Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
File: tLC71kRVeO28e6a1v3ypNo0kF78.mft (raw, json)
Hash identifier: YWydEXxcTMdCkyIKcF33KLxc0IE8SOm/tnH3Nx3zxew=
Subject key identifier: DF:1E:5D:46:12:8C:1C:E9:D6:54:CB:84:EC:83:23:66:3F:53:4A:68
Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
Certificate issuer: /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Certificate serial: 0198D5F14F55E0F85CE7B1EA56DBB0DA8ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
Manifest number: 0CAD
Signing time: Sat 23 Aug 2025 08:00:18 +0000
Manifest this update: Sat 23 Aug 2025 08:00:18 +0000
Manifest next update: Sun 24 Aug 2025 08:00:18 +0000
Files and hashes: 1: E_gpRXs1wyJj1CMrt4P6GzVFs4U.roa (hash: gqqgWP9QREPzkIwRRirj81r/4D9tgTwnunohsTpcA6w=)
2: HYQhj9GfS2VL1LGH2hoGRnAq_1g.roa (hash: vupLnnm29iaNTZjA+glh+6XHc5HkCkw1Lh/FCGeyQn4=)
3: tLC71kRVeO28e6a1v3ypNo0kF78.crl (hash: bc/QRHNwRVsSJQBNfrNBcZCFz6DotQDYvaHvPhHpVyw=)
4: zqLBYDBfWNqychEyI3nXYt2CCRQ.roa (hash: xPd7pskgYW4omSSyK6JduhnPOzmyiWl553qH0EzZiqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:4f:55:e0:f8:5c:e7:b1:ea:56:db:b0:da:8e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Validity
Not Before: Aug 23 08:00:18 2025 GMT
Not After : Aug 24 08:00:18 2025 GMT
Subject: CN=df1e5d46128c1ce9d654cb84ec8323663f534a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b2:cb:2f:be:44:db:72:03:c7:98:95:e0:fa:
72:24:6f:34:ae:18:7f:97:27:55:02:71:40:73:1d:
5e:90:ae:15:b2:ab:7a:d3:35:17:aa:40:4d:49:a7:
39:9c:d6:57:35:74:ef:e7:fb:44:aa:86:96:4d:ba:
90:6a:af:dd:34:77:35:44:88:0b:05:9f:20:8d:71:
7e:f5:dd:45:5a:79:a7:14:58:b2:e8:bb:34:d0:9c:
b8:4d:1a:1f:32:a5:ad:b5:a0:ba:31:cd:c0:92:3a:
f1:a9:9a:7a:43:49:ef:27:1e:a1:10:22:2b:10:dc:
ec:a7:dd:26:4c:7d:cf:ae:7f:eb:da:8b:45:01:06:
a9:f4:f9:32:47:99:57:4f:d5:b8:b9:87:27:a7:90:
f0:6f:ef:db:33:0f:99:89:9a:54:3a:31:76:8c:f3:
4d:54:41:2d:df:62:2b:5e:90:89:09:9d:72:aa:11:
93:1b:7c:67:b0:13:f3:a5:89:8a:56:fe:b2:28:a1:
59:fe:58:4f:04:f7:8d:3a:a4:08:62:b8:69:bf:99:
3a:6e:52:c2:55:66:78:67:85:4e:a7:e4:37:ac:02:
7a:7f:d8:75:ef:1e:11:cd:db:fa:fe:6d:d1:97:21:
fb:34:68:b3:40:35:b0:43:81:03:80:3f:92:9b:91:
14:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1E:5D:46:12:8C:1C:E9:D6:54:CB:84:EC:83:23:66:3F:53:4A:68
X509v3 Authority Key Identifier:
keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:db:09:ff:fc:a9:bc:f7:15:27:df:ec:e4:48:70:2c:5c:93:
96:10:11:5e:54:5c:89:bd:dd:0c:8f:aa:fd:e4:f4:eb:24:e5:
09:de:7b:66:d8:2c:77:84:9b:3d:95:e0:95:74:c0:28:57:83:
9c:76:c4:fc:31:40:72:31:1e:ef:3b:60:a8:3f:da:2d:61:f7:
5b:94:87:d5:0d:38:e2:47:01:1d:2e:5a:c9:45:bc:6b:8b:74:
22:45:a7:ce:34:1a:c7:89:9b:95:67:ff:98:b7:c7:30:7d:51:
59:aa:91:23:b8:9d:38:db:a1:02:ae:a8:b5:17:e1:7a:a9:8b:
d4:d3:51:96:2d:e5:1c:75:85:bc:5a:05:77:f2:0c:92:cf:56:
6d:75:89:80:1f:7e:ae:5e:e7:48:5c:ad:95:e8:61:a4:77:a2:
7b:e5:9d:a9:73:b8:2b:0f:7d:79:73:e6:e1:c7:dd:86:16:99:
42:6a:ab:81:22:b4:be:4e:90:0f:aa:9c:d6:10:69:03:9f:7f:
84:fa:bd:8f:6e:42:05:c1:43:90:85:24:06:07:b7:14:35:76:
97:81:fe:65:96:e5:16:07:a9:86:d6:d2:65:f0:37:2d:c4:16:
eb:0c:dd:9e:d4:7d:5b:97:e3:96:61:4e:54:d3:4c:d4:4f:47:
cb:8b:fd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:36:23 2025 by rpki-client