Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
File: tUXkNLukc3BtqDNv2gFrsuaLNiM.mft (raw, json)
Hash identifier: D2sClcKytEpDDQAzHk5N3CGiQyHYhDqH8MLHNde/Vz8=
Subject key identifier: 52:43:7B:5A:B9:87:08:4E:BB:E8:C5:C8:94:D0:C0:F7:E9:2F:2C:27
Authority key identifier: B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23
Certificate issuer: /CN=b545e434bba473706da8336fda016bb2e68b3623
Certificate serial: 0198D65F65A460BC7E6DA6CA8CB855A30EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:32 +0000
Manifest this update: Sat 23 Aug 2025 10:00:32 +0000
Manifest next update: Sun 24 Aug 2025 10:00:32 +0000
Files and hashes: 1: 8c1jWLNSWx4cTuK9ZEnAPJAmwwU.roa (hash: zNldb7jsDCF4ycQz0X2hLLJLeALZnhbBqN35ToOj1oI=)
2: tUXkNLukc3BtqDNv2gFrsuaLNiM.crl (hash: 33+aFowVdhZ7fWi3QhTKYmQAKEvy4ErJ0iPqxtkKbCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:65:a4:60:bc:7e:6d:a6:ca:8c:b8:55:a3:0e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b545e434bba473706da8336fda016bb2e68b3623
Validity
Not Before: Aug 23 10:00:32 2025 GMT
Not After : Aug 24 10:00:32 2025 GMT
Subject: CN=52437b5ab987084ebbe8c5c894d0c0f7e92f2c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cd:46:04:7c:55:3b:93:8f:16:c1:cf:3d:72:
78:d4:28:e5:b0:17:2a:e2:2d:46:e0:1a:d8:87:86:
72:b5:c0:c5:7a:1a:dd:76:bd:67:25:49:5d:e9:28:
42:6d:8a:e3:32:13:ad:01:9a:22:0b:3f:45:4a:1f:
30:7d:42:fd:79:1f:0a:4f:5c:d8:bf:96:26:29:62:
8c:c9:ac:24:0e:84:97:58:c4:31:73:92:54:14:f1:
02:25:8b:8a:50:79:1b:82:30:5f:29:44:a4:d9:3b:
ed:a8:0e:1c:93:cd:f1:a1:44:45:31:d5:66:91:ea:
e4:3c:a8:2e:e1:a5:6c:a0:d3:a3:b9:81:27:98:1c:
e8:03:9e:6b:cb:98:2d:2f:e0:31:00:e3:4c:4f:57:
0f:25:70:5c:11:f5:7a:b0:18:4d:bb:99:5f:07:cf:
43:67:ef:40:7f:a7:c9:85:fb:00:d2:4e:ac:fc:5e:
49:f6:5b:04:1c:d7:8b:09:52:bb:01:94:82:f2:12:
a1:21:8f:78:1e:07:5a:ab:f1:d1:90:10:ca:91:19:
e2:12:e8:a9:35:bd:22:7e:e8:95:95:92:2d:a3:55:
15:53:b7:a2:af:3d:2f:90:7d:0f:1d:82:d1:a4:78:
02:dd:ab:d7:ac:0d:b9:1f:63:03:fb:a6:0b:f5:cf:
7c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:43:7B:5A:B9:87:08:4E:BB:E8:C5:C8:94:D0:C0:F7:E9:2F:2C:27
X509v3 Authority Key Identifier:
keyid:B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:38:e3:0d:04:e3:1e:91:99:24:32:39:c3:f3:af:1f:b9:2b:
53:c0:1d:53:7b:8d:e5:17:66:84:da:eb:1c:38:f3:aa:53:2b:
81:1c:39:0d:26:24:49:c8:c6:29:5f:1d:3b:30:68:9b:06:f5:
63:7c:20:ed:a5:4d:1b:2a:36:88:30:0e:af:60:11:5b:c9:c3:
11:b7:a8:8a:26:d5:c0:e3:68:93:4e:0e:a0:30:df:ff:79:21:
a3:ad:e8:4d:76:a5:0b:d1:44:e3:b7:54:93:20:e9:9a:e8:93:
ec:3a:cd:61:a9:2c:c2:05:62:4c:6c:7c:04:69:5f:07:d6:de:
fb:fc:97:5c:1a:06:7d:11:6b:69:a1:e6:70:f9:48:5e:e0:2b:
0d:04:c8:45:ee:2d:82:2e:ce:5d:c0:7f:ea:38:0d:f2:e6:fa:
39:19:c6:81:7b:d8:fb:b0:fb:a4:56:a3:5d:6e:f7:51:ce:5e:
d0:e1:dc:82:57:d8:ae:9c:ba:88:f6:87:ee:fb:da:5e:04:2c:
c2:3d:ba:bd:66:8d:c1:14:53:99:7e:de:cd:c3:77:4b:af:11:
f8:a3:10:73:a2:0d:a4:a2:2c:2c:ed:ad:79:0f:38:2a:fb:23:
7a:d5:32:a5:de:36:17:73:a1:17:1a:8a:7d:65:e2:bb:b8:92:
de:4c:ec:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:51 2025 by rpki-client