Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
File: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft (raw, json)
Hash identifier: ue7vKVHQaCOp/H9TsFBW9a0M2zUDbfHPUym635C69xw=
Subject key identifier: 6B:96:FB:39:3B:22:2A:AE:C6:10:16:2F:32:23:3E:AA:03:22:08:56
Authority key identifier: 4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
Certificate issuer: /CN=4da3711dc5de45f2f5b47901659e956d938272fe
Certificate serial: 0198D5BB89EA783CAC13AD0B1FD207388779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:34 +0000
Manifest this update: Sat 23 Aug 2025 07:01:34 +0000
Manifest next update: Sun 24 Aug 2025 07:01:34 +0000
Files and hashes: 1: 7YKaewqyZbI9lVFIivFUL2FPVzU.roa (hash: wf42n7crwFg9XaXHUPxEE3NTHiwbzXO1xRDVNEMLG6A=)
2: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl (hash: hWmhPcz45ZHAU704N9v0WNkSzKwg+lXh9aORojyEmDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:89:ea:78:3c:ac:13:ad:0b:1f:d2:07:38:87:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da3711dc5de45f2f5b47901659e956d938272fe
Validity
Not Before: Aug 23 07:01:34 2025 GMT
Not After : Aug 24 07:01:34 2025 GMT
Subject: CN=6b96fb393b222aaec610162f32233eaa03220856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:0a:d7:53:43:f5:64:53:31:a9:98:11:40:
5b:72:a6:9d:be:2f:0b:24:3e:77:bd:a9:2d:69:aa:
82:44:6d:98:89:09:e3:c6:07:15:75:bc:d7:7e:83:
0e:8a:f6:31:96:79:ac:3a:6a:38:0c:5e:67:47:ab:
51:f6:93:dc:a9:15:89:1e:d6:a5:13:ef:60:2b:d8:
a0:f4:5b:b2:fb:bf:e5:8d:06:c3:33:27:b8:47:ed:
45:ed:f8:92:4c:11:17:8b:12:24:98:2a:a9:85:6e:
8c:3b:2e:13:9c:4c:ad:77:33:c9:11:98:ef:f8:a2:
65:b5:52:85:52:f3:d3:5a:7a:d2:73:10:cd:f6:18:
13:57:03:be:d2:3b:af:e5:17:67:59:a9:4f:1e:e8:
7a:4a:5a:d8:25:9e:37:b0:46:5f:91:e7:e1:49:0e:
d6:27:e5:24:ab:3a:cb:7a:d4:16:fe:36:be:27:b4:
70:ab:4a:21:2b:4a:6f:c6:3f:06:c8:7f:ef:a0:5f:
78:6c:5f:f6:76:f1:1e:a7:42:00:b4:c1:60:f1:58:
91:71:af:ac:47:f7:9c:4b:0a:c9:c6:10:16:49:53:
37:83:4d:2d:fc:69:90:0b:ee:25:33:eb:3b:67:aa:
48:a9:bc:b2:82:a5:12:e3:00:d5:ea:30:e0:1b:3e:
38:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:96:FB:39:3B:22:2A:AE:C6:10:16:2F:32:23:3E:AA:03:22:08:56
X509v3 Authority Key Identifier:
keyid:4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f5:2d:97:79:3a:c9:8f:b0:36:9f:e4:09:57:d8:9d:22:f4:
32:85:08:ea:c3:a7:de:93:fb:f0:8a:00:75:16:70:1c:cd:cf:
22:99:90:08:97:da:83:f2:0d:fe:b3:05:8e:a7:3d:92:a0:86:
9a:ed:28:8c:26:1d:78:9c:06:28:a1:77:53:74:c0:8b:03:7c:
9f:cc:9b:4d:d8:59:b4:a3:bb:bd:71:85:d8:64:47:f0:df:04:
83:38:cf:86:38:f9:00:40:1d:aa:48:43:60:8d:a4:c8:a0:1b:
05:5e:2c:8c:4e:ad:a1:4c:ff:4a:23:ab:33:3c:68:fa:dc:70:
3f:04:f7:54:07:9a:17:c1:12:f0:f2:18:eb:e1:4c:74:69:00:
5d:3c:27:d7:5d:26:eb:c6:28:1e:d4:59:db:eb:ea:f1:ff:4a:
43:82:fe:bf:34:e0:45:f4:a6:f8:d9:11:e1:cd:45:fb:69:0e:
5f:c9:41:da:3f:13:93:40:d9:b5:6c:86:24:51:8a:a6:ae:57:
43:b5:71:da:0b:c6:79:e1:22:93:22:f6:a7:79:de:04:d7:bf:
15:71:8d:eb:60:bf:4b:9a:11:f3:01:f5:d4:c4:c2:59:5c:43:
bb:d8:3a:b0:c5:7c:97:ab:74:b0:4a:e2:4b:b0:66:cb:ba:7c:
6a:8f:a7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:01 2025 by rpki-client