Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
File: tFOob9MIG4A-3BDSO77akdeTICU.mft (raw, json)
Hash identifier: 42zumRe2FHhTi55UldNr65KxkIF/1uiUYuNM6lrN12E=
Subject key identifier: F6:2B:D7:F5:AF:A6:10:63:51:AC:E7:39:03:3F:BF:45:30:F6:11:14
Authority key identifier: B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
Certificate issuer: /CN=b453a86fd3081b803edc10d23bbeda91d7932025
Certificate serial: 0198D5BC42C13EB0EEF9253D9DF434BDF627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 07:02:21 +0000
Manifest this update: Sat 23 Aug 2025 07:02:21 +0000
Manifest next update: Sun 24 Aug 2025 07:02:21 +0000
Files and hashes: 1: h8oFDHIXTub3TgbD4vBpQOwCmWM.roa (hash: lwyf55gn3PMFr0CsrdeYlJw82BVP+7eUtEsfzrm/dIo=)
2: tFOob9MIG4A-3BDSO77akdeTICU.crl (hash: oLyoMF9Ml02ZcM+Tot0ziwH8j++JhOt25N+U26M0Tao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:42:c1:3e:b0:ee:f9:25:3d:9d:f4:34:bd:f6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a86fd3081b803edc10d23bbeda91d7932025
Validity
Not Before: Aug 23 07:02:21 2025 GMT
Not After : Aug 24 07:02:21 2025 GMT
Subject: CN=f62bd7f5afa6106351ace739033fbf4530f61114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:92:1a:de:20:e0:a7:8a:68:7f:8c:54:5a:29:
d3:d0:b0:10:0a:df:07:df:14:a7:60:ff:e2:ec:62:
e2:ac:35:75:27:d3:22:8d:89:fc:63:a6:97:3d:ba:
3f:56:e8:b5:86:02:12:b6:4d:3c:04:5f:6e:13:56:
6a:41:59:42:ef:2c:a4:c9:1e:51:6c:53:2c:06:2e:
b1:59:6e:1e:fa:34:9a:f3:7b:87:49:76:2d:47:d8:
6b:6c:18:1f:06:bf:58:16:60:c7:b5:e1:9a:3e:4a:
e0:d9:96:78:cc:cb:b5:38:02:fd:59:60:fa:78:54:
23:f0:77:ab:76:0f:68:9c:cf:d8:96:4b:8c:a4:d7:
e7:12:e8:2a:2d:dd:0e:9d:65:f0:38:c8:3a:75:8a:
76:a7:73:06:3b:2a:0f:23:3e:64:9a:82:d0:c2:69:
08:81:36:e7:8a:25:c3:c5:e1:14:d9:cb:aa:22:1b:
db:77:e1:d5:cc:f4:33:b7:bd:b1:91:90:63:9d:dc:
20:93:2a:2e:df:63:f5:f6:96:00:7a:a4:22:d3:aa:
c9:ed:fb:c7:56:3b:31:53:88:c9:e7:1d:52:c9:62:
a6:cf:95:61:d4:a3:a8:5f:cd:85:e2:0a:92:9d:9e:
51:ad:53:d9:b9:e5:ee:64:2a:3d:50:81:3b:bc:80:
cd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2B:D7:F5:AF:A6:10:63:51:AC:E7:39:03:3F:BF:45:30:F6:11:14
X509v3 Authority Key Identifier:
keyid:B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:0b:45:34:d1:7d:be:66:60:b8:cf:18:68:93:77:27:09:eb:
3a:31:8f:e4:2f:6e:7c:68:d1:c9:f3:f3:65:89:fb:6c:c3:6c:
27:d2:93:63:b6:3d:5b:30:36:2e:1b:9f:c7:29:dc:b9:b3:f3:
f6:41:0f:43:a5:1c:d9:2c:96:4f:38:1d:60:2e:74:f1:36:64:
fe:77:fc:9f:5e:53:db:7d:b2:c2:81:d6:fe:84:52:6e:56:61:
0e:64:8c:df:0c:8b:43:8b:b4:b2:db:d5:3c:1e:2e:2b:36:00:
72:33:ed:f7:44:41:96:f3:2a:f7:44:84:db:33:7c:1a:b9:bc:
a2:41:d7:cb:5c:30:e9:44:fa:75:b4:fd:05:1e:20:b3:72:f8:
35:2b:5b:c2:98:93:1c:7e:de:92:3a:62:d5:7c:3d:24:5b:d6:
36:82:25:1b:08:bf:3f:ac:2a:c8:14:4b:88:e6:ef:de:13:cb:
e2:45:43:83:3a:27:a7:da:57:f3:d1:17:e8:5e:6f:c3:80:69:
46:32:4f:f1:54:58:11:8e:e0:a9:d0:20:53:9f:2e:b0:33:9c:
26:0a:75:bb:e9:3f:46:0b:36:14:ac:1e:19:fd:73:12:50:f5:
55:4c:e5:45:94:18:a3:ea:dc:e7:d1:1d:27:0f:d4:eb:d5:c4:
a7:18:ad:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:29:39 2025 by rpki-client