Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
File: tNftFLjVGiC67HtmDwioDNz4F78.mft (raw, json)
Hash identifier: mVIxQT7ihqUMsLau9+IESsyV9IMP5AIkVGVmPzV6Vss=
Subject key identifier: 91:D1:FC:0D:CB:8E:EF:DB:67:FA:04:94:BA:CA:7E:7C:D1:D8:76:BB
Authority key identifier: B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
Certificate issuer: /CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Certificate serial: 0198D7A91EC026C710551FF59D7DBABDACA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
Manifest number: 15AB
Signing time: Sat 23 Aug 2025 16:00:41 +0000
Manifest this update: Sat 23 Aug 2025 16:00:41 +0000
Manifest next update: Sun 24 Aug 2025 16:00:41 +0000
Files and hashes: 1: VhTYh9Iw5PVI--2GM6MQuLQlHfw.roa (hash: 4Hkp0WmvBYBS95p1FHn/M3/EZ2GIH50SPjU4ACziYZE=)
2: YVY9twtvMqgJ8wFpvv3lKZVmEkQ.roa (hash: 17qlPl9D+uyL5rzeTz5pj3TELME7ziHzDZ+/fRR9Vec=)
3: tNftFLjVGiC67HtmDwioDNz4F78.crl (hash: gl+qS/wjfZ1k9l1LTuRpFkSiZcj1i8yS0XTIeOJJb1U=)
4: y_HvmHHGVlKjcbTPtfwbbemE9ts.roa (hash: 8SIoZagJaVQOy82S0A9ugj7Iv6sEqZZHPMha1KNQ3uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:1e:c0:26:c7:10:55:1f:f5:9d:7d:ba:bd:ac:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Validity
Not Before: Aug 23 16:00:41 2025 GMT
Not After : Aug 24 16:00:41 2025 GMT
Subject: CN=91d1fc0dcb8eefdb67fa0494baca7e7cd1d876bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:42:3e:77:84:e2:9c:0d:f4:04:20:c7:e4:8a:
3c:bc:29:2d:26:8a:6f:83:9b:6e:d8:2a:35:cc:9c:
3e:3c:50:eb:82:5a:af:f4:d3:c8:08:3d:84:f3:76:
68:e1:55:bd:20:57:9c:0a:61:45:bf:70:bb:1a:69:
6f:c9:ad:a7:f2:ba:80:51:87:83:6c:52:78:d9:45:
d5:58:4a:06:18:89:8c:97:a2:c7:7a:ee:7e:15:c9:
98:e5:e1:ff:60:37:ff:f1:13:63:02:fa:3d:2a:06:
79:46:3e:f8:fe:92:a3:64:05:5f:37:a7:5c:ec:73:
01:ca:c2:93:58:85:08:71:58:74:ce:14:51:1e:df:
dd:16:87:a7:64:1f:7f:1f:6e:e5:0b:f5:c5:f3:6c:
c9:56:51:7e:37:58:6c:a7:56:ef:b4:fa:e1:30:54:
6d:b9:73:85:cf:79:8b:b3:c5:c2:7d:8e:14:35:6d:
1f:ba:96:2a:da:b9:28:a2:66:f0:98:2d:0d:30:27:
62:3b:4c:fa:21:26:a0:99:4c:ea:2a:e9:b1:98:df:
61:85:01:c5:20:c4:8b:8c:30:8c:23:15:97:c5:ba:
26:95:ef:7f:da:e4:c2:41:bf:83:3a:bf:58:81:9d:
9a:6b:df:d7:e3:43:93:ce:5f:7f:cf:48:3e:1f:28:
9b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D1:FC:0D:CB:8E:EF:DB:67:FA:04:94:BA:CA:7E:7C:D1:D8:76:BB
X509v3 Authority Key Identifier:
keyid:B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:0b:9d:fd:eb:e0:49:62:97:8c:97:18:ab:53:1b:70:32:26:
55:6d:90:f8:b6:6f:83:56:aa:0f:e1:b8:2b:10:51:b1:fc:01:
56:b7:d2:94:9d:9c:e8:a8:ee:6f:e7:bf:f0:3f:b2:44:72:4d:
e4:04:0e:39:d7:b2:86:e0:f0:d1:ec:32:0e:7a:f5:88:c6:11:
d1:97:d2:0d:f1:47:ee:76:88:7d:de:3d:35:fd:25:89:dc:67:
f2:9b:dd:f6:38:2a:af:e3:3b:18:3b:9b:9f:6a:8b:72:99:52:
7e:dc:34:0f:f6:66:9f:4c:e1:f7:54:b8:da:97:3c:f5:cc:bb:
5c:79:ec:2a:79:08:c4:74:e6:bb:e9:57:d3:47:c5:da:10:7f:
29:52:d5:52:ab:18:49:19:80:6a:76:72:09:c4:ed:c9:77:fe:
fb:3c:5c:c6:85:8a:fc:f2:6f:0d:19:22:d0:8c:16:2a:6d:da:
5e:b1:95:11:87:34:3d:cf:bc:79:35:0a:a5:6b:f4:b7:32:d6:
3a:01:3c:92:02:08:4e:f0:a0:f0:ff:2f:a2:90:f2:42:3e:5c:
26:26:5b:36:8b:50:88:68:24:9a:b6:27:e0:fd:76:e3:8f:22:
e9:32:7a:60:29:0d:e5:31:d5:c2:15:d8:9d:fe:38:8e:66:8f:
de:23:08:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:47:17 2025 by rpki-client