Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
File: tBhner86ruA2zUrdd9ZhlvzeTG0.mft (raw, json)
Hash identifier: O+EYHUZyywMepRcejTN9RtAZG8AnzEsDluIRUC8TgeE=
Subject key identifier: 00:5A:F3:1D:DE:BE:76:32:A2:98:B2:16:E6:E9:5A:84:CD:30:0C:69
Authority key identifier: B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
Certificate issuer: /CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Certificate serial: 0198D4E05FA2AD17B01F5218836C86478AC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
Manifest number: 0F18
Signing time: Sat 23 Aug 2025 03:02:10 +0000
Manifest this update: Sat 23 Aug 2025 03:02:10 +0000
Manifest next update: Sun 24 Aug 2025 03:02:10 +0000
Files and hashes: 1: GluX1bXAOCEKoiPGiqd94CJ3PnQ.roa (hash: Ni4Tstwu0GgIgTRS0r/kMJY1nK24hB/s3xhSSr7BatI=)
2: sUg9MVJbpnKjp6n_qVdxGGSeJB8.roa (hash: iazJ3Yw/lvASdOuiaEdBPRq3HWHdL5Kxvj+o3m8saWE=)
3: tBhner86ruA2zUrdd9ZhlvzeTG0.crl (hash: J9F9gyWQKhiqR64vsz/6FRWd8DDHRjinzOW8IXVfnSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:5f:a2:ad:17:b0:1f:52:18:83:6c:86:47:8a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Validity
Not Before: Aug 23 03:02:10 2025 GMT
Not After : Aug 24 03:02:10 2025 GMT
Subject: CN=005af31ddebe7632a298b216e6e95a84cd300c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6a:7a:43:19:98:21:6b:eb:8a:48:34:69:c4:
53:1c:6d:6a:eb:94:36:fc:ca:19:f7:37:07:41:31:
5f:1b:ca:8c:9a:96:80:70:b7:8f:1b:76:ad:cb:ac:
c7:31:0e:9b:00:04:d9:ea:e9:62:30:50:d7:51:10:
60:e3:83:0b:ea:05:5c:cb:2f:db:69:88:91:05:8a:
4f:5b:ae:e5:c7:2f:12:e0:a3:65:f0:a6:b4:5a:70:
b7:5a:4e:f4:3b:8c:b4:97:21:16:47:98:5f:cc:42:
44:c1:2b:27:21:39:c2:3b:b8:ab:df:bf:e1:24:83:
18:7e:ba:c7:b0:da:72:43:2f:67:84:63:ea:8f:1a:
6c:39:dd:f3:8c:d8:ab:0a:3d:e9:f6:35:d8:e5:5b:
8d:bb:e2:23:c0:81:e9:50:96:33:cb:e7:d9:62:c2:
b5:4f:c8:df:ff:30:58:e0:1b:06:78:82:0e:4e:53:
a4:b0:33:2d:4e:5a:84:3b:2f:de:ca:2f:8e:23:d8:
33:e6:73:3e:fa:78:a3:56:fa:22:2a:a8:89:0f:7b:
b8:17:2c:45:d8:b8:46:54:9f:4a:22:80:8e:4a:a0:
c3:b9:e7:31:66:89:af:e8:9a:14:aa:70:3c:8f:21:
54:b1:05:97:72:f4:53:de:9c:3b:07:ac:a0:2a:14:
eb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5A:F3:1D:DE:BE:76:32:A2:98:B2:16:E6:E9:5A:84:CD:30:0C:69
X509v3 Authority Key Identifier:
keyid:B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:63:91:2d:4e:d0:33:44:cf:50:73:50:ba:15:2f:e7:76:74:
95:be:7c:d0:57:70:6d:41:df:d1:2e:45:66:24:78:8f:ef:da:
e2:79:0e:3d:56:c3:c7:91:f3:c4:d5:c7:1a:a3:54:8d:eb:ae:
62:25:67:a4:ec:d9:e3:99:92:c0:b1:ed:c2:ec:f8:37:e4:2f:
0c:08:58:ab:f4:47:c5:93:c8:e3:67:c0:18:2b:7e:6e:93:8a:
14:ae:c6:21:c6:50:8e:5b:ea:b8:b6:e0:00:96:a9:d9:8e:b1:
26:77:10:ff:5a:97:62:d4:8a:6f:8c:ad:ca:0c:52:b3:34:21:
80:47:38:a6:6f:26:28:ad:b8:f6:5d:74:64:cf:dd:ba:2b:81:
7c:03:a3:64:62:64:c4:ec:c0:cd:7e:2e:b6:0d:27:d5:5c:d7:
d7:eb:52:0a:cb:59:b2:21:5f:66:7d:ba:72:38:cc:2c:d6:20:
13:44:9a:d1:c4:46:72:a1:cb:89:89:b4:33:b6:2e:31:c0:79:
8b:52:1f:8e:d0:ac:79:b0:4f:66:78:20:a2:70:6a:c1:f8:97:
7f:88:9c:45:64:2b:28:a6:0f:12:87:41:f0:3b:ea:fa:e8:9a:
8d:43:ec:3d:40:5f:11:42:dc:c3:da:54:9a:dd:05:04:09:4b:
c3:29:b5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:38:22 2025 by rpki-client