
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
File: tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft (raw, json)
Hash identifier: nLGZzgWU2vyUxXZz3hPXc7lzL3vSwth8DiQNT06IQXI=
Subject key identifier: B3:C9:7A:22:5A:BD:0A:5C:82:3D:0E:A3:F4:1D:3F:F5:67:B8:C8:3D
Authority key identifier: B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C
Certificate issuer: /CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c
Certificate serial: 019847E4E339FB3DF7421B9A021DA879FEF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
Manifest number: 1416
Signing time: Sat 26 Jul 2025 18:00:39 +0000
Manifest this update: Sat 26 Jul 2025 18:00:39 +0000
Manifest next update: Sun 27 Jul 2025 18:00:39 +0000
Files and hashes: 1: VMjps0TDOc6vg4EVncBcfziPs7o.roa (hash: F5yYItxb8pdHFsuwCVpmcCXEuMNoj5mX3+RkzMDL76c=)
2: tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl (hash: ZnKtFf8oawVUjuHlYcR2PtD2GKJZKCg7QqyeLphpzDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:e3:39:fb:3d:f7:42:1b:9a:02:1d:a8:79:fe:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c
Validity
Not Before: Jul 26 18:00:39 2025 GMT
Not After : Jul 27 18:00:39 2025 GMT
Subject: CN=b3c97a225abd0a5c823d0ea3f41d3ff567b8c83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:28:be:79:d2:0d:14:59:80:40:70:fc:b6:2d:
e6:53:5a:8e:55:8d:b7:ee:f1:8c:31:89:27:d1:4b:
2d:dd:bc:cf:3d:0a:a3:2d:1e:54:0e:f6:c7:72:f0:
fd:95:9c:6d:b6:1c:9d:99:3c:db:a7:38:32:ff:c3:
07:2b:2a:6a:90:e1:c9:6e:fb:b4:3d:0a:5b:75:c1:
91:bc:f8:3a:fa:12:5e:ae:d3:c6:19:6f:88:7a:5a:
c4:aa:9c:3e:e6:42:c8:46:12:19:48:bd:96:bc:62:
84:ec:67:99:8a:e4:b4:0f:bd:6f:18:f2:04:51:9b:
5d:64:9d:bf:ec:c9:c8:00:b5:09:d9:e2:fb:50:a0:
87:8e:fd:a8:7a:8f:a5:f0:91:c7:87:c1:4f:95:f0:
48:3f:7e:9f:3a:7c:da:40:48:9f:43:16:b8:e0:9f:
52:0d:89:4c:c3:be:cb:9d:e0:46:65:40:ea:46:67:
71:e1:69:d1:2e:27:cb:56:a7:f3:b6:a3:4a:93:cd:
1d:da:1b:df:a1:19:0c:b9:84:73:0d:e4:80:98:ac:
50:56:1f:0c:4d:81:33:30:8b:02:78:39:dc:0c:95:
02:c3:8b:e8:d5:1a:7b:df:4e:cf:17:63:9e:76:82:
2a:f7:99:53:45:6c:d2:f8:05:57:d2:94:54:46:7f:
4d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C9:7A:22:5A:BD:0A:5C:82:3D:0E:A3:F4:1D:3F:F5:67:B8:C8:3D
X509v3 Authority Key Identifier:
keyid:B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c9:99:97:47:f2:02:50:6b:2b:24:df:08:1d:1e:4c:48:8b:
bb:a5:bc:23:4f:8f:47:77:d1:98:62:08:9c:39:96:ee:5c:0f:
be:01:7c:51:16:a9:da:5f:14:d0:0d:ba:5e:72:ef:fc:1d:40:
87:5b:2f:f3:a6:36:48:d4:cc:ee:4d:a6:38:ec:40:6f:0d:85:
a3:2b:8a:7a:01:ca:b1:6e:60:cb:e5:e8:cd:7b:dc:5c:5c:fb:
62:e2:77:92:65:07:71:8f:05:54:f6:2c:3a:8f:26:2e:d0:82:
f7:c6:32:6e:3a:bd:a8:1c:94:dd:76:ea:ba:fb:66:34:8e:b7:
46:84:bc:df:73:e0:e5:7c:aa:01:51:f9:f4:58:67:f5:69:6b:
31:8a:1c:d5:7f:a3:f8:b0:f2:0e:86:ff:03:d9:c6:00:15:5c:
0d:03:f8:be:4e:63:91:d5:a1:71:d9:0f:55:f3:8d:be:ad:f7:
a3:de:ff:2c:4f:b5:2d:d7:7c:36:ad:52:df:f2:b6:d8:08:74:
9e:38:1f:d7:4f:f7:61:0b:a1:4e:17:02:cc:95:0b:36:5e:be:
0d:77:0f:79:9c:2f:3d:9d:1a:c4:9c:0b:97:e8:c1:f3:52:0d:
6d:c9:1d:12:82:08:7d:d1:fa:74:0e:1a:5f:ce:ef:ab:c5:ed:
ff:b1:81:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:54:27 2025 by rpki-client