Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
File: Tu8gTX6G_4FiSmGBKG521DOHa8c.mft (raw, json)
Hash identifier: aR3EOEEnmDjRbV9apXFk3MdeScmvsYC1FP9xE5AbDAA=
Subject key identifier: 3F:33:E1:68:FB:0F:54:1B:8D:35:8F:76:50:E1:B8:F9:B2:9F:E5:44
Authority key identifier: 4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
Certificate issuer: /CN=4eef204d7e86ff81624a6181286e76d433876bc7
Certificate serial: 0198D47284456A8F921928472BF7E1386FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
Manifest number: 1549
Signing time: Sat 23 Aug 2025 01:02:11 +0000
Manifest this update: Sat 23 Aug 2025 01:02:11 +0000
Manifest next update: Sun 24 Aug 2025 01:02:11 +0000
Files and hashes: 1: Tu8gTX6G_4FiSmGBKG521DOHa8c.crl (hash: 4rbxJl7PmF32728n7nZF7bncyVZY47J3d9q15ySAkGc=)
2: shBm13sVD-3FD9e1R6_cr96dhfU.roa (hash: n/xarPDtIVC1p+Buc2MZvYZnuxYBvdgfF2U0DRag658=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:84:45:6a:8f:92:19:28:47:2b:f7:e1:38:6f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef204d7e86ff81624a6181286e76d433876bc7
Validity
Not Before: Aug 23 01:02:11 2025 GMT
Not After : Aug 24 01:02:11 2025 GMT
Subject: CN=3f33e168fb0f541b8d358f7650e1b8f9b29fe544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:87:9a:7e:2f:36:61:0d:3f:9d:e5:32:13:d6:
90:24:66:bd:aa:c9:29:95:c3:ad:91:21:04:ae:0c:
87:44:56:d5:3c:8d:ef:f3:c0:1a:47:0c:90:79:b0:
97:47:9b:1c:4a:9c:19:8f:d6:cd:f9:c7:3f:8c:ad:
5f:ad:5c:d4:73:1e:99:3b:f0:9d:95:1c:45:bf:71:
9f:c3:40:1c:77:ee:d0:86:9a:19:3e:19:0a:ec:ec:
35:7f:f3:19:de:1f:40:ec:a5:12:11:14:29:20:e1:
1b:0d:b0:5c:a4:43:fc:91:0a:b1:4a:8b:c5:4b:03:
9e:12:cf:7e:a9:9c:f1:c6:91:29:30:5f:76:a8:ee:
19:09:38:c5:f8:6f:1e:96:9b:89:a2:e6:f3:d2:ab:
cd:2d:e0:62:08:0c:2c:9d:12:91:37:ca:c4:4b:9c:
4d:67:20:56:c5:1f:36:56:92:85:8b:68:e4:f9:13:
a2:db:77:d5:47:22:c3:a2:bf:c3:a1:0d:75:54:81:
55:c4:d0:55:08:2b:0d:6e:bc:23:2e:f2:e0:ce:a3:
6b:22:25:86:60:ea:ad:c2:f3:0c:2e:fc:c8:98:92:
e6:a9:80:05:6d:4e:f1:87:e7:ed:36:3e:44:a9:cb:
46:e1:ca:3c:01:43:ad:af:77:58:64:9b:92:88:54:
07:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:33:E1:68:FB:0F:54:1B:8D:35:8F:76:50:E1:B8:F9:B2:9F:E5:44
X509v3 Authority Key Identifier:
keyid:4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e2:7d:85:16:f9:b0:da:44:2a:9d:c3:c0:b6:82:05:fc:64:
b3:26:bb:e0:05:81:ed:da:cf:c4:82:37:4d:6e:20:e2:9c:24:
20:dc:21:8e:e5:5e:de:cf:9e:e1:df:4f:d1:d9:cd:16:f4:26:
71:59:39:94:ee:4f:a7:78:36:27:a1:87:36:c3:b5:4c:d6:7c:
c8:3e:e3:e8:82:e7:52:e6:74:13:d5:2a:68:c9:22:be:5b:d3:
d4:68:77:32:ce:47:9c:b8:7e:77:21:62:29:c5:56:1d:bf:e8:
28:28:4e:f3:71:c6:a6:06:4b:60:eb:f3:4d:04:a6:f0:e6:3c:
49:40:04:03:1c:cc:b6:cf:3e:cc:d2:b4:3a:ab:a0:b2:60:63:
b3:94:dd:d9:1b:68:0e:45:8c:9a:28:98:ba:08:c4:19:4b:7d:
0d:6f:f6:3b:81:96:bc:a8:e4:dc:1d:7a:d6:01:39:1c:8b:28:
04:70:4b:93:23:5d:df:8d:c6:fd:be:d4:55:62:b7:45:47:a2:
a6:0f:71:77:b6:0a:44:a8:d2:35:e3:f4:26:c3:82:cb:db:49:
6e:c3:f8:60:bb:fe:a1:1e:7c:b1:e3:86:df:b4:4b:a2:2b:40:
3b:26:4e:31:32:3b:7f:e1:d4:21:05:cb:ac:02:4c:42:4f:0d:
f8:4d:11:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:39 2025 by rpki-client