Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
File: tBErtZsGJ9ojr5DA8FhLcbUPd48.mft (raw, json)
Hash identifier: 8JJe1dK5iqOupYwxfedchIRiUFw+e6hwnEapiroz+oo=
Subject key identifier: F1:AF:51:D0:D0:B8:2F:2D:54:2C:E0:C7:29:0D:31:E7:91:D9:49:70
Authority key identifier: B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
Certificate issuer: /CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Certificate serial: 0198D4049D9CD4477B380126E2E7F8D030FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
Manifest number: 15DA
Signing time: Fri 22 Aug 2025 23:02:08 +0000
Manifest this update: Fri 22 Aug 2025 23:02:08 +0000
Manifest next update: Sat 23 Aug 2025 23:02:08 +0000
Files and hashes: 1: RRFPoj_D2514uvr1pJ51Asozslw.roa (hash: EUwe8zILfT5h0ET/pLOGX/O1GKfRNQcxkScAvJ+rEAs=)
2: tBErtZsGJ9ojr5DA8FhLcbUPd48.crl (hash: kv1oQKgOftM3xt10Y85FNv3Y7rrtFm59JU8o6xDFe6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:9d:9c:d4:47:7b:38:01:26:e2:e7:f8:d0:30:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Validity
Not Before: Aug 22 23:02:08 2025 GMT
Not After : Aug 23 23:02:08 2025 GMT
Subject: CN=f1af51d0d0b82f2d542ce0c7290d31e791d94970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c7:02:82:12:34:d3:5d:4b:ba:14:a1:cc:30:
06:86:59:d5:76:33:5c:5a:a9:11:3a:42:57:79:af:
79:04:a1:0b:f6:4c:0b:48:d0:23:d1:b9:c5:2c:34:
17:c5:a8:68:30:05:ed:ce:47:eb:ca:62:55:a8:64:
ec:9b:70:ec:c1:99:7d:66:3b:58:d7:d9:52:59:db:
1a:0a:a7:17:67:3e:64:75:2d:06:fc:a4:80:b4:cd:
23:f4:50:a2:ff:5a:81:ac:35:31:0f:6c:a0:b8:cc:
40:60:5a:b8:e6:c1:25:d6:f0:ab:98:33:19:37:2b:
30:18:b5:32:4e:8d:c6:e8:7a:96:2d:0d:17:20:58:
45:9f:c2:75:90:a9:84:c5:ec:b3:77:b0:cb:c2:0f:
2d:dd:79:1a:72:83:17:68:b4:1b:95:35:60:3c:81:
82:4c:9a:4e:95:99:57:36:36:d0:8f:94:06:f9:ab:
80:67:19:65:e8:33:0c:d6:63:c0:c3:3e:a3:a2:f6:
c9:70:9e:99:52:2c:54:2b:eb:ce:c5:8a:06:12:f6:
68:f7:14:e7:fa:e2:01:f4:6d:8c:be:fe:1e:d6:e9:
5b:2e:c1:df:13:34:90:9c:26:d1:85:90:dc:c1:f5:
68:d5:75:6c:6c:8b:43:87:1a:5d:36:2c:0b:a7:41:
17:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AF:51:D0:D0:B8:2F:2D:54:2C:E0:C7:29:0D:31:E7:91:D9:49:70
X509v3 Authority Key Identifier:
keyid:B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7d:26:5b:d8:20:ed:51:66:e3:93:fb:df:13:3b:21:2c:c3:
11:62:7b:30:04:ad:1e:00:f8:01:31:d4:01:aa:5d:8e:e8:ef:
28:97:8d:f7:c4:12:37:f1:21:ed:2f:23:1e:78:33:3a:d2:59:
b6:a0:f3:87:fd:5e:33:ca:aa:47:8a:4e:28:19:af:43:8f:f7:
b9:cb:16:88:c4:4a:e4:17:9f:c4:09:7e:b8:58:8a:76:da:c0:
b9:06:17:f8:85:53:7d:63:25:e8:b4:a5:af:5e:79:f8:b8:3d:
fd:6f:49:54:65:a7:d4:31:cb:81:28:a5:a4:e1:42:ed:f8:35:
ee:e0:96:ce:12:44:11:97:12:f0:28:04:38:38:95:d7:8b:c0:
03:bb:dd:a2:c0:70:af:ae:e2:ba:8c:12:e3:9d:a1:2d:df:21:
a8:30:e7:65:16:a2:2c:55:eb:dc:60:04:87:c4:29:87:58:1a:
17:ab:d5:2f:77:7e:ba:32:17:d2:9e:b1:01:9d:39:07:4e:43:
8f:f3:9c:bc:4d:42:16:bd:be:00:60:c7:fd:63:77:45:81:dd:
78:11:fc:ba:fe:ff:2e:42:65:34:55:37:97:1a:36:ea:ff:ea:
8f:4d:b1:67:2c:5e:35:77:2c:65:e8:9b:02:e2:4c:62:e9:ab:
f1:ea:a7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:22 2025 by rpki-client