Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
File: TuQFf56gFAzvfOR4k2nFzwH3xo4.mft (raw, json)
Hash identifier: vbwjwo7uUhKNT4VgTEjmPX5jK/rqFkjIzKqIwMvgApc=
Subject key identifier: 6E:66:E2:82:E1:43:9C:4C:F9:30:71:6F:14:F5:38:12:8E:26:11:4D
Authority key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
Certificate issuer: /CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Certificate serial: 0198D4736EB57A6D23E810F3F2DFF170116E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
Manifest number: 149F
Signing time: Sat 23 Aug 2025 01:03:11 +0000
Manifest this update: Sat 23 Aug 2025 01:03:11 +0000
Manifest next update: Sun 24 Aug 2025 01:03:11 +0000
Files and hashes: 1: CEuXJrDVGtc7Z4aBHwivyFbJk6I.roa (hash: YlEuDFYK1ghHbSy2lJ7W4OAiAQ8b74GXZr4K2Q1Nk+o=)
2: TuQFf56gFAzvfOR4k2nFzwH3xo4.crl (hash: qG3rV36w9CEcogywtPMaJeqpHw+ezqf6wOd9lDmBCbY=)
3: zQYGnUVB4bBy-t9A3BsXP2JPTI8.roa (hash: yYhiUqDeYjOIAS1CW8QCSgxrWRWrSjdPUM0N7RvDxVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:6e:b5:7a:6d:23:e8:10:f3:f2:df:f1:70:11:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Validity
Not Before: Aug 23 01:03:11 2025 GMT
Not After : Aug 24 01:03:11 2025 GMT
Subject: CN=6e66e282e1439c4cf930716f14f538128e26114d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:24:93:d4:5d:64:b0:ea:74:74:4e:43:68:77:
a5:9b:e4:73:fb:b6:bb:59:0d:b4:7d:df:7d:12:14:
02:d4:cc:f0:88:69:c6:a1:20:de:62:9c:4d:fa:e4:
63:ea:f4:4d:d2:3d:f3:86:cc:bb:53:42:f2:6c:5b:
63:c5:27:d5:21:49:e4:e7:26:ab:25:30:b2:c9:6f:
58:a2:74:9e:7d:39:45:87:3c:c5:61:55:57:3e:2a:
96:7c:9d:13:10:60:43:9e:14:69:3a:e8:1c:f5:20:
06:b0:7e:c0:07:d3:b5:d7:c1:e3:08:fc:4c:5d:fb:
94:a7:44:9f:b2:e1:e6:bf:1d:6c:b7:fb:4d:99:ea:
07:0d:a3:10:f7:dd:5c:06:f5:0d:e9:cc:3a:2f:98:
08:5a:f2:c8:94:b5:67:80:f2:cb:23:56:39:a9:8b:
69:22:26:16:5e:78:ac:d6:49:b7:e0:6a:3a:16:84:
f8:0a:35:d9:18:1f:84:c6:ba:41:c7:65:c3:36:3d:
6f:17:ef:66:d7:c3:ab:d2:26:b9:8d:24:68:91:20:
28:b2:c8:26:14:29:66:a0:b9:1e:4c:34:a9:44:ba:
87:4c:32:50:7a:64:d0:be:4e:c0:df:ea:b1:8e:cf:
67:fe:f4:a2:21:9c:35:59:3c:c4:e6:02:1d:83:5a:
a2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:66:E2:82:E1:43:9C:4C:F9:30:71:6F:14:F5:38:12:8E:26:11:4D
X509v3 Authority Key Identifier:
keyid:4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ef:d4:6e:14:d7:37:41:4a:1f:2e:83:c2:76:16:9b:74:f0:
f2:a9:36:83:7e:87:6e:9c:8c:15:9d:1e:e6:11:70:43:f9:bb:
a8:77:5f:56:79:f6:3e:79:fe:f0:8b:8e:c3:9d:30:db:b4:b2:
b8:e5:54:82:de:1d:23:ce:5f:35:16:9b:87:91:e1:d7:77:fd:
4a:44:6d:29:4a:af:eb:45:18:26:5a:1a:a7:62:cf:08:b2:3a:
79:58:8a:e4:f7:03:c7:54:c9:2d:0a:36:68:03:08:0b:d6:a9:
ab:54:ad:c3:b4:fb:81:2e:ed:a2:d0:04:cc:92:33:c3:c0:98:
dc:2d:71:36:97:e9:e6:5d:68:d7:35:9b:40:34:e9:25:09:e8:
98:23:3b:4a:35:b9:4f:f0:5f:26:0f:e5:8e:b6:2d:a6:72:46:
e6:9b:43:44:ad:db:3a:51:43:08:d0:af:b9:ac:b7:74:d4:b2:
18:be:ef:f9:71:2b:72:74:98:d3:be:62:f8:9a:3a:58:5a:91:
81:fe:29:a3:e2:09:04:9d:72:dc:16:aa:b4:9c:d4:d0:2a:98:
2a:3e:de:8e:a8:1d:73:41:ff:df:d0:5f:7e:49:83:b9:78:74:
98:98:a1:02:b3:2a:9b:63:57:9d:a8:63:6d:ce:aa:ba:c6:d2:
db:28:7b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:17:46 2025 by rpki-client