Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
File: tDqirb6dQEE3M58g_VhiPIo58TA.mft (raw, json)
Hash identifier: EW1vef3qosOjGiJpWHMwWAFilgnKZCiUm0zfxLJxzvo=
Subject key identifier: 44:FE:5A:A3:58:2C:C7:6C:46:5E:CB:FB:86:63:68:A3:AD:29:FF:83
Authority key identifier: B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
Certificate issuer: /CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Certificate serial: 0198D5F1D1914F3A1AFB092E7F84B165F4D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
Manifest number: 05F6
Signing time: Sat 23 Aug 2025 08:00:51 +0000
Manifest this update: Sat 23 Aug 2025 08:00:51 +0000
Manifest next update: Sun 24 Aug 2025 08:00:51 +0000
Files and hashes: 1: DR42yKGsjL2cx3Lp0nYZ2-J6QjI.roa (hash: SNpq+XJB/gPAUUzDmYBdIDihlauDEu/Coqako/V/GUw=)
2: tDqirb6dQEE3M58g_VhiPIo58TA.crl (hash: EpvgYhrrNa8Lw/ziMhLOKu+8gKrydpfDfSUdprozl4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:d1:91:4f:3a:1a:fb:09:2e:7f:84:b1:65:f4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Validity
Not Before: Aug 23 08:00:51 2025 GMT
Not After : Aug 24 08:00:51 2025 GMT
Subject: CN=44fe5aa3582cc76c465ecbfb866368a3ad29ff83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8b:ec:e8:ec:4b:27:f7:4e:8a:37:6e:21:67:
76:14:8e:91:ae:f5:47:00:39:55:76:34:07:be:92:
1a:6d:94:ee:17:0d:9a:23:e1:e4:47:31:21:4b:10:
50:86:eb:15:14:9f:97:43:aa:37:e6:64:67:82:f5:
f1:30:ec:b0:4e:39:c9:b7:b1:65:c6:08:3e:20:f9:
cd:7a:fa:77:9c:5d:a2:7f:f1:85:33:78:72:3f:0a:
37:2a:66:01:03:fe:63:0e:e5:12:56:85:f8:2f:11:
71:ca:c3:a4:86:9e:f9:75:95:6a:d6:38:cf:48:87:
9a:fa:9b:d5:ef:ff:39:a0:90:23:24:8a:2d:69:82:
2a:48:8a:d2:8f:b6:a0:b0:28:a3:ca:5b:e8:32:23:
93:4b:d7:7f:12:2c:3a:9f:09:fe:6b:8b:fa:9d:bc:
38:0b:dd:f5:4f:f9:4a:47:a6:48:8d:f4:a3:cd:72:
db:f6:4f:cb:8e:13:58:86:61:59:f3:5d:37:c5:68:
49:8c:77:bf:a9:10:68:67:02:d7:a8:e0:dd:2f:2e:
4b:a3:fc:39:06:67:57:67:d1:bc:4a:dd:14:67:fc:
28:72:cd:0d:17:26:b7:5f:df:2c:9e:8d:3b:e8:0d:
40:9a:d8:b7:8a:11:96:e3:24:fa:31:03:be:24:f5:
50:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FE:5A:A3:58:2C:C7:6C:46:5E:CB:FB:86:63:68:A3:AD:29:FF:83
X509v3 Authority Key Identifier:
keyid:B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e7:b4:2a:56:88:4f:76:e1:91:a6:97:04:8f:11:ea:cd:a2:
0a:75:2f:99:67:bc:5e:9e:63:ff:f8:36:49:0d:13:0e:31:05:
2a:ab:00:ed:c3:6a:5a:a5:d1:03:52:39:19:26:f8:68:ef:35:
f1:f0:d0:93:d5:e8:7e:7d:d7:e5:d7:c1:56:03:f8:e9:80:75:
18:42:90:72:ad:63:12:57:aa:cb:85:cd:45:ed:cc:7b:1a:81:
3c:90:10:aa:3e:02:7c:b0:69:e1:b2:fe:3d:1b:1d:6a:96:ee:
09:9c:7d:97:8e:fa:2b:1c:ca:ed:63:b5:27:8b:d4:ff:39:58:
1e:7d:3b:58:bb:ae:8b:2a:24:3d:9a:e9:26:c9:6e:7e:f7:8f:
19:a0:85:63:60:92:ea:99:1a:d2:4b:b5:c0:0b:8d:aa:f1:c3:
e2:3c:50:a2:24:f1:04:7d:21:04:ce:96:a4:b1:e1:02:73:79:
1b:d4:23:76:4c:a2:96:e6:18:a8:87:e5:b8:97:3d:5d:6f:c9:
a1:21:f0:5d:4f:9a:d8:09:43:2c:60:e4:0e:0a:d2:67:90:e9:
fa:23:8b:91:64:98:7b:9d:c7:dd:8e:74:ae:bf:d6:42:15:bc:
98:79:ff:f1:b9:27:04:dc:9d:64:b8:00:00:bf:72:3d:3e:11:
5d:ee:fb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:49 2025 by rpki-client