Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
File: tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft (raw, json)
Hash identifier: 1g0UWcJ5S9H6ty7Ta4Fs4EyZ/ua4nJYNflHHp8zv8Rk=
Subject key identifier: 69:35:47:95:F2:16:8D:09:8F:0F:65:45:01:49:52:9E:E8:32:10:FC
Authority key identifier: B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
Certificate issuer: /CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Certificate serial: 0198D4E07D7EADC285206078845C2E766B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 03:02:18 +0000
Manifest this update: Sat 23 Aug 2025 03:02:18 +0000
Manifest next update: Sun 24 Aug 2025 03:02:18 +0000
Files and hashes: 1: HeDUncvNrC9DXvqHmX3LCuEEQFk.roa (hash: pkL8awVC+vif3Sv8BEo/gQroGPTBLCBBOJrEXIA/gLU=)
2: tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl (hash: guQ2FcZyA/mjpPDeSXm8iyhPlV+A9XoVTnGCbdGYyeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:7d:7e:ad:c2:85:20:60:78:84:5c:2e:76:6b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Validity
Not Before: Aug 23 03:02:18 2025 GMT
Not After : Aug 24 03:02:18 2025 GMT
Subject: CN=69354795f2168d098f0f65450149529ee83210fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dc:9b:9e:12:0d:54:57:ac:ea:c0:b1:3e:8a:
d8:13:f1:9b:0e:a0:35:01:92:76:e4:97:29:b9:52:
9d:95:36:fd:79:0a:fd:16:50:3e:43:ea:1f:39:7f:
5b:bb:1c:e2:62:f7:b2:06:e3:08:1e:05:22:c0:ff:
6a:d8:b3:17:c0:a9:fb:91:c5:47:28:a8:b8:7e:94:
f3:10:35:1b:3e:bd:07:7c:1e:39:22:7d:9a:c2:2e:
01:83:74:5e:d2:14:92:6b:05:db:3e:d9:c1:39:3e:
c0:37:6b:48:7f:a1:c5:4f:7f:31:4f:85:fa:dc:00:
e9:44:e1:a6:0a:e8:6f:a1:09:fb:4c:fb:c3:06:e7:
8c:6d:c2:65:a4:9e:3a:bb:62:b2:fd:66:6f:5d:d9:
be:0f:18:87:ef:15:aa:db:6d:da:ac:b6:b6:c6:18:
fd:ab:4a:9e:1e:e5:a7:90:8f:d0:74:ac:72:58:37:
89:88:3a:44:be:ec:32:57:61:fa:5a:23:7a:3d:06:
74:1e:c9:35:e7:69:97:52:7e:58:da:95:d7:b0:fe:
b8:eb:b7:3e:27:c3:2f:8f:dc:de:c1:d2:fd:00:75:
9e:85:5d:e2:ea:1d:d6:d6:cd:80:41:e1:9f:e3:db:
a1:51:3b:35:8b:df:d6:91:5a:eb:24:29:20:c7:bb:
30:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:35:47:95:F2:16:8D:09:8F:0F:65:45:01:49:52:9E:E8:32:10:FC
X509v3 Authority Key Identifier:
keyid:B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8b:5d:3a:03:3b:03:7b:bc:3b:54:0e:bd:f7:3e:9a:2f:9f:
2f:59:21:c7:1e:5a:20:dd:ea:01:0d:9b:bf:dc:e2:b4:5d:6c:
29:c8:c2:29:af:15:08:37:e0:67:ce:18:6a:4c:68:b8:9e:29:
1e:20:3d:92:4a:ea:35:6a:3e:bd:5a:ab:ad:75:74:7e:62:e2:
af:48:c5:62:4d:0a:b9:33:3c:3e:81:f9:73:5a:81:14:f4:ad:
16:c2:bd:53:9e:39:9b:1d:f2:36:c9:c6:eb:c9:cb:c3:e1:fc:
d0:1d:74:2d:6d:7f:68:b6:bb:2f:0a:f4:f1:5b:f8:78:a0:e4:
19:f2:05:16:32:5d:91:86:c9:c9:e0:e5:4c:cd:2a:70:68:64:
d0:f2:75:af:12:d9:67:ad:37:fb:56:04:6d:6e:79:d8:36:7d:
43:77:9a:b4:05:e4:0e:ee:24:18:d1:6f:dc:2a:19:26:11:31:
96:32:ba:0f:a8:f3:f1:25:ee:7c:9c:98:bd:16:e2:75:a8:18:
99:04:8d:9d:b3:52:0a:53:7b:57:1b:f3:a3:d0:5f:64:c8:fe:
dd:1f:ea:31:62:71:4c:05:61:f7:55:7a:a9:9c:74:4e:ca:e2:
e2:37:db:82:6e:37:c2:1d:fb:89:78:70:bc:4c:32:54:86:51:
15:e4:25:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:48 2025 by rpki-client