Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
File: tm6nNZIhwbd9bMAG97ZwapqQgpk.mft (raw, json)
Hash identifier: eZWwdq6S2YlmYzB36IoLhNzDRg7I6ckcwBJ0wz1JEZ8=
Subject key identifier: 3F:A8:01:68:15:99:E9:CB:36:19:12:7A:61:17:19:4B:AB:1C:8D:62
Authority key identifier: B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
Certificate issuer: /CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Certificate serial: 0198481BA9021DC9BEB1D6ABDA30AD0DA366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
Manifest number: 160F
Signing time: Sat 26 Jul 2025 19:00:28 +0000
Manifest this update: Sat 26 Jul 2025 19:00:28 +0000
Manifest next update: Sun 27 Jul 2025 19:00:28 +0000
Files and hashes: 1: NlYcoSp45z0WrpR3Tl1MptwPpME.roa (hash: sqtBfE3kNCyJie27C2GkG5RDLoXNkpYCfVwwEjHU9tw=)
2: tm6nNZIhwbd9bMAG97ZwapqQgpk.crl (hash: l/hdW6Il9fAN3V8qyLLt0yRBPhCEfqyhUOvECjfKEK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:a9:02:1d:c9:be:b1:d6:ab:da:30:ad:0d:a3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Validity
Not Before: Jul 26 19:00:28 2025 GMT
Not After : Jul 27 19:00:28 2025 GMT
Subject: CN=3fa801681599e9cb3619127a6117194bab1c8d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:43:6f:ba:0d:67:ce:d7:68:6d:5a:08:a7:64:
dd:68:00:45:66:b5:08:e1:aa:df:f2:8e:db:a7:9c:
5a:23:68:2d:00:5b:91:ed:d6:5f:f6:c9:9e:c7:49:
60:89:63:bb:a3:16:88:9f:15:5d:12:7b:4a:74:83:
eb:f1:bb:fb:c5:f0:97:f9:63:0c:d1:53:77:c9:c0:
84:ec:04:cb:9b:e1:89:f2:74:93:bd:77:2e:4a:b4:
28:24:07:72:06:6b:ed:31:19:62:6b:b9:f9:0c:3c:
6d:cc:d7:03:21:5a:49:d5:4a:ec:9e:52:94:49:c5:
e6:01:5c:cd:e8:22:03:fa:f7:a1:26:51:3f:f8:28:
28:ba:60:87:4f:96:2e:fa:d0:8c:9c:08:f5:ca:85:
fe:e5:c7:bd:c7:68:0f:0b:e4:93:d1:5f:e4:51:c1:
3b:3d:27:5a:c7:f6:0a:53:f9:da:3a:d3:70:08:b7:
01:ef:59:a0:67:84:bf:d9:90:50:2f:3b:dc:1a:a3:
24:19:4a:62:6b:ce:53:b0:85:c6:83:ee:70:66:3c:
68:fb:83:17:8c:50:02:47:f1:5a:fd:3b:b7:a0:d6:
b2:30:6f:c9:17:db:f0:f2:6e:f6:aa:24:e5:37:ca:
a9:a8:b5:56:44:09:56:ae:7f:51:10:eb:16:67:ff:
df:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A8:01:68:15:99:E9:CB:36:19:12:7A:61:17:19:4B:AB:1C:8D:62
X509v3 Authority Key Identifier:
keyid:B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a2:6f:e9:fe:17:e4:3f:69:e1:4a:fc:39:cc:ef:05:2c:76:
4c:18:67:92:93:a1:b0:6c:ab:61:e2:e2:36:12:4d:8b:8e:cb:
65:b8:5f:6f:9d:aa:13:6c:02:57:a6:ac:ca:b3:ec:25:cd:4f:
3d:c0:2a:45:9b:3d:ce:68:1d:fb:b6:4f:e4:15:d8:29:d7:e1:
b8:0c:e8:70:52:bb:5e:a4:e9:4d:b6:e0:88:62:79:b3:ae:17:
72:08:3f:bf:8d:2d:f1:05:55:14:40:47:4b:1a:c8:a0:80:6e:
bd:82:f9:b1:ed:76:70:08:bc:60:f9:75:10:5e:f3:48:e2:a0:
a1:78:ab:f5:77:5d:bc:57:77:53:48:49:96:da:62:74:ba:49:
b2:7d:bd:e2:db:a7:41:3d:15:bf:b9:c8:ad:78:88:db:f6:2d:
50:c9:4b:36:d3:7b:ae:db:01:9f:28:48:7e:70:67:31:97:da:
05:1e:62:89:0e:00:06:fc:3e:ea:38:a7:a5:e7:33:d0:0d:ff:
17:28:0e:11:4a:ed:80:a4:7b:cf:5b:e3:02:ac:0a:8e:2a:4a:
50:0e:e4:b2:0f:5f:41:2c:72:9f:86:ee:0d:dc:0e:74:60:f2:
5c:0f:d0:e3:58:6c:1b:c6:b2:84:6f:d1:e2:2b:10:8f:04:8a:
ac:c3:1d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:40:22 2025 by rpki-client