
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
File: tE-FORdNAL-ov95JBD9IXDpYdSU.mft (raw, json)
Hash identifier: LFGB83/2/6ahJmjMqwDTploam2Yz+8BGFxlXsZumUac=
Subject key identifier: 28:A6:87:27:66:A7:85:7A:9A:F8:B5:93:5C:88:88:25:FF:32:83:AD
Authority key identifier: B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25
Certificate issuer: /CN=b44f8539174d00bfa8bfde49043f485c3a587525
Certificate serial: 0198D65FAFBBB80A18012EC1D6B2F8BC48CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:00:51 +0000
Manifest this update: Sat 23 Aug 2025 10:00:51 +0000
Manifest next update: Sun 24 Aug 2025 10:00:51 +0000
Files and hashes: 1: tE-FORdNAL-ov95JBD9IXDpYdSU.crl (hash: pSqACJQb1pzkNZoKxbBeGgf3wClpzZKWAriF+L8eM7k=)
2: xUV-1OBQ9tZ_Xv0-wwfyT7s6w0s.roa (hash: kyqwYkE6bzY0EYwjT0bnHVarYHy1IZctjgwIpdkE7zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:af:bb:b8:0a:18:01:2e:c1:d6:b2:f8:bc:48:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b44f8539174d00bfa8bfde49043f485c3a587525
Validity
Not Before: Aug 23 10:00:51 2025 GMT
Not After : Aug 24 10:00:51 2025 GMT
Subject: CN=28a6872766a7857a9af8b5935c888825ff3283ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:e4:f3:44:59:83:ec:0b:73:2b:bf:b7:e1:
a7:57:38:e5:45:01:0d:52:52:57:c6:f3:32:3c:19:
1d:97:18:5e:01:28:fe:92:b6:b3:b6:68:a2:42:26:
a4:fb:48:f1:8b:5e:76:98:34:6f:e1:48:87:32:1c:
b1:bb:84:22:12:75:5c:1e:56:42:6c:36:2e:d5:b8:
20:83:8d:ce:dd:b2:17:3a:0a:79:3f:09:74:81:10:
a3:3a:18:b1:a6:09:8f:b6:70:08:50:c3:1d:c1:c5:
ee:eb:3f:27:3f:78:39:4d:98:2f:df:5b:8a:8d:d6:
1e:53:7e:3f:0e:58:73:3a:1c:51:1b:e7:3b:64:f0:
38:bb:55:f0:e5:ec:7d:0c:4f:b6:ba:4b:03:40:88:
aa:9e:e4:9f:74:fd:25:de:d8:cd:f2:92:8b:60:43:
66:b3:10:aa:7d:72:fd:16:15:ee:f5:38:16:ec:20:
3e:da:21:aa:f2:05:ce:cf:ed:2d:9c:95:b8:04:a6:
bf:56:4d:c8:d2:f1:5a:f2:53:60:c9:bb:cb:c1:12:
c5:fb:6c:43:d6:d6:91:05:aa:b3:1a:a9:59:07:a2:
c4:2c:35:9c:6f:f6:df:88:30:f0:22:01:84:da:0d:
8e:51:3e:29:b7:99:83:ac:ef:15:e1:a5:fa:c2:ce:
16:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A6:87:27:66:A7:85:7A:9A:F8:B5:93:5C:88:88:25:FF:32:83:AD
X509v3 Authority Key Identifier:
keyid:B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:45:d1:2a:55:91:d0:0c:d6:5b:dd:a1:ec:7e:5e:a4:aa:56:
1b:18:ae:43:d0:2c:b8:a3:a3:44:f6:8a:55:26:c9:9b:26:de:
84:e3:10:da:b7:8a:1d:62:c3:8e:15:07:6d:c2:ea:42:0a:6c:
8b:49:5e:89:93:23:d4:5d:89:c2:62:ba:e3:d4:94:53:87:57:
26:e5:e7:fb:4d:d7:66:a5:95:b2:27:7b:e5:6f:c3:45:bb:c9:
9d:e5:11:2c:36:53:da:90:69:2e:cd:a6:ad:50:da:2f:62:c3:
07:ce:11:55:17:a4:5a:ba:43:57:fc:b6:1b:c9:be:bb:1d:0b:
5a:db:c4:89:1a:61:4a:5f:6a:f1:1b:99:b6:56:94:fd:55:35:
ce:06:a6:b5:88:48:d0:4a:ed:0f:32:20:9a:cc:81:f7:9f:92:
6a:65:99:31:20:4e:68:b0:c9:71:4b:1b:b3:9c:8c:f8:bd:06:
e1:15:85:72:10:8d:25:f6:0e:b2:cd:a2:7a:09:f8:88:ad:ce:
9b:1e:48:c3:1e:9a:ac:2a:92:f6:73:4e:40:89:c7:5f:31:9b:
a4:f9:4b:d1:ba:cb:06:1b:1b:85:58:72:ae:64:53:9e:f6:64:
4f:bf:1e:3a:3b:08:72:60:e1:d7:60:fd:b1:47:f4:5f:17:24:
80:6f:ff:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:56:59 2025 by rpki-client