Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
File: tn8bh-Z1L0VDm4UozJaLR3CloPs.mft (raw, json)
Hash identifier: SqoEvyyMg/JFguyjebAYFoGGAL1g4evaOxMEOYcqqcU=
Subject key identifier: 14:4D:89:A5:08:97:66:A4:4A:98:48:90:C7:7B:98:02:B6:3C:14:AF
Authority key identifier: B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
Certificate issuer: /CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Certificate serial: 01984BC1CBD311FDC97509A58952016FE673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 12:00:48 +0000
Manifest this update: Sun 27 Jul 2025 12:00:48 +0000
Manifest next update: Mon 28 Jul 2025 12:00:48 +0000
Files and hashes: 1: kYfhtSfEKW3P-62E9GiF_Ua9EUo.roa (hash: p1no5bz1+uk9Sv3KCtgs/QuEn0taiRhnvBxPn7m9ACY=)
2: tn8bh-Z1L0VDm4UozJaLR3CloPs.crl (hash: KUxOusW/ySTkkQcoyDYoIeW32ZGAHcj8+TMyoAOVjbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:cb:d3:11:fd:c9:75:09:a5:89:52:01:6f:e6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Validity
Not Before: Jul 27 12:00:48 2025 GMT
Not After : Jul 28 12:00:48 2025 GMT
Subject: CN=144d89a5089766a44a984890c77b9802b63c14af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:67:8c:59:ca:dc:04:82:89:e4:3c:e1:f6:43:
7e:fa:17:ff:cc:4a:87:e0:1a:82:8a:d6:bf:91:32:
28:b1:32:53:0d:a1:65:ab:be:43:f5:93:89:cd:d3:
fe:87:06:0d:4f:98:ab:43:67:2e:a3:4a:c5:f1:08:
56:1a:df:0a:21:a1:af:25:2a:09:f8:75:a4:e2:2e:
e7:4a:cb:cf:2d:6f:88:d6:6d:ac:a9:80:c2:00:fd:
ec:e5:f2:4e:9b:ec:73:72:f6:83:e1:9c:4d:e4:c8:
17:0c:af:4b:57:e0:d0:18:3a:81:34:36:0c:8f:f4:
c2:e6:70:9e:99:e8:2f:8e:bc:59:45:d1:b0:36:4b:
f6:c4:05:82:87:87:de:de:4b:11:3b:43:52:dd:ec:
a8:e6:b4:2f:36:04:3a:ec:3e:8b:bf:db:f1:c2:ee:
e7:f7:df:b7:b4:59:e0:43:21:f7:c5:3e:99:2a:e3:
2f:aa:66:bb:9b:03:89:09:c8:e3:80:b6:a1:13:10:
46:0e:a8:15:a7:39:43:2c:78:bf:95:13:cc:53:13:
f1:2b:90:f3:b6:78:27:84:9c:03:b5:02:ae:23:5d:
d6:9d:be:33:67:7a:15:72:eb:59:a4:8e:11:2c:dd:
25:99:b9:c8:62:67:a7:04:08:6c:5f:c1:bd:0c:32:
3d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4D:89:A5:08:97:66:A4:4A:98:48:90:C7:7B:98:02:B6:3C:14:AF
X509v3 Authority Key Identifier:
keyid:B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:09:36:ec:a2:1d:4a:07:d2:27:09:32:4e:ae:38:75:04:00:
3f:08:3d:f2:40:b3:49:5d:b0:45:d5:13:72:a7:13:41:96:28:
eb:b1:bd:a0:95:81:c5:dc:e1:15:d9:f2:c4:1b:04:c0:73:eb:
ae:ab:bb:e7:4d:05:a9:32:c0:1d:f2:5b:ae:a3:07:9f:f8:fd:
e9:ea:aa:54:cd:4e:39:32:eb:d2:4e:bd:5b:86:ef:db:7b:bb:
27:c9:c3:b9:9a:8b:81:93:62:34:0d:a7:ad:83:50:75:01:80:
51:73:63:fb:8b:3a:e5:fb:15:71:73:bf:f0:7a:04:b7:e8:b9:
51:f1:44:97:0e:9c:65:42:df:22:9a:a1:07:46:ab:a0:e0:fb:
0a:d3:cb:cd:25:2b:aa:e0:f6:c6:a4:5c:b5:8d:44:cd:06:1f:
7d:c9:7e:04:ce:7c:22:69:05:92:91:cd:fc:5c:6e:a9:b0:f2:
8a:84:63:8d:5b:3b:cf:ca:eb:f0:e3:e9:42:6f:d6:00:96:79:
e2:ac:b9:7e:98:89:27:8d:9a:c4:73:98:9b:0f:88:3a:a5:e7:
d1:52:32:78:f0:1f:8b:3e:3f:2e:30:cc:be:0b:56:3a:65:df:
58:ea:d7:50:18:e0:9b:87:d0:8a:1e:54:cd:74:bc:5c:1e:9e:
ed:f3:2f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:28:39 2025 by rpki-client