Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
File: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft (raw, json)
Hash identifier: XrFtditjLVLKR11sCdvYx7ZarmKjh1S/kYYZv4ERe4A=
Subject key identifier: 55:88:FF:B5:3A:E1:80:CA:F6:76:FF:79:3E:8A:88:C8:FF:54:53:43
Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
Certificate issuer: /CN=b4f115424c181c67966ccc2467ede69d060ccf53
Certificate serial: 0198D5BBD90DBCA8092BEE4063D6B7B5C5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
Manifest number: 13B1
Signing time: Sat 23 Aug 2025 07:01:54 +0000
Manifest this update: Sat 23 Aug 2025 07:01:54 +0000
Manifest next update: Sun 24 Aug 2025 07:01:54 +0000
Files and hashes: 1: bqp6f9GjY5TF5wTxOeK8Ji-YrkE.roa (hash: b7SVmPCcwJQed2khWFQ0sTeZykPXeoqQG4LQy2NRwCA=)
2: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl (hash: EMtuutATTPRp3G5VWMLp2wT3exh8a+A+uwvfjbTh8ZY=)
3: xktUIB6GDLW-h2_LFZTy4dam33Y.roa (hash: BgrfS/HN5mPWhSmcXKgkikTloXU/AxYtLSZ8SaD1EM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d9:0d:bc:a8:09:2b:ee:40:63:d6:b7:b5:c5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53
Validity
Not Before: Aug 23 07:01:54 2025 GMT
Not After : Aug 24 07:01:54 2025 GMT
Subject: CN=5588ffb53ae180caf676ff793e8a88c8ff545343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9b:15:44:40:6c:be:7d:ce:dc:ed:7d:e2:0b:
4a:54:89:98:d7:d6:85:3b:72:2f:22:b8:dd:fa:19:
cf:2d:0f:22:fd:63:1f:a8:96:70:f2:b8:e8:6c:b4:
b4:71:aa:a8:1b:ef:fb:d8:0f:35:22:bb:be:d7:82:
38:1e:51:c1:f3:68:05:f6:b1:c8:0d:76:3f:d7:a1:
8e:16:5b:7a:bf:28:e1:e9:8e:78:07:c3:af:1c:c6:
49:e8:fb:74:c9:3a:68:f9:6a:72:bc:83:5a:8d:6c:
67:f5:1f:a8:a3:f4:f6:e5:50:8d:c5:8b:2a:11:60:
12:7d:4a:76:f3:94:da:f2:77:06:d6:47:73:8a:a6:
a1:0d:e2:ef:bb:67:fc:3c:2e:69:44:05:3c:cd:d4:
aa:db:22:67:76:1d:8b:74:51:c9:af:80:56:ee:5e:
17:5c:d6:02:a0:be:52:5c:a3:5d:17:34:8c:87:5a:
a6:f8:59:55:4f:f8:63:8c:50:53:f2:27:5e:da:f1:
49:aa:e4:61:66:53:e0:9b:76:2f:86:3a:2a:d1:b1:
0e:92:5b:32:ff:91:fe:93:24:71:72:dd:9a:b5:f4:
2f:9c:71:64:c0:29:50:10:48:a9:2a:70:22:6f:59:
19:f8:82:c4:59:79:80:84:80:2b:af:ad:de:26:ac:
3a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:88:FF:B5:3A:E1:80:CA:F6:76:FF:79:3E:8A:88:C8:FF:54:53:43
X509v3 Authority Key Identifier:
keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:7b:bc:17:9f:15:e2:6f:3b:f5:48:3c:ad:9f:a6:35:ed:fb:
a3:99:76:1a:92:32:ea:91:63:43:3e:74:53:fc:96:ba:bf:7f:
f1:6e:9b:07:2f:00:72:5d:b5:79:b0:b7:e0:c1:5c:83:c9:3c:
01:f4:26:d4:cd:b8:11:72:c2:1f:99:fa:b2:1b:50:35:fa:6f:
10:29:83:ff:31:08:13:10:73:64:b2:b8:d6:a3:ec:38:5e:08:
c0:f0:34:61:01:86:1f:0d:8b:46:bc:8f:a7:1e:20:fb:4a:08:
c2:6b:db:d6:f1:0e:75:45:f0:bb:dc:d0:06:75:19:f2:3f:49:
80:61:93:16:bc:d1:39:0e:ef:b1:89:11:27:20:6a:e4:ba:aa:
d0:ca:0e:71:6a:56:76:0c:8f:36:22:32:e2:2e:59:ef:1f:3f:
fd:c6:c5:47:8a:d1:55:39:b5:13:54:0e:41:70:51:5d:1a:f6:
8d:44:6e:6b:7d:86:36:0d:22:53:18:8c:b3:25:36:33:10:d2:
c5:11:8b:85:bf:8f:00:e7:cf:1d:ba:d8:8e:0d:7b:fa:97:0a:
13:30:aa:aa:38:8b:34:6c:e0:42:0b:07:44:6c:8b:3b:f5:55:
e0:19:4f:65:c4:93:d9:a1:13:1a:25:08:7f:7d:e1:e5:16:27:
5b:d8:12:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:34:51 2025 by rpki-client