Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json)
Hash identifier: xRS51OiafVUITps8PvEKf+w7myRLd/P3Ruc6YxnfRto=
Subject key identifier: 67:26:4B:63:E4:90:A7:79:DF:C9:B0:77:1F:21:C5:04:53:1A:D2:B8
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 0198D4E0B62EDA5A252ACE057280B3BC4A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
Manifest number: 0F5E
Signing time: Sat 23 Aug 2025 03:02:33 +0000
Manifest this update: Sat 23 Aug 2025 03:02:33 +0000
Manifest next update: Sun 24 Aug 2025 03:02:33 +0000
Files and hashes: 1: VYJ9qKilNSj9Z30pGpYaNAGU4Z0.roa (hash: j29BGrdUX9gZWLn/MqLu3C1IYATOJG6BtpBREfenzkc=)
2: dek1yBz9hU9Sw_jKA33of_zM9K4.roa (hash: yub3ufVUEc3WS+XkUJMCp9euptnf3DjONJgSPtRCvNQ=)
3: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: zrETsv3YZ+nTerMQL8DTfx0uoZYXqp/1dUkCFPjIykc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b6:2e:da:5a:25:2a:ce:05:72:80:b3:bc:4a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Aug 23 03:02:33 2025 GMT
Not After : Aug 24 03:02:33 2025 GMT
Subject: CN=67264b63e490a779dfc9b0771f21c504531ad2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a2:4c:fc:a3:60:ea:75:11:1d:b1:89:16:8d:
bd:40:fa:22:ce:01:00:1a:e8:39:e9:eb:7d:d3:62:
89:db:54:86:01:01:e1:c8:5a:ad:2b:ff:ad:de:8a:
5c:c8:1d:5c:4f:7d:4e:bf:5e:20:c9:b3:7c:e2:dc:
33:25:ac:02:57:3c:50:bf:a7:35:e7:e6:e8:3c:c7:
52:6a:b8:ee:7b:4b:bc:76:00:9f:be:14:d4:48:f7:
b1:01:6e:f0:5d:80:d4:53:95:1d:03:51:85:3f:a5:
b2:d7:ad:93:08:44:22:c3:d5:e3:a8:6f:48:72:d4:
4b:ee:f8:87:1b:1b:00:74:f6:4b:83:7a:c1:fc:e7:
e4:67:73:55:bd:56:7b:87:65:4e:a3:a5:f6:56:e1:
85:7a:df:9a:83:c5:d3:7f:fc:ff:1e:3e:a8:d2:0a:
c6:cc:a7:5a:06:8d:dc:2f:55:e0:e6:69:b0:34:0b:
e5:2a:4f:ba:fa:dd:ec:19:19:56:64:60:c9:ce:f6:
02:d3:23:7a:a4:25:88:8f:11:95:96:78:1f:b1:8b:
cf:e6:ab:7a:8f:fb:a4:a5:3a:27:8f:05:76:b3:26:
98:b5:d8:61:83:ca:a0:61:22:7f:d6:19:03:1c:f4:
c9:10:21:e7:9c:ad:6b:1e:d3:86:95:ff:be:41:16:
f5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:26:4B:63:E4:90:A7:79:DF:C9:B0:77:1F:21:C5:04:53:1A:D2:B8
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:91:fe:f0:3e:74:5d:ca:92:c9:6e:cd:55:c6:41:3f:15:b1:
16:b0:81:6e:cc:c2:05:94:64:50:60:1c:e5:16:43:d0:37:bc:
a9:26:aa:f8:00:8a:d0:5f:14:3d:0f:8e:5a:88:d9:22:e0:4c:
59:7c:56:0d:3f:c7:9e:67:fa:d6:05:2d:f7:60:0b:39:b2:a5:
c6:f6:a4:c2:bf:28:a0:a1:3b:26:e9:93:eb:70:ba:7d:17:18:
e8:b4:c9:50:d3:2c:3c:52:a6:9f:b5:fb:38:7e:3a:84:61:82:
04:4e:da:26:77:e4:4c:82:03:11:25:a7:dd:cd:d0:72:99:0c:
ee:f1:ae:29:5a:1f:99:63:09:ab:f0:b8:cb:a0:d9:47:da:fe:
7e:22:69:e4:93:62:ad:99:eb:d9:69:14:42:b5:54:e4:f6:c6:
2f:3c:cf:97:1b:09:3e:60:8f:25:00:93:a3:04:96:a3:47:01:
ce:28:2c:14:48:cf:59:6b:0a:23:f8:2a:df:a2:2e:ed:97:be:
97:c0:d1:51:4b:d9:09:7a:da:d5:94:8e:b8:cd:2f:45:5c:31:
c2:50:c4:82:8d:74:37:17:04:a6:bb:7b:a9:83:9a:9c:9e:ae:
42:e3:2c:95:c6:75:00:b2:22:6c:65:d6:29:6a:68:70:79:dd:
3c:08:3c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:06 2025 by rpki-client