ac:0a:21:23:ef:30:57:ad:7e:ac:fd:e5:a6:
c7:65:63:35:14:4a:04:f2:ff:ea:1e:69:b1:1c:ae:
1c:47:57:7a:f0:6c:93:f7:e8:68:31:06:6f:c3:88:
8e:4c:3a:99:a1:0a:6c:aa:ca:2c:75:f1:99:17:b4:
f3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A4:D4:86:58:ED:85:39:8D:26:17:43:07:EB:C7:E0:86:FC:30:6A
X509v3 Authority Key Identifier:
keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:08:56:51:20:02:fd:de:d1:40:c0:48:ea:b4:ef:86:2e:68:
ee:50:d4:b3:c1:22:0d:28:69:0a:39:d3:d6:2c:32:84:53:a5:
d1:3f:4e:2b:26:5f:be:db:1f:81:bf:66:a3:b7:6d:8a:3a:10:
13:d7:05:2f:d0:ea:57:cf:8d:68:d4:4f:2e:f9:ae:ce:62:b3:
8f:f0:50:9f:c1:08:db:a0:28:89:da:01:9b:48:7e:68:4a:f1:
f4:bb:e8:fa:7a:61:8b:48:8d:d2:40:21:e9:7b:cd:d3:9f:65:
64:8c:2c:f6:cb:ff:7e:f7:6f:7d:fd:64:13:ad:91:58:38:c0:
09:ae:ae:08:95:11:2c:73:af:50:7c:9c:8d:3d:2a:f3:94:0f:
e2:eb:f1:dc:4e:93:65:29:cf:81:59:83:f0:30:39:ce:ee:f3:
59:b9:b3:e1:e1:a1:32:a2:71:ee:20:02:8f:47:5b:38:b7:a3:
96:03:fa:65:c5:16:d5:e5:fb:20:ea:5a:16:be:9e:a6:78:60:
94:83:61:e3:37:39:10:e7:d6:da:5b:74:a7:b9:a8:fd:19:0c:
88:28:66:76:6b:1c:a4:f5:d6:ac:3b:07:9e:83:d0:cd:ce:03:
df:fe:a3:03:80:d7:01:28:d9:90:17:2a:89:9d:d5:b1:b1:a9:
14:b7:03:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:33 2025 by rpki-client