Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
File: TphKWkt4CLtOoy0xC90H7MlXURM.mft (raw, json)
Hash identifier: DhWcPq1x4sMBX5yIedXHMI1dh4OhhBFLoS1yXv7UikI=
Subject key identifier: 89:9C:1D:6E:F6:18:C3:EF:85:39:53:A0:FA:15:62:1D:4C:C2:BD:50
Authority key identifier: 4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13
Certificate issuer: /CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
Certificate serial: 0198D5BBF50D31685DC48FC4FED1D26760A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 07:02:01 +0000
Manifest this update: Sat 23 Aug 2025 07:02:01 +0000
Manifest next update: Sun 24 Aug 2025 07:02:01 +0000
Files and hashes: 1: 8ZKbnPniu913SnjXvn3kXFXoTm0.roa (hash: 5HixzWr+kvtOLRKOe0GySJFEoBIN8n7Szdz/SR3iCoA=)
2: TphKWkt4CLtOoy0xC90H7MlXURM.crl (hash: tRSvmt4KrEPqdh+ojeC5jwA62idRcbCANJIG36EsqVs=)
3: c5p1cEEnGb5RFBRHp7Sxm_tjKvM.roa (hash: M29Br9NKk77+hhhlGq1bhWv7l0daFqIJWaEI7ntt2wY=)
4: iDLcfc6aCabj7RN8rRXRQoXvHeA.roa (hash: UvXUgafoqKLsjB+HeAD02OLRE2t5kuX7jZTUuLZ1nRA=)
5: u6tKtCCW-Dj0-HkdzJ6yaeEuRAI.roa (hash: dfQrij6E/OioNCwBaUVfNrimg1NkdqgGbAXbWqoJr0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f5:0d:31:68:5d:c4:8f:c4:fe:d1:d2:67:60:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
Validity
Not Before: Aug 23 07:02:01 2025 GMT
Not After : Aug 24 07:02:01 2025 GMT
Subject: CN=899c1d6ef618c3ef853953a0fa15621d4cc2bd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:54:f7:e3:92:ac:9a:3f:a2:11:b1:05:32:
df:3d:96:b4:dc:1e:e2:b7:43:4a:1d:81:ac:67:4c:
64:5f:2b:dc:cd:97:6a:b6:b6:65:52:e3:6a:f1:3e:
f3:85:c4:45:e1:86:7f:eb:1a:30:f0:67:80:b7:eb:
56:ae:14:87:97:d5:7e:14:d2:25:98:7a:4f:73:33:
bb:29:b8:ef:ab:07:e6:ed:49:c4:ea:7b:ca:1a:a1:
23:04:b1:c6:bb:32:79:b5:ad:25:8b:19:45:97:38:
cc:e4:80:c7:6d:dc:76:1b:93:44:bf:2e:01:12:0d:
d7:36:e1:15:15:cc:45:03:bf:b5:f3:f1:0f:67:9e:
38:b9:b3:c6:db:7f:2c:41:a4:87:6d:13:97:0a:d1:
f2:7d:ca:7a:bd:9e:2e:86:f0:a6:2a:fd:a3:cd:fd:
b1:f2:b1:fa:fc:c3:a9:d5:74:61:68:7e:45:43:00:
18:ef:d8:d5:a6:e4:d8:ba:50:3c:e7:b5:d0:70:6e:
21:30:6a:6e:94:3c:ef:96:99:b6:8a:c2:ef:98:41:
11:67:27:03:12:58:3f:06:2a:e7:3b:aa:cf:55:89:
e2:e9:d2:08:97:6b:72:a7:f7:3d:e0:fd:a3:00:e4:
34:82:40:16:5a:52:4d:b4:b5:b8:5a:54:ad:d1:b1:
4f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9C:1D:6E:F6:18:C3:EF:85:39:53:A0:FA:15:62:1D:4C:C2:BD:50
X509v3 Authority Key Identifier:
keyid:4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:89:0e:72:10:1a:b4:94:6b:88:06:c3:b2:3d:8d:41:75:fa:
6c:d8:63:0f:3c:5e:2d:00:7b:73:b1:ce:c3:e0:6b:68:23:27:
d9:ec:ea:31:bd:20:88:20:76:48:e4:f1:02:d3:1c:3d:59:18:
12:ef:22:47:96:8d:57:44:55:f4:e3:66:3b:ff:64:94:c9:f1:
2a:eb:81:01:7b:b1:65:f2:b2:c5:04:f5:ad:77:f3:1c:6e:4c:
02:87:55:01:75:85:21:4b:c2:ee:17:fd:03:86:7c:00:01:93:
7b:56:f2:91:09:0e:ac:8a:3c:f7:c3:2f:ec:66:30:4f:51:7f:
04:ec:7e:7b:cd:42:62:e6:bf:7c:10:83:08:f4:33:71:7c:ad:
f2:34:30:f9:81:af:eb:e7:b4:01:b4:78:37:68:f9:f4:a1:fc:
4b:11:86:9c:52:c4:9f:6c:b3:dc:d5:84:e4:99:50:da:85:c5:
4e:35:85:84:8a:01:27:dd:85:64:e9:8d:d1:eb:70:ff:be:2c:
b3:50:98:81:d5:46:4a:5a:bb:9a:c9:b2:2a:eb:a7:3f:11:b2:
43:72:f5:b3:02:b4:f6:55:83:73:20:22:08:6a:01:08:20:53:
50:96:15:8c:6e:bb:93:96:93:43:51:9a:4c:17:2c:b5:63:b5:
ea:95:ad:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:02 2025 by rpki-client