Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
File: tMflb0aH6hstd2PQiI0QUCNbV0s.mft (raw, json)
Hash identifier: 5go4cnZJO96MkQVeL66Vpd8AVzbgkyCyODtjoHmGgxo=
Subject key identifier: A8:AF:3B:7A:6F:AC:56:2A:30:B8:F7:F6:DC:3C:80:7A:1D:A1:46:F6
Authority key identifier: B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
Certificate issuer: /CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Certificate serial: 019848F72D0436F19A65CAECC9CD1C9A0D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
Manifest number: 1592
Signing time: Sat 26 Jul 2025 23:00:15 +0000
Manifest this update: Sat 26 Jul 2025 23:00:15 +0000
Manifest next update: Sun 27 Jul 2025 23:00:15 +0000
Files and hashes: 1: fVF1mzV7lYVHRMo8LnZ24vMBIsw.roa (hash: xj9vjyKVHbKjwLJzRwcUb2ujBs2KI8YOtyKmg5bMiko=)
2: tMflb0aH6hstd2PQiI0QUCNbV0s.crl (hash: lWIyr7280te0/20J59fgwPwFvpUAdo0UhExcQIGntA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:2d:04:36:f1:9a:65:ca:ec:c9:cd:1c:9a:0d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Validity
Not Before: Jul 26 23:00:15 2025 GMT
Not After : Jul 27 23:00:15 2025 GMT
Subject: CN=a8af3b7a6fac562a30b8f7f6dc3c807a1da146f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cf:01:df:c6:dc:5d:58:12:12:7d:28:95:78:
e1:33:88:62:80:d4:56:3b:82:69:0f:1c:b0:bb:bb:
74:6f:b7:6f:25:e4:27:f0:88:a2:8e:35:26:1a:c7:
11:dc:c3:96:f6:59:a4:b7:54:79:2a:8b:ec:e2:5b:
49:fd:42:26:45:b5:50:97:15:d2:37:fb:e0:a7:3f:
b2:3d:61:5b:a1:38:3e:e2:d4:6d:74:9a:0b:a5:6a:
a9:0e:3c:49:eb:b1:4e:80:c3:54:55:ba:e9:eb:37:
9d:4e:52:fc:e3:42:54:61:2d:01:30:6c:01:bd:2a:
87:b3:fb:0e:5e:7e:ca:88:cf:23:30:1d:58:2e:fd:
1f:29:41:af:a7:b3:ab:c9:09:8c:1e:b1:fe:37:47:
d8:b7:5c:b9:28:1b:d8:3e:85:4d:b4:5c:f8:cd:e5:
87:c4:cb:dd:36:52:c1:e4:f3:58:be:e5:86:0d:78:
09:f6:8e:af:53:9a:ee:4a:12:35:0c:8b:09:6c:d9:
d4:85:6c:ff:b1:96:36:a6:73:62:a4:e6:48:64:c7:
cf:df:0a:40:2f:6e:e1:bf:53:54:f1:a9:72:42:3c:
a4:ba:f1:e6:31:20:ec:fe:8f:d9:54:c2:a4:1b:78:
d3:53:4d:bf:13:ba:36:cd:3d:8b:1a:05:41:5e:74:
0b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AF:3B:7A:6F:AC:56:2A:30:B8:F7:F6:DC:3C:80:7A:1D:A1:46:F6
X509v3 Authority Key Identifier:
keyid:B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:40:78:ca:df:de:a1:d8:27:58:01:76:72:94:de:fb:3d:a0:
ae:e3:b8:84:3e:a4:1a:77:d7:04:9a:ff:a6:eb:18:49:a9:aa:
f6:2c:31:a9:15:82:94:e9:c0:d9:a8:30:53:99:59:e7:ed:a0:
9d:ff:fc:63:0a:77:a3:d7:70:84:c0:89:ce:b8:78:6f:3f:6b:
41:61:af:e2:7b:a8:e2:71:65:bb:5b:3f:8e:3c:a8:38:4d:99:
8b:24:9d:b3:0c:f6:fb:bc:d9:d2:29:75:df:26:2d:1f:1a:5e:
44:4c:fe:35:2d:c4:c8:a8:36:2c:7c:1d:2b:de:ed:7e:25:84:
11:5f:8d:05:46:f7:fa:f5:67:e8:33:f8:3b:06:d0:0f:81:de:
53:0b:da:bb:fb:24:98:07:de:e6:24:d2:b5:8d:20:2c:f9:b9:
3d:d2:01:fa:eb:0a:2f:17:b6:77:71:1e:1f:60:76:c4:05:47:
18:f1:14:22:0e:f2:ea:e6:92:3e:93:64:32:99:65:a2:0f:37:
7e:c2:53:54:04:86:83:d8:e7:c7:91:dd:a4:27:5b:8d:d5:cf:
a0:f6:7a:b2:ad:7e:31:61:cc:d0:74:63:39:ef:4c:45:c5:fc:
d7:13:0e:0b:18:d2:0d:0b:71:25:d7:a3:b4:36:12:e6:35:13:
50:dd:2d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:27:42 2025 by rpki-client