Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
File: TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft (raw, json)
Hash identifier: muUIBBCHfkdEUAmtY2/QB4NcMOa6cTlSZllrX0fZFWs=
Subject key identifier: 8E:04:50:25:1C:ED:0F:1B:17:A2:85:FE:BD:27:9B:B7:45:2D:0A:6B
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Certificate issuer: /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial: 0198D7E19A3ED608CC530078BAACC92D4592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 17:02:23 +0000
Manifest this update: Sat 23 Aug 2025 17:02:23 +0000
Manifest next update: Sun 24 Aug 2025 17:02:23 +0000
Files and hashes: 1: 3hSBBEtakLk1jIWXi3hchM-uTBM.roa (hash: NhWJmyJNB4sc9UZdlJ419SqvZ3IVwqNXUyuWTH42r1U=)
2: TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl (hash: iw1KQkK6Tt5XMlD7Wc8LpZQgeX9ZZqQsc/8D6kIHnTM=)
3: fziBQYI5VQChSmnvHhKXUMLYNKw.roa (hash: NEQyAGhhDS5WgZXodzUc9okNLj3B3fbMtY+K4TNZzLs=)
4: n7v5YOrSFGoXqVJ0PeytCrFgOLg.roa (hash: +oN44CijE7GRp64D6SkmoV+lAs+Tba+IrPKezC+0CLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:9a:3e:d6:08:cc:53:00:78:ba:ac:c9:2d:45:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
Validity
Not Before: Aug 23 17:02:23 2025 GMT
Not After : Aug 24 17:02:23 2025 GMT
Subject: CN=8e0450251ced0f1b17a285febd279bb7452d0a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:26:7b:24:87:47:3b:4a:89:de:d6:b1:a8:65:
32:e6:80:bc:85:30:b3:68:af:6e:ec:06:a9:85:f2:
48:36:03:14:06:01:b2:dd:52:bd:ce:e0:35:dc:ec:
5a:45:19:d0:ed:be:e3:60:2d:60:e1:ab:ca:8b:fd:
0d:a4:7d:4f:03:62:5f:2b:cc:ee:4c:bb:0e:b2:df:
0f:40:11:df:2d:b5:0e:94:0c:9c:8c:da:4b:dd:e8:
2b:47:50:ed:47:f8:ce:14:8c:72:13:44:21:52:f1:
41:a3:ae:d7:d1:36:20:59:9a:aa:2a:b5:07:80:82:
d3:31:4b:52:8d:97:6e:f1:e5:64:4c:95:6f:49:d0:
ad:bd:60:a6:93:02:cb:13:52:6b:fc:4c:39:c7:71:
81:6b:4e:70:d3:d8:67:39:d2:36:d6:ef:7d:f8:22:
58:fe:cb:95:85:e4:21:2f:48:92:e6:6d:2b:16:d2:
4f:90:ca:dc:8d:46:e7:29:7d:fd:d6:bc:fa:f5:87:
7a:e0:48:78:dd:71:96:d6:65:f5:05:cf:aa:67:92:
b7:3c:8f:ec:08:a5:46:8b:d9:4d:fd:bc:37:5c:2e:
91:9d:ad:55:42:59:12:33:28:7b:ee:f1:f1:cb:ec:
60:c5:01:04:4a:df:65:a5:c6:bd:fe:b8:f8:73:3b:
ae:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:04:50:25:1C:ED:0F:1B:17:A2:85:FE:BD:27:9B:B7:45:2D:0A:6B
X509v3 Authority Key Identifier:
keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:07:48:12:74:bb:f4:5e:ec:3f:f5:ef:3d:ec:43:5f:07:6e:
c4:97:c0:97:d0:03:97:d1:36:4f:13:e6:24:e3:a5:3e:bc:34:
eb:58:a9:9a:85:e9:2d:64:aa:a7:bd:8f:40:73:14:b8:39:95:
f9:b5:6e:89:0b:7d:e5:19:a6:e8:26:9c:86:92:f3:a9:39:95:
65:f7:d7:b8:96:f5:db:49:21:fb:da:a9:bf:52:2e:79:0c:b6:
fb:5b:fc:ab:f9:f3:f9:b9:8e:c0:b4:3f:19:5a:ad:c6:e6:43:
01:a5:67:e7:19:a2:25:06:8d:93:6a:f1:ab:9f:c5:0d:0f:29:
21:d3:21:55:a4:35:1c:63:21:07:cc:3a:a0:34:9d:07:1d:92:
62:c1:15:e6:11:59:5a:f9:43:ac:6b:c9:44:73:0f:a2:90:0f:
e1:03:08:44:8b:f1:86:0e:f5:ba:54:08:67:a0:01:9a:83:89:
eb:da:7c:58:da:97:20:17:19:69:0f:4f:29:d5:5c:65:0e:fd:
1a:01:c7:21:8d:48:f3:b6:3b:56:1d:57:8f:43:b7:6c:77:02:
1f:ce:2f:20:1c:c2:97:d8:55:06:01:b4:f1:49:86:dd:39:a1:
ce:3a:9a:65:58:d3:f5:d8:55:c8:33:36:62:6c:e7:3d:2c:aa:
04:69:9f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:14:38 2025 by rpki-client