Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
File: tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft (raw, json)
Hash identifier: smGe2X0X/CGfhH/5A7/sjs7WMOyz8As13TpvEZ/1r9I=
Subject key identifier: 01:7C:F0:22:1C:0A:7E:EB:A6:2A:E8:45:43:77:C2:65:31:38:DE:7B
Authority key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
Certificate issuer: /CN=b573d2dda93e420409163da59e7414ee91a2eef2
Certificate serial: 0198D7A899748F57BB6A8CD75091062BB43E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
Manifest number: E8
Signing time: Sat 23 Aug 2025 16:00:07 +0000
Manifest this update: Sat 23 Aug 2025 16:00:07 +0000
Manifest next update: Sun 24 Aug 2025 16:00:07 +0000
Files and hashes: 1: r2p_nfti9wP7acQGEaKHM_xZ5Y4.roa (hash: 8x452bR9h9FZkxCtz0Hac6JBkLr+TCy/u9myFaRh5zg=)
2: tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl (hash: 8Pc3dubNKpeJd5CApksKyeS5pXL13CfyYLKF/pZUFlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:99:74:8f:57:bb:6a:8c:d7:50:91:06:2b:b4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b573d2dda93e420409163da59e7414ee91a2eef2
Validity
Not Before: Aug 23 16:00:07 2025 GMT
Not After : Aug 24 16:00:07 2025 GMT
Subject: CN=017cf0221c0a7eeba62ae8454377c2653138de7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:48:1c:4a:2e:72:33:d4:97:20:d5:6d:1e:
68:92:57:08:d9:50:54:f7:41:03:45:24:5c:7d:f6:
65:41:94:65:27:cd:5d:d9:54:82:d4:9b:c5:bd:67:
3b:5d:cc:71:4a:24:b9:c7:71:24:46:7a:9e:fd:62:
63:66:d0:9e:44:2d:aa:ae:fc:1e:3f:3f:2e:05:8d:
9f:8c:e8:c7:34:b8:38:db:77:44:1b:b2:67:e6:81:
c1:bc:84:f6:20:5e:54:73:71:07:c8:da:ef:92:07:
f9:14:4d:3a:84:13:98:a9:c0:58:28:2f:2e:b5:2e:
80:e9:b4:c0:3a:d8:4a:a9:e0:d8:25:fd:6a:cc:c2:
ff:9b:d6:e9:0e:80:62:05:a9:21:e7:7c:85:53:5d:
44:4f:c1:a9:a1:33:37:5a:7a:45:37:12:d1:c3:4d:
e0:d1:d1:71:95:07:7f:ab:b4:ed:f3:81:ff:0c:e9:
c9:21:84:92:fe:13:32:05:59:9f:ff:d5:42:da:1e:
79:27:3f:48:2a:eb:1e:a3:8a:18:c2:f5:28:57:06:
cf:b9:ad:b5:9a:0a:eb:98:99:fb:14:50:56:bc:e7:
3c:2c:8e:df:97:62:88:55:de:f2:ec:78:2f:98:46:
81:c1:a8:af:a3:01:76:10:83:c3:00:4a:a5:f4:4c:
f7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7C:F0:22:1C:0A:7E:EB:A6:2A:E8:45:43:77:C2:65:31:38:DE:7B
X509v3 Authority Key Identifier:
keyid:B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3e:ab:c8:5d:da:55:f0:6a:22:bf:67:1d:a4:55:bc:eb:92:
59:e9:4a:f1:6b:b5:88:b4:fb:f6:f2:70:1b:a0:92:6f:5d:a2:
b6:b2:d4:80:8b:bd:34:bf:70:ab:dd:2e:36:7b:fb:14:48:46:
e6:57:dc:cc:4e:16:95:ee:b4:32:b4:b1:48:31:6c:a4:4e:84:
00:03:80:58:7b:9c:eb:c4:79:29:06:83:f4:83:d9:4a:ee:93:
e2:0d:dc:f5:d2:c2:c2:d8:0f:8f:fb:69:7b:c1:6a:d2:09:5e:
fe:e2:0c:12:66:c5:80:fe:67:cf:eb:6f:4e:4a:a0:a5:30:78:
dd:6d:6e:e7:82:43:0c:59:bd:d4:62:b0:db:1a:97:cd:50:53:
c2:cb:29:15:45:6b:db:53:10:8a:2e:4f:2b:9a:e2:a5:f8:91:
34:a1:2b:8e:df:54:f6:85:f3:ac:43:00:89:fb:27:b4:84:58:
6e:c4:6a:36:53:ef:38:87:19:15:df:6f:05:fc:9d:46:47:a7:
27:2d:7c:41:cd:f4:67:cb:43:56:9c:b9:dc:14:b1:93:49:bf:
57:69:0d:04:13:18:e7:ce:80:84:21:64:44:29:fa:78:df:b1:
c4:77:55:a8:a9:35:fa:8e:36:39:97:0a:c8:0b:97:50:f4:0b:
38:9e:3b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:44:51 2025 by rpki-client