Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
File: tTRCGKSIC1AMAzMh52vXi088Flg.mft (raw, json)
Hash identifier: HiSolHr3gWGEFaLKzJFWxT6PHELDbe7bdu49EOZgyr0=
Subject key identifier: 70:E1:2C:BC:77:12:5A:BC:D5:1D:16:3B:AD:06:F1:7E:D5:98:60:CE
Authority key identifier: B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
Certificate issuer: /CN=b5344218a4880b500c033321e76bd78b4f3c1658
Certificate serial: 0198D660A6BE9A0E0CDB052BB82F3C9B75AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 10:01:54 +0000
Manifest this update: Sat 23 Aug 2025 10:01:54 +0000
Manifest next update: Sun 24 Aug 2025 10:01:54 +0000
Files and hashes: 1: 8Pm542mxmtNx79Ipw8aJ3MUUUlw.roa (hash: wUyn8TfNac0yPrEyoAGwGRLxadfovmjunsKwqoO4Tic=)
2: MK5kvHBNAAlnKRq0I1CvZhVF9Ng.roa (hash: ku7EY/yVBZoDpf18kdWwR04OCaLbQDYij0LYSvbt0Ho=)
3: tTRCGKSIC1AMAzMh52vXi088Flg.crl (hash: cxDMA0qQzhyUDiaoiAFGy3x5mZVRib4BU48K+K2NYcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:a6:be:9a:0e:0c:db:05:2b:b8:2f:3c:9b:75:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5344218a4880b500c033321e76bd78b4f3c1658
Validity
Not Before: Aug 23 10:01:54 2025 GMT
Not After : Aug 24 10:01:54 2025 GMT
Subject: CN=70e12cbc77125abcd51d163bad06f17ed59860ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:49:0f:1c:d0:d4:d2:0f:82:08:2e:c0:7a:cd:
30:03:62:53:95:3a:3c:8f:4e:2e:c2:99:5f:be:df:
d6:e0:fd:05:5d:79:76:d1:10:04:b6:24:fd:34:3d:
0c:ba:b4:54:37:47:81:82:1c:6a:28:25:46:89:98:
f7:d3:60:e7:30:17:24:68:75:2c:ae:41:28:5e:61:
59:05:8c:1d:36:57:96:04:d8:a5:85:f4:65:7f:c5:
24:58:d2:68:36:52:98:c6:77:74:f5:38:d4:2f:46:
dd:ee:61:94:15:60:96:4f:2d:6a:e4:54:87:06:ac:
a9:10:6f:cc:b4:99:62:30:36:c1:aa:90:63:15:84:
74:3c:65:97:cf:b6:68:cb:0f:97:5a:68:13:8f:b4:
b0:b8:b4:7d:04:ef:b8:96:5d:ec:fd:f2:9b:ec:9b:
73:da:34:d1:7c:22:5d:8f:8d:da:e6:99:d3:e0:74:
69:d4:50:d4:39:4b:a2:5d:87:ed:9a:84:b0:ff:c0:
c7:0f:fa:56:f5:fb:85:c8:99:00:8d:12:89:64:7a:
11:05:cf:ca:6d:ea:6c:33:05:6a:67:a4:29:64:c9:
94:69:17:29:23:4c:8b:11:a6:39:05:7d:76:6d:9b:
61:84:1c:23:34:50:e7:5a:2d:3d:17:02:50:8b:ef:
ec:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E1:2C:BC:77:12:5A:BC:D5:1D:16:3B:AD:06:F1:7E:D5:98:60:CE
X509v3 Authority Key Identifier:
keyid:B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1a:a7:40:94:d8:db:51:5f:ac:2a:65:bc:af:c4:76:77:96:
8c:72:e8:6a:01:64:74:9c:36:83:e8:44:4c:62:5d:8b:d7:6c:
42:a5:27:70:69:51:84:8e:3c:21:dc:46:d8:a9:d6:e1:e5:76:
ab:03:a1:25:9e:2e:f8:10:4d:9f:ac:00:07:04:28:56:4f:5a:
8d:d3:2b:6c:e3:d0:5a:b5:1b:77:be:e7:ef:57:c9:c3:fb:40:
a0:dc:4f:6c:e9:26:17:76:d7:32:5a:a2:fd:67:a8:70:f3:6a:
94:c1:a2:26:d4:7c:30:82:80:3c:d6:52:c5:fb:5e:24:ad:95:
54:49:59:f3:e2:3a:95:0f:bd:d7:7e:9d:d0:dd:d1:17:bf:99:
18:c7:2a:4a:24:93:e2:e7:73:86:5f:62:bb:66:ee:49:b3:90:
ca:f4:e3:a9:b8:97:74:b3:1f:9e:3a:5d:27:53:08:52:6e:34:
9c:11:2f:48:e3:cc:0d:ed:c4:82:28:b2:51:61:58:42:ec:0d:
de:bc:3c:83:b4:79:09:ac:39:93:76:50:82:e3:57:f1:dd:31:
67:83:16:ca:d1:75:ee:bf:d1:18:19:a6:f8:15:1a:74:60:c5:
94:5a:4d:12:88:e0:c6:98:26:98:0c:94:2d:6a:9c:46:87:d6:
26:4d:d4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:58 2025 by rpki-client