Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
File: tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft (raw, json)
Hash identifier: 5c8gfjix8vOiYbI8NaHV3RKtmuAtVp+IpiXJZBjFlDM=
Subject key identifier: 3B:FA:CB:3B:F6:06:DC:85:4B:2A:08:0F:F6:25:CB:7D:11:EC:C3:73
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Certificate issuer: /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial: 0198D65F6798D908F1F1F7D2A7AE33F5E9EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
Manifest number: 093D
Signing time: Sat 23 Aug 2025 10:00:33 +0000
Manifest this update: Sat 23 Aug 2025 10:00:33 +0000
Manifest next update: Sun 24 Aug 2025 10:00:33 +0000
Files and hashes: 1: tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl (hash: aeX2+76WPN4dWkR9LufBOmoooclW4SaPfEj6eDbXV1c=)
2: zBqyJEl1ZTI7fL6gM2motFXrSRM.roa (hash: OkJW2+OnAMScP2GdhvLfFrfdk7h2e43pg36iU6eHej4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:67:98:d9:08:f1:f1:f7:d2:a7:ae:33:f5:e9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Validity
Not Before: Aug 23 10:00:33 2025 GMT
Not After : Aug 24 10:00:33 2025 GMT
Subject: CN=3bfacb3bf606dc854b2a080ff625cb7d11ecc373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:de:a6:e1:47:25:71:2c:ee:8f:94:48:3f:
13:86:29:30:8c:a3:c1:ac:af:23:fe:b0:62:da:38:
d0:18:30:0c:50:83:b2:66:a3:84:22:94:0a:4b:c5:
d1:c7:2f:05:ac:4c:ac:cb:be:18:8e:12:93:36:a6:
97:7e:f8:b1:6d:b5:55:9b:30:c2:e1:58:ad:ee:35:
2d:22:2c:63:1e:d5:4e:9a:fe:b2:18:b2:69:75:6d:
72:27:dd:20:a2:9f:ba:64:8a:d7:07:ab:1d:b9:89:
bc:e4:03:f8:de:08:6b:f6:53:5b:20:d4:e0:b2:46:
31:cc:34:19:55:87:48:3d:f7:43:b6:a8:20:f9:4d:
29:73:07:d3:fd:e8:9c:b7:7a:86:bf:a1:f2:1a:31:
51:7a:fa:f4:b6:09:ac:e5:69:ef:45:3e:e6:c2:75:
bd:e9:ff:e0:d3:cc:84:1d:c4:cc:15:0c:a7:2a:2a:
29:a0:6d:33:6c:90:f6:df:3e:3b:1f:44:b1:a3:9f:
59:c8:26:04:b2:5d:c5:e7:68:48:6f:5b:fb:65:93:
3d:78:58:79:b3:1d:d3:30:1f:4b:22:ca:21:68:d5:
ec:b3:1d:4c:34:c9:7f:db:9e:69:b5:fa:a4:a5:3c:
64:56:3c:2b:10:88:33:e2:71:85:ff:7b:94:f7:0e:
d6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FA:CB:3B:F6:06:DC:85:4B:2A:08:0F:F6:25:CB:7D:11:EC:C3:73
X509v3 Authority Key Identifier:
keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a8:80:4c:90:a8:90:6e:d6:9a:64:a7:b0:ca:c5:be:64:04:
e7:35:70:32:84:82:b2:4b:5c:92:bc:3a:ea:12:4f:8d:40:3f:
03:ad:f2:1a:d1:bc:ba:5c:9a:d1:51:44:ab:f0:5e:ba:a1:b4:
ec:2a:db:0d:91:01:75:41:3a:bd:11:c3:ad:a0:15:60:c4:11:
f5:e5:14:ff:bd:83:c5:56:2c:df:ef:af:33:a2:14:ec:11:ee:
57:85:4d:f8:d9:1a:8d:f3:dd:07:65:ae:7f:15:c7:36:fe:6a:
d0:a0:a0:a6:a0:71:26:e0:3d:f0:c0:ee:91:b5:6c:f0:7c:79:
ae:95:2c:ca:e7:45:74:88:13:f4:ac:95:69:e7:86:da:02:ce:
d0:13:30:b9:10:e2:4b:4d:42:87:33:56:79:0a:00:8f:bb:73:
ee:b0:fd:6e:f4:0c:b9:4d:ae:db:74:58:14:d9:71:c4:ad:88:
cc:44:82:84:5d:88:dd:61:f9:d4:46:29:0f:ed:57:d9:ea:5c:
9c:9a:77:a2:33:b8:f2:a0:d4:f4:2d:27:d5:21:f6:25:aa:e3:
7d:90:44:a2:6d:e6:70:d5:d5:70:41:0b:66:1c:e8:d5:7f:d0:
72:d9:32:f6:3c:bc:4f:f1:21:16:6d:72:45:89:d3:00:5b:8b:
d3:a7:b7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:39 2025 by rpki-client