Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft
File: tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft (raw, json)
Hash identifier: sNAv1e8wWq7L4aHMa0JNkc6RokpfiFeNkIUSXxWgb/s=
Subject key identifier: 52:5D:80:73:0C:10:60:AC:80:85:85:ED:56:C4:68:61:54:92:AD:5E
Authority key identifier: B6:C2:A3:1D:60:ED:25:61:19:97:E7:B7:DE:4A:9B:6F:26:06:ED:34
Certificate issuer: /CN=b6c2a31d60ed25611997e7b7de4a9b6f2606ed34
Certificate serial: 0199228CC462154987AF3F5EC034EAC5DC93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsKjHWDtJWEZl-e33kqbbyYG7TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 05:01:14 +0000
Manifest this update: Sun 07 Sep 2025 05:01:14 +0000
Manifest next update: Mon 08 Sep 2025 05:01:14 +0000
Files and hashes: 1: kKMC8jThQpDwK6v7GaumYPI4bHE.roa (hash: jzEV+uNk9P/+bwhKx1o1i5qEZ9QBMjGpsu47uocCOtY=)
2: tsKjHWDtJWEZl-e33kqbbyYG7TQ.crl (hash: UX6CzlS19+f6xzq91loqoAnBMKANXBER8dmfWXece+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsKjHWDtJWEZl-e33kqbbyYG7TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:c4:62:15:49:87:af:3f:5e:c0:34:ea:c5:dc:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c2a31d60ed25611997e7b7de4a9b6f2606ed34
Validity
Not Before: Sep 7 05:01:14 2025 GMT
Not After : Sep 8 05:01:14 2025 GMT
Subject: CN=525d80730c1060ac808585ed56c468615492ad5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:f9:75:8e:0e:6a:b1:b4:4a:a7:f5:00:3a:
81:6f:01:05:16:8e:da:05:b7:70:e3:31:be:72:c5:
e6:ff:d2:d5:db:9e:48:31:1a:a9:9a:e6:2b:2e:47:
4f:be:af:b6:66:1f:b6:5b:14:13:f5:a5:70:45:96:
f6:6e:db:4b:34:bb:bd:91:f8:9a:5e:7d:81:2e:90:
b7:4f:b3:4f:7a:bb:ca:0c:8e:b4:2b:fb:89:b2:e9:
73:82:46:cb:15:84:35:28:c2:fa:48:5b:ac:7c:7d:
93:a9:ae:07:24:d1:cf:7b:a0:39:aa:e7:58:44:5b:
7e:2f:4f:e8:2c:6d:c8:71:0b:b8:ae:d3:0b:17:b1:
b3:e2:69:27:47:16:61:fc:c1:ba:3f:32:38:0e:14:
7c:d2:58:bf:bd:74:d1:c3:be:9b:bd:9a:79:34:2b:
59:1f:07:11:4b:2d:6e:c4:56:81:24:12:03:15:c7:
e2:f7:c0:01:15:79:fb:c5:0c:d5:3e:53:b9:5f:13:
b1:90:e3:c7:10:31:8f:cf:b9:13:c2:8f:79:0c:cf:
0f:8f:b0:02:9f:49:45:e7:25:ad:65:dd:01:6d:ec:
af:8e:b7:b0:d8:a1:4b:88:66:96:b8:d1:d7:11:f1:
4e:b3:90:3d:63:d7:96:fb:d1:c2:88:25:f7:eb:41:
b9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5D:80:73:0C:10:60:AC:80:85:85:ED:56:C4:68:61:54:92:AD:5E
X509v3 Authority Key Identifier:
keyid:B6:C2:A3:1D:60:ED:25:61:19:97:E7:B7:DE:4A:9B:6F:26:06:ED:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsKjHWDtJWEZl-e33kqbbyYG7TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:81:f4:75:47:5c:45:0d:02:88:fb:da:1c:46:00:d6:b9:78:
80:81:75:cd:4f:7a:09:a2:99:91:79:06:ea:54:2b:63:f5:1e:
22:c0:e0:bd:11:e6:76:c6:a6:67:03:33:db:8b:e3:c5:9f:b6:
ad:d5:88:98:0d:2f:9a:ea:27:e8:cd:95:8b:38:fc:d9:29:29:
4d:cb:af:5d:4c:c0:6c:bc:0e:eb:56:1d:c2:b1:32:91:4c:9a:
26:55:43:7c:63:14:9e:69:9a:c5:d1:d1:9c:74:aa:a9:c5:c3:
7d:de:77:d2:0b:de:8b:5d:85:c9:fc:43:d3:8b:56:85:09:ad:
49:88:14:27:96:df:71:c4:83:11:07:12:8e:01:87:d7:80:79:
b3:e1:a4:c0:3c:89:ec:e2:03:ec:cf:ef:da:6c:83:04:08:11:
97:46:2e:62:54:ed:fc:28:77:10:a8:da:dc:39:e9:30:7f:98:
de:9b:43:05:5f:dc:d8:83:95:00:31:23:cc:24:c4:de:e7:53:
1b:97:2c:72:b4:97:97:23:6c:74:1e:f8:d9:ca:85:2d:14:1b:
09:57:78:88:80:d7:86:14:98:4b:8a:b0:97:c2:33:e6:07:4c:
cd:9c:8b:af:f8:76:d3:54:a7:5a:8f:e0:ed:27:7b:0a:03:24:
92:62:db:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:17 2025 by rpki-client