Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
File: tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft (raw, json)
Hash identifier: eqJZV2w/I/0n8XyYPZ1eBvpmZV6cs40nqqYsFLFk2+4=
Subject key identifier: EA:92:48:35:33:BF:31:D8:3F:CA:7F:14:19:76:EA:00:4C:93:31:63
Authority key identifier: B5:7C:0F:AF:A6:50:DD:94:A3:B5:58:17:39:F6:3D:88:EF:A4:14:F3
Certificate issuer: /CN=b57c0fafa650dd94a3b5581739f63d88efa414f3
Certificate serial: 0198D515C98AA4D3BB425AF85A2F01612C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
Manifest number: 0D67
Signing time: Sat 23 Aug 2025 04:00:31 +0000
Manifest this update: Sat 23 Aug 2025 04:00:31 +0000
Manifest next update: Sun 24 Aug 2025 04:00:31 +0000
Files and hashes: 1: WKXMRCbOe7azjRi4M3txfig4AbQ.roa (hash: misoRXqMC74XUm7CVVuJWe90Pkw4I/1hXuzduVdNB/4=)
2: tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl (hash: f3iS+jSAgYTdaXApavogk+2bvDnsDn0dMGv68Bp1z94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c9:8a:a4:d3:bb:42:5a:f8:5a:2f:01:61:2c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57c0fafa650dd94a3b5581739f63d88efa414f3
Validity
Not Before: Aug 23 04:00:31 2025 GMT
Not After : Aug 24 04:00:31 2025 GMT
Subject: CN=ea92483533bf31d83fca7f141976ea004c933163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:57:1e:84:50:44:bb:94:ea:16:be:f7:a2:f2:
3a:2e:48:5e:51:03:f3:42:23:f3:5c:cf:22:00:ca:
19:d9:7d:6a:c3:7d:39:9c:45:6b:23:22:eb:da:07:
30:7b:75:44:e6:80:d7:b2:d9:52:00:82:e7:e3:7b:
30:ac:1c:96:56:84:26:15:50:5f:d5:6f:16:8e:87:
0f:1d:b8:b3:fa:d0:2b:02:bf:f7:4a:79:f0:69:6c:
51:62:2c:f8:1a:e9:16:b3:df:54:21:03:48:67:ff:
52:1e:79:5c:80:10:2d:e4:ff:7e:12:16:38:83:2c:
35:71:91:3e:1d:fe:63:14:d0:c2:2d:4f:91:04:1e:
d6:bc:80:21:a6:21:a7:71:32:66:a9:1f:61:da:ae:
d6:8b:e6:4f:8e:6d:29:60:7a:6f:c6:77:09:8e:9b:
23:e9:bf:70:aa:cc:be:43:dc:4d:8e:ce:78:c9:3f:
9a:76:1e:60:4b:5b:8a:4f:2a:d8:16:75:fa:7b:02:
30:2f:54:31:0a:d0:bb:b3:e2:87:6c:c6:3f:b6:ed:
ec:e4:62:57:c5:b6:01:e3:90:22:62:85:6e:31:b5:
7b:ed:38:23:fb:2c:ff:c2:28:e6:7b:bd:24:ef:88:
83:84:77:79:6f:52:be:04:22:0b:a7:a8:8b:fb:90:
49:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:92:48:35:33:BF:31:D8:3F:CA:7F:14:19:76:EA:00:4C:93:31:63
X509v3 Authority Key Identifier:
keyid:B5:7C:0F:AF:A6:50:DD:94:A3:B5:58:17:39:F6:3D:88:EF:A4:14:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:cd:e5:ea:39:21:a5:d2:11:1c:27:41:95:08:7a:b1:aa:1e:
07:64:3c:77:58:3f:99:68:8b:40:1c:a3:83:bc:0c:c5:50:03:
fc:e9:f5:d3:7b:29:59:c9:fc:00:03:cf:d6:cb:79:db:01:92:
c7:aa:ad:f1:71:e9:62:34:ae:50:39:99:22:41:ae:19:17:28:
c0:a6:8c:ea:a8:2b:8c:f7:01:e9:c9:a0:19:d1:50:50:54:e7:
0e:67:bf:44:8b:b9:41:ec:51:80:11:1e:ce:62:0a:02:53:21:
02:23:65:d4:ad:01:07:8d:db:8f:56:20:86:c4:8a:bd:45:61:
01:50:23:18:01:7e:8e:02:24:74:89:7d:09:41:35:bb:67:a3:
e8:a4:9c:7a:88:c1:3c:d5:a7:cf:55:b1:94:53:79:5d:7d:03:
f7:54:45:2d:25:4a:d8:b7:a9:23:a0:96:cc:1d:4b:d6:a7:5a:
39:d6:36:e5:bf:76:6e:e8:e4:14:2f:af:d8:35:41:0a:f9:46:
ca:d0:e2:c4:ab:e6:42:87:3e:5d:d6:c5:17:d9:d3:3f:12:9b:
6b:40:f4:89:64:42:4b:fb:96:b9:de:e5:46:e2:9b:a6:b6:4b:
96:12:4c:5b:f9:62:c5:06:44:cb:4b:5d:13:17:a3:64:b4:70:
01:21:d0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:31 2025 by rpki-client