Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
File: tFBkwayGkOLHepWaUCVG6YvNNyc.mft (raw, json)
Hash identifier: HBiP8siRTWzJWg1OKnujF5rZ3WnOAGpawcxsAPhtDMQ=
Subject key identifier: 9C:FB:7E:4F:18:E4:CE:32:22:1E:26:8F:83:F0:FC:D2:0C:7F:0E:1D
Authority key identifier: B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
Certificate issuer: /CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Certificate serial: 0198D660A73BF45A88551F6945F1E0F092EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
Manifest number: 0CCA
Signing time: Sat 23 Aug 2025 10:01:55 +0000
Manifest this update: Sat 23 Aug 2025 10:01:55 +0000
Manifest next update: Sun 24 Aug 2025 10:01:55 +0000
Files and hashes: 1: _INaZ6DycFqZuVm42lkSOfz9oRs.roa (hash: N1fFaEC6dFW7nNDOY6nEbXrF6dJ7s2tSPU9xB9zA38k=)
2: tFBkwayGkOLHepWaUCVG6YvNNyc.crl (hash: r57XNg4TygvFk9vslKVO8ff0F5xAvEtE86b/lZcdIDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:a7:3b:f4:5a:88:55:1f:69:45:f1:e0:f0:92:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Validity
Not Before: Aug 23 10:01:55 2025 GMT
Not After : Aug 24 10:01:55 2025 GMT
Subject: CN=9cfb7e4f18e4ce32221e268f83f0fcd20c7f0e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:23:d4:12:34:30:45:a7:ba:77:d0:db:74:37:
60:7e:30:00:dd:ba:3e:d6:5a:a3:f1:be:d9:9c:9c:
e1:d2:49:b6:71:6c:56:77:b4:49:1d:bc:f4:c7:c5:
ac:1a:74:b0:ae:de:3e:8a:64:bd:31:6e:33:15:d3:
20:f2:16:20:79:06:71:3f:17:e9:7c:0f:ba:9d:09:
35:19:62:47:d6:9b:b2:d3:ae:1e:25:16:3a:26:cd:
2a:c7:15:f9:db:14:b3:25:1a:7d:54:c6:e1:d6:bd:
01:a9:ad:c1:bb:dc:59:a3:08:5c:b6:ab:49:dd:63:
b9:41:a9:02:51:6d:dc:b1:e3:0b:f9:24:e2:ab:2e:
f1:50:7d:5d:23:29:5a:5b:91:8d:d4:c8:ad:56:75:
77:2f:20:88:cd:36:ae:c5:2d:9c:5f:48:ed:e6:74:
f1:d6:27:4c:fe:34:f1:76:8b:ff:b9:7f:47:f0:be:
d9:56:d3:ac:1d:b8:f6:5a:7f:f8:ec:bf:d1:9b:9e:
b6:41:e0:01:94:35:b7:bb:98:0e:65:30:13:ac:7e:
dd:fc:17:0c:12:98:9f:ff:09:ee:fb:1f:10:fe:ab:
9a:49:aa:fe:ec:9a:cc:d8:81:9a:57:58:8a:f6:90:
3d:8d:68:4f:b8:2b:93:3c:23:db:c2:46:18:97:d8:
3d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FB:7E:4F:18:E4:CE:32:22:1E:26:8F:83:F0:FC:D2:0C:7F:0E:1D
X509v3 Authority Key Identifier:
keyid:B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:3b:ef:d8:a0:e6:17:b6:77:2a:b9:8e:7f:4d:b7:9c:dc:53:
d1:58:32:9f:46:6e:3f:3a:06:c6:bb:f4:5b:b2:f9:a5:60:22:
8a:2e:8e:7a:d6:49:fa:97:96:58:3e:2c:b4:7d:39:d8:07:63:
3a:5e:a6:aa:bb:7d:05:57:6e:7c:f8:b7:24:a9:e5:83:92:30:
7a:4c:fb:75:33:51:9a:2f:e2:69:c2:99:ba:f9:47:5d:06:04:
f5:36:22:42:88:7d:83:ae:a2:3a:2e:86:4c:d6:97:ac:c7:38:
fd:ee:8b:56:e8:0b:53:6f:89:08:99:e7:b6:76:68:87:b6:4f:
ba:db:b2:d1:8c:c1:26:f9:84:58:b2:ad:bd:26:77:af:68:18:
92:03:01:22:8e:9d:3a:f6:02:76:fc:bc:83:75:59:93:81:54:
ab:08:47:c9:35:56:92:fb:d0:bd:48:09:df:47:ea:91:94:c3:
fb:e2:89:56:a6:15:0f:4e:1b:4c:36:41:cb:8c:5e:2e:5a:e3:
a3:4f:e4:e1:3d:34:a1:c5:f7:6a:9f:d1:4b:f3:f1:10:0d:5c:
3f:da:31:e3:58:7e:f5:9a:6f:41:ae:40:c4:6c:bc:d4:07:4b:
dd:31:20:19:de:74:c5:39:7f:11:b4:e7:94:b8:47:55:8a:bb:
48:ea:b1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:15:29 2025 by rpki-client