Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
File: tPM_b9KbrwPMTUha9fa3DaawCZ8.mft (raw, json)
Hash identifier: PYYxdN53hkkWK7M4vWD8r7QcKtdDn825hcqsywLXyu4=
Subject key identifier: 6D:1E:A7:A1:5B:6E:82:DB:8F:B9:38:3C:BF:79:35:E3:1B:05:DB:BB
Authority key identifier: B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
Certificate issuer: /CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Certificate serial: 0198D51573EA2BBCC522ACEF3D30CF107AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
Manifest number: 0F22
Signing time: Sat 23 Aug 2025 04:00:09 +0000
Manifest this update: Sat 23 Aug 2025 04:00:09 +0000
Manifest next update: Sun 24 Aug 2025 04:00:09 +0000
Files and hashes: 1: tPM_b9KbrwPMTUha9fa3DaawCZ8.crl (hash: lw+BMY44Jkm4s+S9kWtwTc8BH6c+RN1XdJ3cLS3iahY=)
2: tYPVw8LB8i24cvigRIjHBmA1vkA.roa (hash: PLxJfAKIcmuKybJlU2Vop9ZELJyvcamyBgkEBw419jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:73:ea:2b:bc:c5:22:ac:ef:3d:30:cf:10:7a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Validity
Not Before: Aug 23 04:00:09 2025 GMT
Not After : Aug 24 04:00:09 2025 GMT
Subject: CN=6d1ea7a15b6e82db8fb9383cbf7935e31b05dbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:db:4d:5d:76:0b:6a:e8:72:a3:7b:cd:3c:df:
62:bc:0c:77:fa:c0:1f:10:a4:3e:b4:02:60:b7:23:
80:46:a0:56:da:2c:5a:d6:03:d7:77:53:bf:5f:30:
70:22:dd:43:44:ec:41:97:5d:c6:00:a0:71:c7:72:
7d:e5:05:86:f5:5f:df:28:42:cb:48:7d:39:6b:66:
a4:5e:b0:79:13:7b:71:98:69:c6:aa:f7:56:5c:4b:
91:25:64:6c:17:5b:b0:fc:b5:ba:0b:77:b1:75:c5:
b7:fb:e8:b4:d5:c2:36:fd:c3:5e:ae:ed:ff:da:87:
25:c7:69:dd:bf:5a:0b:f9:49:8f:e5:71:d9:44:f4:
9c:56:ad:33:bc:f1:38:fa:85:04:d4:35:6f:76:bf:
fb:18:fd:5c:3f:1a:90:6e:2e:a8:4b:07:21:0d:47:
62:1b:6e:a1:c4:e7:1b:e8:a7:d5:58:00:f9:13:db:
b8:3e:70:e9:c9:51:8b:d9:7f:b4:9b:07:5d:97:4e:
74:75:58:46:8a:2f:bf:a6:90:56:c5:33:71:0e:5f:
9b:b9:de:93:4f:80:0b:38:f3:28:a8:87:7d:43:64:
30:f4:e0:d5:8a:bd:08:ec:69:62:67:bb:0b:6a:86:
38:9a:10:7a:52:f2:85:89:bf:c7:77:c6:0d:68:1b:
be:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1E:A7:A1:5B:6E:82:DB:8F:B9:38:3C:BF:79:35:E3:1B:05:DB:BB
X509v3 Authority Key Identifier:
keyid:B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4b:e3:2d:44:3c:79:82:ba:8a:82:7e:67:98:b9:44:a0:2f:
f4:20:31:2f:61:6d:d7:2c:1d:41:e8:59:bb:e9:0a:91:47:6e:
f2:ec:cb:8f:f7:f7:d1:7b:1b:54:70:f9:8f:86:fc:91:3d:e9:
21:85:80:e2:2b:ff:42:f8:e2:31:f7:7b:64:07:11:d3:72:ec:
eb:e0:7e:3b:4d:6b:12:7e:f9:13:9a:96:d1:75:37:28:4e:85:
47:4b:f4:b4:f6:1f:ca:8b:37:9e:6c:ce:78:01:3f:b9:43:0c:
bd:bd:97:ce:f5:00:01:c6:94:09:d1:79:d7:9c:6a:d3:4d:ed:
46:a3:92:75:21:96:0c:26:ca:17:cc:a8:8f:25:ad:79:1c:cf:
36:73:e2:0b:6f:4e:b6:75:17:2e:e3:97:7a:30:f1:bb:c3:17:
43:47:03:6c:d2:13:9c:ee:d4:e9:ab:eb:fa:c2:04:fa:bf:6d:
e8:1e:c2:3b:cd:05:c6:e3:cc:b2:03:19:24:17:a6:bd:94:b3:
11:a3:74:5b:28:6a:aa:2a:43:fd:7a:96:2f:f4:b1:b8:95:cb:
b0:ea:f2:4d:1f:eb:7a:9e:24:5a:98:90:68:2e:08:c1:75:f2:
61:81:89:14:60:5a:28:e9:c4:35:59:97:ef:51:7c:67:eb:98:
55:17:5b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:36 2025 by rpki-client