Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
File: tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft (raw, json)
Hash identifier: ErMjQef7ZqnBf7t8XL37x+NXyagIwjLQ8tKBpKsJuAY=
Subject key identifier: 82:64:C2:BD:7E:17:D1:0B:EA:D9:D5:D2:C4:AF:C3:1C:5C:3C:C8:2F
Authority key identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
Certificate issuer: /CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Certificate serial: 0198D4E026A7AD2AD342B37DF01612480A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
Manifest number: 0D70
Signing time: Sat 23 Aug 2025 03:01:56 +0000
Manifest this update: Sat 23 Aug 2025 03:01:56 +0000
Manifest next update: Sun 24 Aug 2025 03:01:56 +0000
Files and hashes: 1: 9FStBrS0NlZ9f0JDPC2m90a8BCY.roa (hash: xw+KW2Ni2Cd+C3tg5Q5Vf8DrtdT917ZQWwgX4LJaEm4=)
2: NcymNU3Ex55jeE07rsjVQP17Yc4.roa (hash: rqRVyPcE0vuZ2ea448N6H2EJDC40DdbDXkISgXkK53E=)
3: XUHwJb1I3gkKMlf7v2dTxFe6360.roa (hash: Gm/rvLP3jZuTC48xJtdoJ5/c1V7BDKST3JSzW3p7S08=)
4: tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl (hash: 50D50ecueJUfJGUiW+ONcwr3ewsQO59n5NTUc8nYm/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:26:a7:ad:2a:d3:42:b3:7d:f0:16:12:48:0a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Validity
Not Before: Aug 23 03:01:56 2025 GMT
Not After : Aug 24 03:01:56 2025 GMT
Subject: CN=8264c2bd7e17d10bead9d5d2c4afc31c5c3cc82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:21:b1:b2:3b:c7:3a:de:ac:d5:06:93:fa:
f2:76:5a:df:81:92:1c:f2:e3:02:10:57:55:fd:2c:
6c:51:c7:c4:fe:42:d8:be:81:19:9c:28:47:ad:dc:
6c:b6:91:98:4a:c0:41:9a:84:a2:f6:cd:61:65:4c:
05:9b:4d:d5:4b:8c:59:22:4c:e5:21:05:46:94:9e:
94:41:58:d7:51:a6:1f:aa:50:40:ae:62:64:1b:f9:
5b:5c:c6:ec:a8:69:14:b1:0e:9b:a6:26:6a:17:44:
2f:22:32:a7:b9:8f:ad:6d:87:68:0a:29:be:8a:6c:
95:61:02:2e:5d:62:2c:a3:15:b8:58:9d:f2:a8:bb:
fc:c0:b4:4d:18:86:a5:64:07:1c:00:20:f2:eb:b3:
ef:03:58:02:06:2e:df:80:37:e8:ad:db:32:a8:b2:
7b:d6:5b:ae:b6:45:d3:84:77:ae:1f:e7:17:6e:c9:
d3:9c:28:6c:f6:43:b7:e8:91:8f:48:4e:1b:9d:94:
4c:cf:f2:9c:ff:fb:f7:7c:23:44:aa:06:43:4a:d3:
5d:37:de:a3:44:fe:f8:84:bd:1c:d3:57:f4:9a:7f:
77:2e:59:63:b9:2a:88:8b:e4:4f:df:af:eb:cf:30:
c9:f0:bc:6c:4b:7f:5c:e7:16:74:97:a7:7b:47:76:
53:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:64:C2:BD:7E:17:D1:0B:EA:D9:D5:D2:C4:AF:C3:1C:5C:3C:C8:2F
X509v3 Authority Key Identifier:
keyid:B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5f:ec:cd:87:cd:7f:08:d8:dd:ec:e6:5a:cd:51:08:d2:fa:
d8:93:ab:e5:70:44:43:32:fe:cd:6d:93:5c:f5:a2:8c:2b:7d:
6a:08:59:29:ed:18:ef:a4:8b:62:d6:0c:ec:f4:9e:e0:ba:d0:
e9:b2:60:51:72:b4:35:08:21:7f:27:4b:f9:6a:31:18:fa:23:
cf:76:55:c5:91:8e:64:22:fd:45:f3:bf:f0:8f:0c:3e:0a:80:
fb:34:01:9f:99:d7:6c:ee:d3:91:b3:ba:d7:c1:84:08:91:2a:
d5:81:5b:09:60:e5:9a:4b:05:6c:bd:c0:9e:e1:4b:44:2f:82:
61:ed:bb:53:a6:86:bc:f5:c1:7f:78:b2:23:2e:4d:99:c0:7f:
ac:5a:10:69:05:cd:b1:ce:15:46:e1:47:cb:91:56:5f:19:1a:
50:d6:21:98:bb:ec:d0:75:1a:98:01:7b:b9:d7:54:eb:12:3b:
ec:08:fe:33:9b:83:34:54:c0:0d:de:39:4b:29:dd:40:08:25:
c8:d1:01:7d:b7:c3:7e:84:59:aa:7a:46:7d:13:0c:db:b6:42:
c1:fd:60:a9:68:c7:65:c1:4e:0a:5f:8d:86:64:81:b0:a5:98:
16:9b:99:49:5c:87:86:34:03:cd:ac:67:bd:10:52:20:85:35:
45:80:a9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:32 2025 by rpki-client