Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
File: tLuK74sObZxv9jIIB_WpAHWY7rA.mft (raw, json)
Hash identifier: BlU1gqp4jmIjuXLj2Xs/J5fTaNeu0MAnAP18sDjAOxs=
Subject key identifier: 86:38:95:C7:D6:4F:EC:BB:A3:C4:23:57:88:4D:3F:90:DC:CB:49:8E
Authority key identifier: B4:BB:8A:EF:8B:0E:6D:9C:6F:F6:32:08:07:F5:A9:00:75:98:EE:B0
Certificate issuer: /CN=b4bb8aef8b0e6d9c6ff6320807f5a9007598eeb0
Certificate serial: 0198D5839184E1E6C3B2C2A5CB5A34625EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLuK74sObZxv9jIIB_WpAHWY7rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
Manifest number: 08DC
Signing time: Sat 23 Aug 2025 06:00:26 +0000
Manifest this update: Sat 23 Aug 2025 06:00:26 +0000
Manifest next update: Sun 24 Aug 2025 06:00:26 +0000
Files and hashes: 1: 8ntjSMus2ECR1PU4tfABg9_MTk0.roa (hash: NThyxZZCDawOVk5/yNg7I3X8M08Hqe7vBd2lZGQPe1c=)
2: tLuK74sObZxv9jIIB_WpAHWY7rA.crl (hash: UuN7gqQE0+Ror70mq/P/+DIRdIydFic0FPCmBj6JHQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLuK74sObZxv9jIIB_WpAHWY7rA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:91:84:e1:e6:c3:b2:c2:a5:cb:5a:34:62:5e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bb8aef8b0e6d9c6ff6320807f5a9007598eeb0
Validity
Not Before: Aug 23 06:00:26 2025 GMT
Not After : Aug 24 06:00:26 2025 GMT
Subject: CN=863895c7d64fecbba3c42357884d3f90dccb498e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6f:9f:02:55:78:66:de:8f:60:e4:8e:25:7c:
a8:69:77:98:46:66:8b:fb:96:25:ab:e7:8e:51:8f:
fb:d4:58:8b:86:05:98:21:95:05:a7:75:54:f6:bf:
34:20:af:c5:18:a2:ee:6e:e0:19:cf:e1:dc:71:f4:
19:e8:6d:44:10:ef:43:b8:33:ab:be:ff:4a:f4:46:
d1:97:58:38:8f:bf:2b:0f:29:b0:a6:f8:85:e8:76:
79:34:f2:47:a7:5c:3a:42:c4:d9:30:7e:0d:43:ae:
5e:ce:71:e0:3c:2d:64:5e:5c:3d:9b:44:00:5a:fe:
af:6f:8a:14:f4:b4:fc:bb:af:f4:19:3c:19:0f:26:
f2:98:8e:62:be:78:9e:ea:69:71:3a:27:e0:59:1b:
fd:0b:00:b3:26:d9:c0:69:e5:da:2e:08:f8:8a:5e:
d0:49:6a:7f:c6:8e:1a:43:4a:93:9b:35:f0:0c:12:
c1:79:a1:cc:c2:da:a6:2a:38:ae:8a:15:69:df:a7:
ca:fd:db:35:19:8a:1e:59:db:23:8e:43:7c:76:64:
d0:84:70:88:5f:c8:a3:d5:86:69:78:b5:a2:57:8f:
92:64:55:ac:71:2e:39:29:56:cc:f0:3d:04:ec:84:
15:1d:f4:a7:48:8e:72:93:3c:bd:01:e3:33:bd:78:
41:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:38:95:C7:D6:4F:EC:BB:A3:C4:23:57:88:4D:3F:90:DC:CB:49:8E
X509v3 Authority Key Identifier:
keyid:B4:BB:8A:EF:8B:0E:6D:9C:6F:F6:32:08:07:F5:A9:00:75:98:EE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLuK74sObZxv9jIIB_WpAHWY7rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:9d:72:51:7a:c6:de:22:3e:56:25:64:d5:c9:36:f4:f7:ea:
13:2c:d3:8d:95:be:5b:cd:a7:7b:4a:fc:e2:12:77:3d:f1:f4:
f2:9d:d7:03:8c:f4:b6:83:af:b7:c8:2b:c5:05:c5:4b:fa:9f:
bf:b7:ea:99:dc:69:c8:73:19:62:c8:fa:d1:c7:7a:6a:94:15:
80:2e:fa:6c:bc:53:7c:e1:58:b4:32:a1:9a:d3:80:c9:3b:f2:
e6:8f:40:62:73:4c:09:c3:e2:bb:ef:1e:c7:c8:cd:19:6b:54:
a7:7e:9a:9c:a9:d9:5e:14:ee:72:40:2c:77:bb:d7:53:f8:eb:
46:e0:56:b2:c4:ba:61:16:fc:07:61:c4:4d:82:d6:f2:c7:8e:
25:bf:05:8a:bb:62:43:cf:28:5c:4a:00:71:fb:31:79:fb:f9:
e3:ac:e5:f8:4a:75:44:a7:02:03:de:cc:23:62:5e:25:f7:ac:
cd:03:5b:3c:d8:a4:6c:41:20:fa:19:7b:4c:97:b5:a4:e5:ff:
40:77:8e:59:4f:2f:67:0e:e6:9f:f3:c0:ab:65:b5:77:57:52:
95:26:48:9f:5d:54:33:3d:79:ad:f1:8a:fe:53:86:2d:dc:d0:
d2:c2:b1:8e:10:f4:5e:84:b9:82:08:20:d8:08:fa:1b:99:78:
f5:14:c9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:36 2025 by rpki-client