Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
File: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft (raw, json)
Hash identifier: bunzQJ5TJJhE8r4z9014/EVsHWusUkkV4axjLOLdJ7M=
Subject key identifier: 17:8E:BF:C1:43:3B:B6:50:69:B0:E3:32:E9:73:A0:4A:5B:D0:32:C3
Authority key identifier: 4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
Certificate issuer: /CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Certificate serial: 0198D4E091364BE9C1E71436EBE6C4C01EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
Manifest number: 136E
Signing time: Sat 23 Aug 2025 03:02:23 +0000
Manifest this update: Sat 23 Aug 2025 03:02:23 +0000
Manifest next update: Sun 24 Aug 2025 03:02:23 +0000
Files and hashes: 1: DAiAlkKu2uIH3tPrZHXW35UovoY.roa (hash: ii+y3ES147W1gYE6b/JQu7S5U4fp3robU9GiKGcJGDs=)
2: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl (hash: W+gnBgTEBKTEglegpi/yWRaMml5jR+4sc5XgcDOepW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:91:36:4b:e9:c1:e7:14:36:eb:e6:c4:c0:1e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Validity
Not Before: Aug 23 03:02:23 2025 GMT
Not After : Aug 24 03:02:23 2025 GMT
Subject: CN=178ebfc1433bb65069b0e332e973a04a5bd032c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e5:2a:00:21:ad:ad:e6:5e:96:0e:6b:02:98:
24:19:a6:43:ea:eb:a5:be:2d:e5:62:e9:e4:04:64:
4c:96:bc:b2:4f:94:66:99:2a:71:74:56:00:c6:4a:
e5:1c:b3:64:35:d1:a3:36:16:ee:f4:d9:e0:9b:fd:
58:3d:0b:ba:d4:1d:d3:2b:21:e0:ef:45:21:d6:d9:
ac:ca:81:2b:a8:b8:0c:f7:3a:da:e1:00:3d:9f:ee:
01:62:e9:70:1d:0a:bf:7a:ec:1a:3d:fc:16:eb:2c:
f1:b5:a3:7e:80:8a:99:32:8d:0d:53:e5:96:4a:8c:
3d:ae:52:92:dc:5d:d8:7c:28:99:6f:c4:03:fd:d2:
d2:ce:1f:df:fe:69:bd:f8:02:fd:0c:b8:93:4c:e4:
90:56:a1:c0:1c:77:85:14:08:15:bc:a9:c1:69:c1:
df:12:71:cb:de:54:33:b2:67:59:31:39:17:5b:65:
69:01:c8:55:61:ae:29:91:63:2d:50:31:df:15:1d:
9d:a7:0e:ed:fc:43:be:03:28:e0:40:bd:3d:c9:56:
17:f6:b8:bc:d7:47:5e:d4:d2:c0:2c:42:5a:cb:ad:
4b:53:3e:5d:f5:02:de:fd:eb:52:fe:b7:b4:a1:82:
89:82:9c:3a:a9:0b:8b:97:0f:9e:93:f5:5d:34:47:
97:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8E:BF:C1:43:3B:B6:50:69:B0:E3:32:E9:73:A0:4A:5B:D0:32:C3
X509v3 Authority Key Identifier:
keyid:4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:46:93:df:f6:6b:27:37:4d:d7:a3:c2:42:20:cd:75:63:4d:
43:ea:90:bd:74:14:11:16:1c:bb:88:1e:85:78:27:b9:9f:61:
ce:6f:99:b8:bf:d5:04:1c:e9:ac:69:c5:57:b0:a9:86:7d:e7:
91:4f:82:98:2e:7d:32:9b:2b:b3:21:69:16:d0:62:28:c0:13:
e9:60:c7:1e:11:0c:06:a2:66:c4:e6:dc:60:0a:7c:8c:20:84:
65:ba:98:7b:92:39:02:77:86:1b:89:d7:a1:21:60:d3:b1:0c:
b5:f1:4b:ca:51:a4:36:5e:80:86:d0:df:f7:89:aa:45:2d:fc:
6e:4a:76:01:bd:d6:17:2a:e3:41:89:04:02:70:d6:3e:0a:19:
f9:bd:21:3d:c7:75:df:ec:a5:6b:77:2f:4d:2f:25:c6:de:8b:
4a:89:a3:ae:cf:54:14:8b:c4:6c:5d:f2:8c:09:a1:7f:dc:44:
96:45:47:b2:85:66:f6:36:55:91:2d:b2:66:1f:33:58:40:a4:
ae:ea:28:17:44:ac:50:43:02:59:26:83:cc:d6:06:6d:96:6b:
19:da:68:16:b6:57:15:bc:c9:f2:3d:ff:d9:b8:41:05:ce:cc:
61:21:aa:e6:b8:8c:bf:50:69:4a:65:08:69:9d:b0:8c:d2:2f:
8a:e7:e6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:11 2025 by rpki-client