Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
File: tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json)
Hash identifier: cMsh2i7TmBeSCkQmMGe+pOohnUBvSi510OwlJrv+8uQ=
Subject key identifier: AF:B3:70:9C:5C:D2:C2:2A:F6:C1:CA:DF:18:73:92:21:8B:30:4E:4D
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Certificate issuer: /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial: 0198D5BB97AE5A9F763D5B09472FCB6C1924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:37 +0000
Manifest this update: Sat 23 Aug 2025 07:01:37 +0000
Manifest next update: Sun 24 Aug 2025 07:01:37 +0000
Files and hashes: 1: BDcEAKntpIejrVcoW-jQtFYDt4A.roa (hash: 9rJ6V8MVwpwUlBMeKLrrT4d005j4mZf3dlxw+gQ0CuE=)
2: n9wbgcYA2gFozQl-awLgvubO0Jw.roa (hash: I7/eXt/2fdY6ma/4TQO3Dibom5bD15oMz/+pqihDXpI=)
3: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: cU6hAX3/6+CmyMU65qV3gv+ZcKOt34znyda0NY0lrzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:97:ae:5a:9f:76:3d:5b:09:47:2f:cb:6c:19:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Validity
Not Before: Aug 23 07:01:37 2025 GMT
Not After : Aug 24 07:01:37 2025 GMT
Subject: CN=afb3709c5cd2c22af6c1cadf187392218b304e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:06:99:3b:f0:30:58:18:4a:d5:e1:fc:84:06:
cb:ea:85:c5:c1:9c:89:80:3a:e6:00:39:e5:35:8e:
99:36:f2:28:00:73:fd:c4:51:d4:7e:07:75:57:af:
7d:a7:04:3b:d5:be:e4:1e:c8:f3:dd:5f:4c:80:38:
7c:db:84:20:6e:1a:e8:2d:30:70:76:7b:48:41:85:
55:eb:51:c9:27:e7:55:08:ee:f7:36:68:7f:39:eb:
74:8d:4f:07:c0:60:f3:32:b6:e5:45:97:75:0a:1a:
30:5c:b9:3c:d0:18:3a:ac:f9:e3:40:89:ca:7f:d8:
9e:5c:00:ef:95:da:84:5f:fc:85:0e:f6:f1:9a:78:
de:cc:d8:d5:6e:33:84:00:16:cd:c9:06:a2:24:ef:
f8:de:e9:69:60:e9:ab:65:90:b4:d6:51:89:dd:32:
c2:c7:f5:a9:af:a0:5d:20:e1:4e:ee:6b:13:5d:40:
50:4e:5c:65:78:8b:27:b3:c5:14:b6:30:ec:4a:ab:
08:60:e7:ec:ce:df:6a:ab:f8:ce:20:04:f7:04:ae:
55:f7:0a:60:a1:da:4d:f0:cc:a1:97:f7:55:c8:5f:
b4:e4:3f:67:3d:42:cc:53:8e:aa:25:30:d8:37:5c:
d6:a6:ef:93:6f:95:39:b6:99:39:71:58:b5:5b:ce:
c5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B3:70:9C:5C:D2:C2:2A:F6:C1:CA:DF:18:73:92:21:8B:30:4E:4D
X509v3 Authority Key Identifier:
keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c9:f9:66:16:aa:f1:14:25:76:0e:b5:fe:72:14:fd:2d:6c:
1b:ef:e0:02:19:0a:5a:bb:52:9e:97:79:22:d0:42:f7:59:06:
98:4a:8b:4d:75:ad:cf:38:7a:67:9c:7e:ec:90:85:fd:4a:b9:
4e:0d:9f:c9:e0:25:6b:24:45:8c:c9:3c:d5:15:36:1d:cb:fe:
8d:14:fc:6f:77:2d:9b:f3:66:b8:61:51:21:17:ba:8b:d3:07:
9a:cb:62:1f:08:04:eb:9c:5c:0f:4c:84:b7:82:11:5f:52:e4:
fa:82:13:c3:ff:97:04:28:d2:98:7f:a8:e9:58:dd:b4:aa:fe:
25:4b:e7:d2:b4:ff:81:bd:c9:d2:12:8a:19:f8:ab:fa:07:5b:
9f:83:f0:74:fa:e1:c7:a8:b4:38:df:d4:3c:ad:d6:ab:35:7c:
bf:c9:42:b0:d2:c0:99:98:7a:5c:6e:5c:14:95:7e:92:b3:ed:
02:ca:0a:28:cb:dd:47:5d:0c:70:dc:73:cf:74:1c:89:bd:48:
f5:e1:2e:81:23:40:20:34:c6:40:d1:f1:96:a8:b5:2f:04:aa:
83:7e:c7:07:55:99:d3:3f:40:dd:ea:ca:b6:75:d9:3f:31:9a:
81:6b:70:82:55:ea:a1:55:8d:63:6d:2b:c9:16:53:d2:4d:3a:
82:4f:2e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:04 2025 by rpki-client