Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
File: tFrdzVeWSPw_YSTlWEee8LB_AYw.mft (raw, json)
Hash identifier: R7DXN1xwqREhCS2uHhr7eAuhkZcxqi0iWonzr1p2lck=
Subject key identifier: 97:49:B0:E4:83:9F:CC:51:B8:ED:47:AC:88:ED:67:C8:0F:E9:AD:48
Authority key identifier: B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C
Certificate issuer: /CN=b45addcd579648fc3f6124e558479ef0b07f018c
Certificate serial: 0198D5F1B47E06DF3E6F5A42E69A96C435A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
Manifest number: 03C3
Signing time: Sat 23 Aug 2025 08:00:44 +0000
Manifest this update: Sat 23 Aug 2025 08:00:44 +0000
Manifest next update: Sun 24 Aug 2025 08:00:44 +0000
Files and hashes: 1: j4i_lEr0ea0rf8oMcqwCbevGHbI.roa (hash: m0Ro3O0JJKs4a9J3JyICkVruy1q5dBuVu7UD/uXkWv8=)
2: tFrdzVeWSPw_YSTlWEee8LB_AYw.crl (hash: WnnNbrtSICG1/FhyR/M1Zfqa8FrHl1Ifd0sMSOVgD+E=)
3: xw6VI0SfTqgX1Ykal0pt0rqVfPs.roa (hash: +mo5fxF621tUv4Tlvitq33EyXbo2V/p/J1JdJ2mFmTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b4:7e:06:df:3e:6f:5a:42:e6:9a:96:c4:35:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45addcd579648fc3f6124e558479ef0b07f018c
Validity
Not Before: Aug 23 08:00:44 2025 GMT
Not After : Aug 24 08:00:44 2025 GMT
Subject: CN=9749b0e4839fcc51b8ed47ac88ed67c80fe9ad48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:09:ae:5c:cd:32:e3:68:ef:fb:f0:3a:bf:61:
fa:8a:db:ae:a4:4a:25:fb:22:db:03:2b:d5:82:90:
1c:56:ae:47:95:93:9d:8d:2c:3c:1e:db:1c:e6:2c:
7e:6e:dd:6e:c5:c9:be:a7:6f:2a:7e:e2:a0:ce:24:
fb:c2:0d:40:30:d4:b2:1a:b0:38:c1:09:40:cd:5b:
af:f4:87:ba:c6:3b:d0:c8:06:b2:7d:d1:2d:37:9f:
ec:a4:7a:6c:45:14:41:d1:19:a1:12:8a:40:4d:a3:
61:ad:00:fe:35:5a:c3:51:11:af:be:1f:63:bb:39:
5e:4e:20:82:21:a5:d3:5e:36:78:ad:e2:3d:ae:fd:
22:f0:75:e7:33:b3:f0:01:03:56:57:75:4c:56:c5:
0f:45:69:ab:9a:a1:a5:9e:e2:d9:08:aa:50:e6:21:
e0:8c:35:ed:98:ee:93:13:ed:f9:b6:d9:1d:3c:6f:
d5:48:65:0b:6c:b1:f6:5e:0c:13:c5:1c:fc:99:04:
cd:91:5a:d2:dc:fd:ee:54:ba:56:03:cd:4e:3c:00:
e1:37:6d:2e:79:15:f7:5e:7b:8f:ec:d6:d2:50:94:
3b:0c:f5:a8:07:8a:b6:c2:e6:e2:77:ce:d7:44:11:
a8:d8:13:37:a3:d7:d6:9d:15:85:b3:67:b5:99:0a:
9f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:49:B0:E4:83:9F:CC:51:B8:ED:47:AC:88:ED:67:C8:0F:E9:AD:48
X509v3 Authority Key Identifier:
keyid:B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5a:a0:c6:6f:2a:76:7c:de:1e:8f:9c:a2:3a:69:73:db:11:
87:c2:6d:60:92:ce:e3:50:88:9d:df:8e:0a:d8:38:9b:9e:56:
77:17:10:f1:ef:e7:27:a9:24:2c:da:bb:01:07:b4:ec:a1:23:
16:a5:45:a9:59:bc:0c:43:c7:18:fa:21:0d:ae:e7:3e:6a:ff:
6a:80:d7:b0:00:40:7a:26:89:8f:fa:8f:a9:09:8d:41:19:6b:
ca:02:21:d8:f0:a5:1e:ec:ff:0f:9c:0d:f2:1b:bf:98:0d:c9:
fa:55:89:82:aa:36:5f:9e:ff:70:ae:77:1e:2a:c6:a0:7b:05:
40:93:f1:90:79:d4:63:64:a2:7d:96:08:79:ae:ab:4c:2a:08:
61:ba:e3:55:57:34:f6:04:a6:ec:d1:33:4a:16:44:93:56:26:
32:c7:5e:a3:29:25:24:54:f6:67:82:27:fa:ae:64:5a:55:0c:
d7:a2:ca:70:f1:1c:fb:c0:b2:60:4a:b9:3a:7b:cb:06:ae:14:
e8:8c:9c:10:71:f6:b3:3e:fb:9f:75:f7:e0:83:27:3d:b0:62:
a9:5c:18:41:94:f7:ec:75:a4:98:85:f0:ee:ab:ee:e3:6c:a3:
8d:6a:ad:f3:67:ea:83:4a:86:ec:fd:00:dc:86:c0:28:27:37:
9f:22:71:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:32:27 2025 by rpki-client