Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
File: tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft (raw, json)
Hash identifier: mShh/xv/UItDjAooRJY4E9sD+W+TGSfDnCUaRsSnYEQ=
Subject key identifier: 27:18:AE:36:A8:E7:31:6F:41:4C:E0:17:17:0C:12:9E:48:AA:49:D0
Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
Certificate issuer: /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Certificate serial: 0198C75B9A62261D9042768FAA5C9CADADDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
Manifest number: 10A1
Signing time: Wed 20 Aug 2025 12:02:05 +0000
Manifest this update: Wed 20 Aug 2025 12:02:05 +0000
Manifest next update: Thu 21 Aug 2025 12:02:05 +0000
Files and hashes: 1: Tm8yT_3vBgLrxw1Lr4A3GN1Cjk4.roa (hash: cpwfuPoZQp9+xwJvstUEZKWWh0LDOj40EbCeSJBVSfw=)
2: tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl (hash: zxLxT97q4n05EVw+zLZBNnUjZaM0Mp8x+++qCF36OGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:5b:9a:62:26:1d:90:42:76:8f:aa:5c:9c:ad:ad:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Validity
Not Before: Aug 20 12:02:05 2025 GMT
Not After : Aug 21 12:02:05 2025 GMT
Subject: CN=2718ae36a8e7316f414ce017170c129e48aa49d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c7:0c:7a:e6:aa:49:5f:63:4c:45:91:67:3d:
35:9f:db:67:09:bf:ad:84:c5:8e:13:d0:87:60:d0:
ea:ad:44:89:dc:42:fd:d3:11:81:18:c3:8f:a2:67:
58:e1:e5:ea:f3:f2:ed:8d:f0:a8:26:87:04:89:c6:
ff:36:30:07:d6:cd:a5:c2:c3:9c:89:60:7b:76:91:
b7:aa:56:68:11:74:93:d2:17:7e:96:21:3b:11:65:
1e:58:53:d4:ac:09:4f:ac:62:26:22:64:1b:43:0d:
68:53:c4:6f:5a:4c:7e:a9:a6:c5:7a:c0:50:da:9a:
16:d5:21:24:70:95:63:41:e8:e9:c1:0e:e6:9a:0e:
c5:cc:d8:71:17:97:27:88:b4:b4:30:b9:86:0f:ef:
e7:82:b9:32:ad:e8:0d:09:cb:f9:bc:6b:13:c0:bd:
b4:12:16:77:6f:79:ec:74:4d:99:d3:69:db:5c:3b:
08:b0:80:38:c7:b3:5a:f7:6f:7c:34:6b:48:65:37:
c6:f6:1f:d3:a1:b4:70:84:c3:33:74:80:27:4b:e8:
77:15:98:be:a1:80:b2:51:89:e8:02:91:1c:47:84:
f9:60:31:bb:45:3f:af:ab:a1:58:ae:18:94:10:5e:
90:56:dd:60:38:73:88:3b:d0:fc:18:c8:a7:7c:fc:
46:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:18:AE:36:A8:E7:31:6F:41:4C:E0:17:17:0C:12:9E:48:AA:49:D0
X509v3 Authority Key Identifier:
keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a3:25:71:7d:18:8a:42:d0:00:0e:92:bb:c7:e0:88:8c:8c:
27:c7:dd:f5:07:38:fc:b7:70:15:d2:a3:38:7d:b1:82:a8:73:
b9:f8:e0:99:00:09:af:1d:48:54:0c:9c:c9:b6:4b:c3:77:f1:
39:c3:3e:69:78:94:81:31:a2:ab:8d:a2:46:b0:52:58:05:e2:
f7:31:f2:73:0c:d0:68:ed:96:24:f4:fe:18:e7:2d:c0:71:fa:
31:a8:47:09:65:64:52:24:5a:88:09:21:38:2f:c7:f5:6e:a7:
af:62:fd:9d:18:75:57:a0:0d:f8:8a:5f:f8:cc:d5:7d:66:f3:
f5:c3:a7:64:59:52:a0:8f:80:8b:f7:c1:b2:56:50:c2:1f:14:
b8:b0:d1:6a:13:11:22:9f:23:e0:fe:82:8e:0b:2f:5e:58:88:
10:48:98:13:93:fe:4b:6b:36:22:ca:a3:69:10:43:5d:f8:f3:
1e:87:8c:22:62:65:a4:c9:69:c3:53:e2:0b:92:b9:44:4c:a8:
8c:8e:b6:af:d0:5a:75:19:06:3b:14:9d:e0:94:e2:88:66:b2:
10:5a:86:bc:4d:7b:90:7f:e6:4a:30:7a:51:33:82:52:6b:b2:
14:ea:aa:3d:e5:d3:44:5e:15:62:42:b2:90:a7:04:e5:82:bc:
22:c5:f6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:46:43 2025 by rpki-client