Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
File: tFOob9MIG4A-3BDSO77akdeTICU.mft (raw, json)
Hash identifier: EK4ak1Ey3MF1Vyv84cwninIe1EIpafs6U1sJILX7MhA=
Subject key identifier: 3E:10:CF:FB:93:3C:A8:16:31:9A:C9:2C:8B:17:BA:9B:43:1C:25:8B
Authority key identifier: B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
Certificate issuer: /CN=b453a86fd3081b803edc10d23bbeda91d7932025
Certificate serial: 0198410739FD72CB884F46FC209673842896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
Manifest number: 158F
Signing time: Fri 25 Jul 2025 10:00:49 +0000
Manifest this update: Fri 25 Jul 2025 10:00:49 +0000
Manifest next update: Sat 26 Jul 2025 10:00:49 +0000
Files and hashes: 1: h8oFDHIXTub3TgbD4vBpQOwCmWM.roa (hash: lwyf55gn3PMFr0CsrdeYlJw82BVP+7eUtEsfzrm/dIo=)
2: tFOob9MIG4A-3BDSO77akdeTICU.crl (hash: dvYTW8RFrSHtidrzbXk+uhHrlbAQUTn2eECpa2Eb874=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:07:39:fd:72:cb:88:4f:46:fc:20:96:73:84:28:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a86fd3081b803edc10d23bbeda91d7932025
Validity
Not Before: Jul 25 10:00:49 2025 GMT
Not After : Jul 26 10:00:49 2025 GMT
Subject: CN=3e10cffb933ca816319ac92c8b17ba9b431c258b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:96:7a:ba:8d:54:70:1e:b4:0f:ab:15:60:5c:
ac:90:ac:d5:8a:63:4f:4a:e2:29:5d:d8:5c:5d:b9:
17:be:42:57:ac:8d:42:8e:30:fb:06:a6:d8:b0:12:
2d:39:ab:2b:4e:ca:d4:8f:e8:da:48:56:b7:a1:b2:
16:04:be:66:51:72:ba:22:47:f9:a0:6d:88:05:2d:
cb:1e:c6:7f:22:d7:74:8d:65:30:d2:42:bc:5d:76:
5f:87:cb:49:77:b4:65:9d:b1:ba:55:59:16:4b:d9:
fa:8a:c5:fd:7f:c0:4d:0a:9e:49:bf:8d:ab:ee:51:
62:72:a9:34:9c:f3:95:85:f8:48:69:3f:e1:c0:ed:
2b:a4:36:38:dc:7b:e8:70:21:26:88:9f:9a:b1:d7:
13:e8:1d:62:9c:6e:71:bb:8c:26:77:1a:b9:90:d0:
4e:80:24:4e:eb:e7:0e:19:f2:36:99:75:81:e3:d0:
4d:8a:1a:b7:58:3c:50:82:46:32:98:76:32:3f:f9:
ee:eb:3d:31:a1:a9:6e:a2:d7:70:c1:c0:c0:c5:15:
df:60:a4:f5:fa:89:a7:42:fe:ce:4c:9c:b0:7d:4c:
83:49:86:ba:c1:c5:d1:89:a9:b1:b7:87:8a:aa:ae:
74:ac:1e:b7:a0:0c:ab:9f:d0:52:16:17:63:26:e8:
6b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:10:CF:FB:93:3C:A8:16:31:9A:C9:2C:8B:17:BA:9B:43:1C:25:8B
X509v3 Authority Key Identifier:
keyid:B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:c7:af:b4:7a:2e:96:0d:ca:b7:7c:da:f9:c4:ed:6c:64:06:
4f:fa:33:2e:b3:e0:54:40:29:be:27:8a:11:d5:4d:a7:35:42:
26:a6:4a:ad:06:34:c1:f3:0f:9f:05:48:6b:a7:04:b4:6e:2d:
e6:5a:42:6c:8b:52:d6:61:32:5f:3b:c5:0a:12:05:65:9c:13:
f2:e7:9e:1c:bb:b4:2c:a7:24:7b:f4:f3:f0:e6:3f:94:00:f9:
d2:85:81:7f:fa:8f:12:d4:45:ba:c9:78:97:8e:25:a6:8b:07:
ac:af:bf:cf:db:5a:39:d4:45:7c:30:cb:c5:c2:64:97:3b:ca:
e5:4e:51:0d:7c:43:1b:d6:81:5f:c1:d4:fb:b8:b7:dc:9e:d0:
ca:e0:88:68:b0:e2:e2:0c:40:0d:9f:b5:ac:de:b5:12:00:2d:
c2:8e:8a:28:4e:0d:56:c7:0f:cf:06:3e:c8:34:8d:52:9f:e5:
56:ca:69:5c:1a:40:5c:8c:31:50:e9:06:e5:20:da:d8:e5:28:
bc:1d:72:67:a9:ef:7e:4a:2e:e2:3a:61:0f:6b:64:2c:42:87:
eb:dd:f2:a3:dd:ff:88:e5:83:50:85:75:b2:78:c3:1b:f0:1a:
95:62:37:07:fc:6f:28:f5:81:ee:23:fa:dd:e9:b6:5c:11:5a:
f7:e3:0e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:43:40 2025 by rpki-client