Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: 8tWxr2W6jQjRA31YcwDjQpW5nhb9s6Zwqq64HuFJB64=
Subject key identifier: B3:E8:A8:18:9B:EC:DB:EA:C2:F2:FB:8B:F5:03:51:14:B7:E2:00:0B
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 0198D5F1B17FE88B1A919313491CC9C55FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:43 +0000
Manifest this update: Sat 23 Aug 2025 08:00:43 +0000
Manifest next update: Sun 24 Aug 2025 08:00:43 +0000
Files and hashes: 1: 7kCB1J_rNDVtgNFDQBz-ZFXo6aA.roa (hash: j6xn4MHIGZVJXA81hfabdadaay1xFRv4GfnwCa5VtAQ=)
2: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: yXL9HXH+0TqbhlsU6a9u5d2MVVNbTMjt6+Q3xAk0G6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b1:7f:e8:8b:1a:91:93:13:49:1c:c9:c5:5f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Aug 23 08:00:43 2025 GMT
Not After : Aug 24 08:00:43 2025 GMT
Subject: CN=b3e8a8189becdbeac2f2fb8bf5035114b7e2000b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:75:f7:e4:38:22:dd:a4:90:96:20:ff:7f:
fa:92:fe:05:42:f5:80:d4:df:8f:89:09:85:bb:8d:
99:4d:22:a3:2f:1f:7f:0d:c0:af:b0:9d:30:a9:f2:
07:0f:94:68:15:f2:f2:92:76:63:0b:26:ca:ad:c7:
70:d1:d7:95:b0:98:78:c2:44:af:e1:05:bf:ff:a3:
e4:ed:9e:0e:b0:bd:be:9a:7f:47:cd:ee:04:49:81:
02:66:cc:51:39:e0:0f:dd:f1:0f:f8:66:3f:93:00:
80:aa:0c:01:24:3e:95:f1:b9:a7:32:06:76:24:2b:
f5:e6:7c:1c:bd:fc:82:e4:ab:fc:e8:aa:34:7e:12:
07:2f:d5:fc:2b:b3:f1:95:03:6a:4a:e0:21:75:2b:
2a:09:08:5e:f3:f5:4d:f5:a7:83:c2:34:06:52:6e:
f6:68:56:4f:ab:26:70:37:a7:88:dd:a1:e0:81:b3:
ff:ac:af:87:dd:2f:d2:d4:e6:fe:91:b7:c8:9b:72:
40:3e:0d:2b:26:b2:00:15:bb:0b:f0:16:69:d9:e2:
1f:24:06:b5:75:15:7c:a4:70:15:11:c6:24:a7:5b:
7d:94:a3:81:ed:a1:f1:18:4e:2b:2a:11:09:0a:82:
8b:52:4f:72:51:59:ae:e0:96:59:6b:cd:e6:7f:03:
61:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E8:A8:18:9B:EC:DB:EA:C2:F2:FB:8B:F5:03:51:14:B7:E2:00:0B
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:66:5b:ea:5c:77:5c:fe:a4:cf:0a:04:f8:1f:57:23:f9:44:
f3:13:13:14:9e:d0:5b:6e:b8:ed:6d:9d:82:bd:bc:9d:ea:f4:
c9:70:c8:bc:f7:f3:9d:e6:3d:c6:ea:9b:bc:52:6d:aa:b4:3d:
6d:8b:a9:6b:d7:66:b7:73:34:44:65:5e:0a:00:b0:6d:2e:df:
1b:eb:d0:95:13:c3:3e:ec:f1:f8:bc:44:65:c6:60:e5:af:01:
30:67:2e:31:fa:d9:d7:df:21:3a:75:a9:7b:c5:37:64:d8:fc:
74:1b:98:6e:f3:a5:b3:8e:a2:9c:0c:bf:6f:33:cd:d3:5f:83:
7c:e5:23:5f:49:d3:60:08:af:92:fe:83:92:a0:45:cd:7d:37:
e1:87:68:9d:bd:27:34:e5:63:d6:00:33:93:1c:f4:42:67:85:
96:2b:d2:81:76:04:1d:5c:30:eb:4a:05:6b:c4:03:af:10:4f:
54:83:7d:b5:e9:d2:ba:8d:77:0c:2d:a9:c3:0a:30:6d:01:26:
7c:57:29:be:83:16:6e:e6:a1:9a:6f:77:85:85:07:30:60:a9:
89:03:15:64:8c:3d:ae:18:6e:aa:31:23:69:e4:5c:a2:bd:ff:
58:6b:51:7f:38:52:9a:f9:a4:b3:e7:24:c4:77:ee:bd:e4:69:
bc:17:15:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:29 2025 by rpki-client