Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
File: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft (raw, json)
Hash identifier: rAJ7Q9qVq1ULH5umC/Sqj05KxXkViJ7eJ+DtcU66CH4=
Subject key identifier: B2:B6:33:34:18:C5:26:4F:3C:39:D1:35:23:74:1A:5C:5E:B7:1B:82
Authority key identifier: B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
Certificate issuer: /CN=b48184549e12e9934bffb7615bca3d0c25681360
Certificate serial: 0198D5BBA2E3B2C7030C9003512F6F46A9A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:40 +0000
Manifest this update: Sat 23 Aug 2025 07:01:40 +0000
Manifest next update: Sun 24 Aug 2025 07:01:40 +0000
Files and hashes: 1: Pmrx9HZexDjQdROL1xOD1S-BjzQ.roa (hash: aBRM8zJUU2ZF0wAF5h20OpU3VGQ3W++oIRE8v06cZXM=)
2: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl (hash: naB3kKRBWZx9P3OXKkl0pioZT0f64vFtl+DccSz/Oe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a2:e3:b2:c7:03:0c:90:03:51:2f:6f:46:a9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48184549e12e9934bffb7615bca3d0c25681360
Validity
Not Before: Aug 23 07:01:40 2025 GMT
Not After : Aug 24 07:01:40 2025 GMT
Subject: CN=b2b6333418c5264f3c39d13523741a5c5eb71b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:71:b5:a3:9f:fe:ba:fe:9d:c4:69:6b:c1:ea:
0b:b8:dd:4e:fc:08:ac:3e:57:42:30:a5:d0:f6:a0:
15:07:81:4c:69:e8:1f:23:69:ec:fa:75:f9:e0:de:
75:0c:12:2f:3b:1f:f1:fd:a8:b0:70:37:6e:2c:e3:
81:b8:12:de:35:92:ec:55:75:f1:15:cf:8d:55:a8:
92:02:87:81:09:b5:d8:29:7c:39:ba:2e:a9:fe:79:
a0:1b:ad:06:bf:58:44:c5:65:3c:40:f4:5f:66:1e:
2d:32:16:4e:45:b2:3d:24:a7:6a:17:90:a6:f9:b9:
64:e5:de:ae:88:a5:c4:f9:55:75:e5:c1:2d:ad:e9:
f0:e3:43:1f:5a:a1:14:ba:b8:73:e1:e8:41:a2:2e:
97:b9:0d:11:b7:4b:b3:05:18:67:3e:82:bb:1c:0d:
1b:e5:b6:bc:82:38:a3:4a:be:6a:60:be:32:f2:b7:
3b:df:51:c5:1a:fd:61:38:3e:e0:f2:6a:02:06:97:
e1:33:96:86:2a:7d:c8:37:5a:a9:8d:63:48:50:6c:
af:92:62:f3:17:f7:31:15:dc:b9:1b:f9:54:4c:79:
e6:e0:db:0d:f2:0e:e9:fe:73:20:07:64:04:c9:75:
27:b2:65:09:5b:0d:a9:e7:d5:d6:e2:c8:49:4b:ca:
e0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B6:33:34:18:C5:26:4F:3C:39:D1:35:23:74:1A:5C:5E:B7:1B:82
X509v3 Authority Key Identifier:
keyid:B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1d:fa:3a:37:40:b1:05:48:70:d2:53:ec:be:a1:33:8f:39:
37:7a:ae:1e:3c:40:36:7b:d8:99:37:a1:c8:81:b1:1e:0b:1e:
5e:23:b9:43:94:d7:50:ea:19:07:7d:86:4d:af:fa:40:51:c6:
40:8d:94:10:62:e5:1b:96:76:d7:55:19:51:d5:ee:1e:19:e4:
c9:7a:c7:80:0e:44:dc:bd:ad:01:d6:f8:3c:83:8a:36:02:60:
ca:42:33:46:a3:e7:4b:95:6d:e2:d3:84:fa:c6:71:c7:0e:52:
13:aa:53:ec:ee:16:a5:1f:cc:35:a6:5e:ac:ca:3c:da:ff:57:
b5:14:06:4d:63:b6:01:cf:28:1e:e6:3e:58:4f:77:a7:e1:b9:
79:03:b7:5d:26:ee:8a:ac:4f:9a:53:88:26:43:b9:af:c3:43:
9a:ce:7a:49:03:75:c3:69:7b:84:60:81:5f:92:c2:24:9c:40:
9c:d0:ef:e0:12:43:39:43:79:01:e3:68:90:22:7f:9a:2d:d3:
df:69:7b:e3:e4:d6:3b:88:55:f6:61:44:d1:39:c6:9e:1d:58:
9c:e0:c0:a1:2e:50:fb:08:68:30:9c:25:20:e3:36:fe:1e:8c:
2e:44:67:f3:2c:9f:87:4d:61:70:7d:dc:6b:c4:ce:7a:22:56:
47:85:b8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:38 2025 by rpki-client