Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
File: tkB0qoRJgw2psgs6-waC08Ay-f4.mft (raw, json)
Hash identifier: ehxN2GH6JQpcXonEAEiaH6NggV09V7HMToT17Y2JMZ8=
Subject key identifier: 27:B8:85:D9:DD:9D:BF:0C:B5:35:F8:94:D5:C7:7E:9A:4C:2D:93:C0
Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Certificate serial: 0198D5163BB3A67D4862C78B61AED25BA1A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 04:01:00 +0000
Manifest this update: Sat 23 Aug 2025 04:01:00 +0000
Manifest next update: Sun 24 Aug 2025 04:01:00 +0000
Files and hashes: 1: BdOIN-x7p5NQNZFat3HBRk8aNP8.roa (hash: E6O+SQKCroETYNOj7yjRqDXwGgY2i2+LPEeaEfVM6HA=)
2: SvbWjBtA5USrFJEFyfsvP-SCofs.roa (hash: La++FukCI88aoCCAWTG9ojz1zryPe+WC1BNRSElIvDw=)
3: ZqMh09XL_OuL0ICq-TfvGdj4pmM.roa (hash: l5g5wXS3ZWKojPoOXqpehHnI+SHAfeYcurBv6Xo/WU8=)
4: tkB0qoRJgw2psgs6-waC08Ay-f4.crl (hash: nrguKvvteqY0aBBhrz17MNckI8OuvmNBkVZGyiup0pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:3b:b3:a6:7d:48:62:c7:8b:61:ae:d2:5b:a1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Validity
Not Before: Aug 23 04:01:00 2025 GMT
Not After : Aug 24 04:01:00 2025 GMT
Subject: CN=27b885d9dd9dbf0cb535f894d5c77e9a4c2d93c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d7:f9:aa:89:d1:ff:19:ff:c1:0c:23:f7:44:
b8:f4:99:82:34:01:5a:0a:b5:9e:6d:8c:72:b4:2c:
83:ca:2f:4e:c8:cc:a3:f7:1b:93:27:64:01:e8:13:
f3:67:a5:3a:80:94:1e:f7:b7:78:e4:08:a6:55:46:
1a:61:3b:c9:c9:a8:12:c0:39:80:92:02:f4:64:59:
ba:f4:78:ff:ce:55:e1:4c:1e:d0:62:5d:79:1d:2c:
8b:45:87:8f:bf:4d:b1:82:d5:40:99:47:64:83:d9:
52:47:80:ed:da:9d:5d:e8:76:89:a6:d7:67:a1:c5:
4c:d0:6f:8c:2d:41:73:d3:6b:57:40:95:8e:98:e5:
c2:23:1d:e2:77:b6:58:30:d4:0f:ae:22:d8:91:36:
bb:82:d6:5d:a3:8f:17:11:6f:f0:62:13:62:07:25:
65:0a:ab:52:4f:3f:df:e5:25:6b:ea:d1:6b:99:31:
16:d6:51:73:f3:f9:f3:ee:50:56:f7:02:3d:5d:ac:
57:03:4e:49:4f:ee:b9:ce:9b:dd:b5:c5:c7:60:f6:
08:3d:d6:ac:1f:64:0c:bf:a3:85:7f:b1:ff:11:4e:
98:1a:9a:3d:7f:da:30:29:b5:05:91:c2:a8:31:eb:
56:a2:ff:c0:59:14:1d:ec:f3:21:a3:07:da:cd:44:
3c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B8:85:D9:DD:9D:BF:0C:B5:35:F8:94:D5:C7:7E:9A:4C:2D:93:C0
X509v3 Authority Key Identifier:
keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b3:e0:08:95:08:5c:26:4d:15:c3:7a:a6:ae:4d:24:a3:b6:
82:c6:57:6a:c4:24:5b:3b:c1:d5:df:09:56:59:23:da:2d:33:
27:d9:84:8e:2b:83:a3:e3:ca:ff:90:0e:d5:41:d0:b7:3c:60:
25:66:96:e2:86:7e:d9:f8:fd:d5:d8:d3:ce:ff:f7:0c:29:2b:
c9:0e:b6:2b:a0:7e:d5:c5:08:48:81:40:f0:74:61:d1:0c:be:
b0:86:df:f2:36:5f:cf:d2:a0:b5:b3:aa:5e:1a:b7:49:69:0a:
f6:cd:96:3d:ec:d5:db:fc:e5:2b:5e:a8:5d:97:5b:ed:eb:a0:
25:04:46:8f:fd:a3:13:eb:1d:84:1e:00:52:f3:6e:a0:2e:e4:
a2:d2:78:f3:a3:69:6b:48:b8:73:e3:14:80:6f:67:35:41:a9:
1c:1a:99:ff:87:3f:35:bf:9f:4a:cd:ba:b8:ba:23:1f:8a:51:
64:1d:de:37:3b:4c:79:ea:9f:6b:f0:76:95:3b:eb:cd:d2:12:
7e:2e:dc:13:fb:e6:f0:34:8b:72:f4:8f:8b:bc:e4:74:82:a4:
61:fa:28:11:37:ff:1c:e0:cf:be:55:7d:c0:17:2b:a0:a5:33:
f9:00:d1:3f:9d:db:8a:50:15:2d:b7:d8:75:7e:25:93:8d:09:
33:93:f3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:37 2025 by rpki-client