Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
File: tkB0qoRJgw2psgs6-waC08Ay-f4.mft (raw, json)
Hash identifier: UljZGSCVJCMX71AkLxhHpXukEU4en8U1P6F33OAHsgM=
Subject key identifier: E6:96:38:CB:72:62:E5:A9:02:5A:67:2C:D2:9A:90:19:B6:40:CB:51
Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Certificate serial: 01992FDA1F7B336CEC938CA4926563115CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
Manifest number: 1680
Signing time: Tue 09 Sep 2025 19:00:47 +0000
Manifest this update: Tue 09 Sep 2025 19:00:47 +0000
Manifest next update: Wed 10 Sep 2025 19:00:47 +0000
Files and hashes: 1: BdOIN-x7p5NQNZFat3HBRk8aNP8.roa (hash: E6O+SQKCroETYNOj7yjRqDXwGgY2i2+LPEeaEfVM6HA=)
2: SvbWjBtA5USrFJEFyfsvP-SCofs.roa (hash: La++FukCI88aoCCAWTG9ojz1zryPe+WC1BNRSElIvDw=)
3: ZqMh09XL_OuL0ICq-TfvGdj4pmM.roa (hash: l5g5wXS3ZWKojPoOXqpehHnI+SHAfeYcurBv6Xo/WU8=)
4: tkB0qoRJgw2psgs6-waC08Ay-f4.crl (hash: lmAUXvJKtmQiL/sdcqhLWwMRLtSU4HloZuobn7ieOVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:da:1f:7b:33:6c:ec:93:8c:a4:92:65:63:11:5c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Validity
Not Before: Sep 9 19:00:47 2025 GMT
Not After : Sep 10 19:00:47 2025 GMT
Subject: CN=e69638cb7262e5a9025a672cd29a9019b640cb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:46:fe:3f:21:95:8e:5b:72:1c:09:f7:42:
e4:13:ac:1a:2f:a8:86:1c:94:3c:ee:4a:67:1d:b9:
b6:e5:3d:fc:5f:29:1c:35:76:ad:38:64:75:1c:2f:
cd:b5:35:3e:31:7b:f9:89:97:b2:83:88:d9:4a:6f:
93:30:e3:4c:e5:9f:27:28:ee:5a:92:68:95:0d:96:
3d:cd:d6:06:fc:6f:d9:d7:ef:67:0b:c9:20:c5:20:
e2:bb:24:e1:3c:7a:16:00:d3:c6:a3:95:d3:19:09:
d1:10:1e:63:26:33:57:e5:b5:e1:4c:64:73:ff:47:
ff:94:37:ef:80:e7:1e:32:86:bf:f6:59:50:d6:f9:
e9:cf:19:30:17:cb:8f:af:f5:48:8e:50:ab:17:1c:
36:06:e2:04:d3:50:08:c8:f4:af:96:97:37:ce:ad:
70:d4:b5:39:7b:ff:ad:5e:74:72:41:51:7e:f1:2f:
f6:e7:71:9e:9a:9d:a2:a0:00:b6:62:db:ec:8c:b1:
6b:f4:06:79:74:2d:81:ed:07:cd:ce:bc:6b:90:d9:
1d:6e:8a:43:78:fc:8b:dc:87:a6:37:4b:1e:08:c4:
ad:08:19:5b:26:88:e0:20:df:9f:91:10:0f:b0:4c:
5d:70:ff:9d:36:80:bf:ff:f3:65:8c:b6:6a:05:0a:
a0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:96:38:CB:72:62:E5:A9:02:5A:67:2C:D2:9A:90:19:B6:40:CB:51
X509v3 Authority Key Identifier:
keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:9a:ad:00:38:5b:65:27:4b:a9:e0:b5:9b:0d:d3:ac:46:13:
80:29:29:3a:6d:b3:1d:e1:94:11:91:19:17:76:db:e1:e3:bc:
5c:41:dc:95:69:33:02:72:71:d8:db:05:5b:7c:89:2d:4f:7b:
7d:46:68:ee:63:ec:2b:bf:cd:a1:a5:d1:c9:44:db:48:c4:c9:
1b:a3:a7:e5:7e:3c:01:e9:c6:be:1e:be:28:4a:2c:a7:92:0d:
92:e6:ca:6e:20:2a:be:b6:e7:54:63:96:17:d4:52:d1:0f:52:
47:e0:80:25:31:5d:03:9a:32:3d:82:48:50:89:0a:68:7a:16:
3a:7f:5d:1b:4b:89:d0:94:6e:0c:a2:a0:cd:6c:ae:4d:6c:d1:
12:a8:30:c9:4e:4e:3e:9f:b9:ec:a9:a6:62:5e:c4:71:f8:c7:
6b:52:b8:ba:62:97:9f:2c:c5:e3:58:97:67:fa:a9:21:24:42:
53:bf:bb:04:29:4f:05:a4:69:c5:2f:03:98:bd:17:20:6b:41:
74:c0:5f:4a:eb:fd:eb:b4:f6:88:94:33:60:23:74:1e:35:69:
ad:92:f5:a4:cc:c3:ed:d3:5f:1d:dc:6f:3c:8e:1f:07:c4:5d:
3a:d0:92:0c:4b:b8:72:cc:cf:8a:6b:88:4e:17:6d:72:3f:7d:
0f:ef:6c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:16:38 2025 by rpki-client