Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft
File: tIENfJv8WLngoeWRacPdMi3p9zc.mft (raw, json)
Hash identifier: VZr7qeE8wOivG/xOCGQzfPXpbsiDDatVtd7SXSNOxpU=
Subject key identifier: B3:CE:DA:1C:27:91:80:AB:20:8B:24:0E:EB:A8:10:BA:9E:B1:F2:F6
Authority key identifier: B4:81:0D:7C:9B:FC:58:B9:E0:A1:E5:91:69:C3:DD:32:2D:E9:F7:37
Certificate issuer: /CN=b4810d7c9bfc58b9e0a1e59169c3dd322de9f737
Certificate serial: 0198D6CD4C734D2901840F208BDD23B71F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIENfJv8WLngoeWRacPdMi3p9zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 12:00:35 +0000
Manifest this update: Sat 23 Aug 2025 12:00:35 +0000
Manifest next update: Sun 24 Aug 2025 12:00:35 +0000
Files and hashes: 1: jHERjwHQQByovrguIT9kNAenUlw.roa (hash: fC13Nqgu9Ca7tsn1KpGgJ5T6X5W9BeqrdrYm3SZE1Rs=)
2: tIENfJv8WLngoeWRacPdMi3p9zc.crl (hash: XB1O1e42rPgJQA0kv2lVuBq7w+zp//OVaOr8TWOLcCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIENfJv8WLngoeWRacPdMi3p9zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:4c:73:4d:29:01:84:0f:20:8b:dd:23:b7:1f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4810d7c9bfc58b9e0a1e59169c3dd322de9f737
Validity
Not Before: Aug 23 12:00:35 2025 GMT
Not After : Aug 24 12:00:35 2025 GMT
Subject: CN=b3ceda1c279180ab208b240eeba810ba9eb1f2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a8:29:b0:27:24:38:e3:be:0e:97:d1:49:9b:
35:15:ce:2a:fc:5f:84:ce:56:94:0d:b5:d6:e5:56:
46:7d:c8:30:b4:7a:56:2f:e2:e8:45:25:1e:6c:eb:
13:4f:8e:b7:99:1f:e6:30:31:76:24:36:0b:87:25:
dd:0c:12:e4:90:19:52:24:a5:9f:3d:c0:a6:cb:bd:
81:fb:ba:f3:ea:e2:09:0f:c1:ee:24:bf:10:b6:8e:
8c:d1:4a:83:b6:44:6b:80:9b:14:b0:f9:a1:98:4e:
69:c1:d0:66:e4:ca:1c:22:8a:94:2a:d4:93:31:36:
39:25:f1:1e:61:48:29:89:e3:81:c9:e7:c9:79:44:
5a:42:4f:67:0a:cc:85:69:06:2b:41:5f:23:e0:26:
f8:ed:61:0b:cd:77:60:c9:7e:fe:34:1f:76:3a:50:
e3:a0:d2:1c:79:bb:a1:2d:15:80:de:08:04:14:2c:
98:15:42:5c:4e:d5:fe:26:0b:a9:e6:ac:9b:32:06:
a4:bc:fe:cd:2d:24:c7:90:da:ce:36:bc:56:0e:c6:
27:b3:bb:b6:db:12:8f:6b:a0:50:fa:85:0f:76:4d:
95:75:a9:18:77:c1:ed:a1:bd:f3:aa:40:8a:f3:0e:
80:f6:a0:00:f9:94:3d:73:62:f6:6f:70:f0:8f:91:
54:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CE:DA:1C:27:91:80:AB:20:8B:24:0E:EB:A8:10:BA:9E:B1:F2:F6
X509v3 Authority Key Identifier:
keyid:B4:81:0D:7C:9B:FC:58:B9:E0:A1:E5:91:69:C3:DD:32:2D:E9:F7:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIENfJv8WLngoeWRacPdMi3p9zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9c:b0:0a:eb:ee:b6:fe:78:05:48:59:e9:6c:9d:dc:7e:bb:
30:ba:f5:f1:b0:b3:5e:c4:15:4f:f5:a9:9e:30:a1:37:a4:63:
89:61:ba:ed:16:31:6e:56:ea:d2:0f:93:a6:05:47:a8:0d:a6:
7a:2b:54:cd:09:5a:af:82:8b:c2:a8:0f:26:3e:49:85:e4:06:
ae:62:02:14:30:ed:a3:47:e4:ba:ee:e2:76:cd:94:53:ee:50:
b0:a9:4e:8b:75:72:23:32:1f:06:82:5e:b3:bf:ee:8f:c4:fc:
a0:3d:2e:0d:0d:34:aa:01:0e:57:a8:61:03:16:91:65:d2:bf:
98:ea:d3:88:54:1e:87:21:ad:e7:53:fb:48:26:af:cc:aa:fe:
00:89:68:c9:e1:53:42:a1:29:d3:09:34:60:05:60:f2:48:a0:
c4:33:ac:6a:fa:79:7b:ef:12:e8:b9:be:6a:c9:e9:e5:94:e9:
d2:b0:ad:2f:18:44:9a:48:b0:c9:87:b3:8a:e1:22:ea:b0:7b:
ea:08:66:20:d6:38:4b:6d:6c:79:b5:46:c4:60:9d:50:9d:44:
51:e8:af:62:15:f2:e2:84:18:d9:d4:a5:42:d8:30:f2:32:92:
1d:c7:34:a0:0d:88:05:e0:3f:5f:6d:c7:85:bc:2f:ff:9a:51:
ff:c9:b7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:40:01 2025 by rpki-client