Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
File: tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft (raw, json)
Hash identifier: vtMKokZ+l3ZbYACiLffzUZ377B0qZ/5jS9Qwy492U3U=
Subject key identifier: 8D:5F:F5:C9:94:6D:35:59:64:B0:B1:AC:ED:13:B3:C5:8D:B4:FD:61
Authority key identifier: B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64
Certificate issuer: /CN=b473167913af73e4f6374170c4f945f8b0dd7d64
Certificate serial: 0198D583E86924CDE254E47C3D4C80EF8805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
Manifest number: 0CAE
Signing time: Sat 23 Aug 2025 06:00:48 +0000
Manifest this update: Sat 23 Aug 2025 06:00:48 +0000
Manifest next update: Sun 24 Aug 2025 06:00:48 +0000
Files and hashes: 1: J0ZgfR5U6lkaUqXFqkaevK5zE7Y.roa (hash: /1drMWi8WHeYZMzayKCKRAt2zHYV3mIjXjepj/lhD8k=)
2: tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl (hash: pt+CkWwQT3xIC/4jnbuQGovHS3ktjSylUPxRIwNqrs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e8:69:24:cd:e2:54:e4:7c:3d:4c:80:ef:88:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b473167913af73e4f6374170c4f945f8b0dd7d64
Validity
Not Before: Aug 23 06:00:48 2025 GMT
Not After : Aug 24 06:00:48 2025 GMT
Subject: CN=8d5ff5c9946d355964b0b1aced13b3c58db4fd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:71:ae:f7:c9:3c:37:77:a3:5a:65:66:d4:ac:
e6:fb:5f:22:2b:d1:1b:30:0b:d5:7b:56:dc:e8:8d:
52:12:cc:f7:46:87:a1:f4:84:f4:d1:48:95:ea:c5:
a7:60:47:dd:30:22:5a:0d:44:b4:76:ec:a7:b7:d1:
aa:84:9d:15:ad:37:13:e7:3a:dd:07:a0:69:97:82:
77:c7:2d:37:c2:5a:ba:e7:83:ef:d0:ac:d0:af:45:
1c:2d:a4:d9:eb:19:24:bd:b0:87:79:bc:d8:0b:42:
0f:b5:cb:83:30:f7:7f:96:c7:21:1e:a5:2c:21:a2:
37:94:3f:80:05:3b:6a:98:b4:ad:ee:1f:dd:3b:ed:
7c:37:55:d1:2d:7d:5b:c3:06:c7:28:43:67:6b:18:
5a:70:f8:bf:12:65:61:d8:bb:1b:86:60:90:88:da:
fd:57:7a:d5:25:06:7e:cb:bf:58:be:df:c1:01:84:
b4:98:70:42:20:65:58:62:ec:e2:69:51:7b:44:e5:
ec:19:6e:6e:a2:01:4e:35:d0:1c:17:89:fc:d8:6f:
4b:9a:52:87:f7:2e:fd:da:8a:6a:21:d3:88:a7:03:
ad:9d:a1:9d:93:17:0b:39:14:b2:24:8f:45:9d:0e:
2d:5b:d8:64:75:2d:89:ce:5d:e9:d7:70:c5:e5:e7:
59:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5F:F5:C9:94:6D:35:59:64:B0:B1:AC:ED:13:B3:C5:8D:B4:FD:61
X509v3 Authority Key Identifier:
keyid:B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ae:61:18:57:9d:3e:b5:92:fa:8f:c5:75:ad:60:25:d0:78:
2c:aa:82:ab:19:7c:1d:d6:c9:65:82:d0:82:11:19:fe:1a:33:
95:27:33:9f:64:69:98:c2:61:8b:85:53:4b:fd:ab:87:50:b4:
89:85:e2:fb:75:bb:2e:46:3e:4c:20:0d:e2:f0:b4:a8:9c:7a:
a1:46:57:41:7f:24:0f:db:18:80:af:0a:09:a9:25:ff:d0:52:
dd:03:d9:87:3b:89:ef:df:28:67:43:e4:9e:f2:d7:17:f0:6a:
40:a7:f7:53:bf:55:b4:d1:de:19:99:97:98:4a:d5:e8:9a:9f:
85:b4:2f:d3:45:eb:13:89:9b:35:5e:50:82:14:d2:fd:89:57:
a4:25:d8:ae:e6:0c:a6:f9:70:48:08:81:e5:cb:a9:94:93:e0:
14:00:84:24:df:b9:d3:fe:d4:9b:75:8a:de:64:84:d7:c5:84:
c3:a2:fe:50:8e:cc:5f:4b:e9:05:94:a1:80:d7:6b:fe:8f:7f:
43:99:a4:76:89:54:2f:00:f8:1c:57:a5:cb:80:71:cd:38:ca:
77:64:b6:46:0a:b4:b3:df:21:e8:09:55:5b:84:a4:b8:08:aa:
da:13:da:02:f5:24:dd:eb:b5:4b:9a:a5:93:41:ed:bc:f1:da:
a3:68:b7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:47 2025 by rpki-client