Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
File: tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json)
Hash identifier: XkgXcXWg3iqEwJmbPf5jZliO6h5DLru1ruckeK5MKRY=
Subject key identifier: 6C:3E:A5:1A:1F:85:13:DC:F9:47:15:7F:F6:04:ED:9C:97:71:37:0C
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial: 0198C67FB11164972E080F3BCE59BE59E727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
Manifest number: 1642
Signing time: Wed 20 Aug 2025 08:01:53 +0000
Manifest this update: Wed 20 Aug 2025 08:01:53 +0000
Manifest next update: Thu 21 Aug 2025 08:01:53 +0000
Files and hashes: 1: dMyCW0_TBkO1nYNBL_n11IKNaBI.roa (hash: WTKaBFp1QPSs1ROafjR4WJfZR1PRtcVHfjnPURoJWEQ=)
2: iWujOO5h_XVMHY2nSFxBko0o46E.roa (hash: hfZ0O6pRdbOdpr8hVRCYtXgEcI0jSP4lHjfs8kAt2hk=)
3: qrrQR7WuIleyYS2sO7I0VvjROUo.roa (hash: 4JE74Aq/xmpPqZIRbZrMja/xvjU3RSpM11pAC7vf4sE=)
4: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: ROV5+nqqPuhra4Y8ljInoVGOpdVratt2w5DwTi2XU8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:7f:b1:11:64:97:2e:08:0f:3b:ce:59:be:59:e7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Validity
Not Before: Aug 20 08:01:53 2025 GMT
Not After : Aug 21 08:01:53 2025 GMT
Subject: CN=6c3ea51a1f8513dcf947157ff604ed9c9771370c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:f8:19:2b:c7:a1:98:ee:d2:5d:33:df:04:
ff:9f:e2:6a:df:89:d7:0f:ff:22:ee:46:e2:c1:b4:
a0:6b:24:2c:96:f8:53:46:d7:a4:6e:d6:ee:3a:bb:
85:78:4e:a3:a2:ba:2b:1a:c7:0e:41:0c:c6:1a:06:
7f:38:76:c1:61:1c:91:b0:cf:31:3b:c1:e9:cc:83:
f2:bb:f9:40:82:dd:51:e1:d7:9f:81:5b:05:61:f8:
64:bd:48:a6:6e:3f:68:39:b3:29:bc:a9:76:7c:ed:
69:28:4f:18:06:ed:f9:62:1e:07:11:81:e7:c9:d6:
ad:37:af:30:91:9d:4f:b5:b6:98:f2:3d:f6:55:e1:
12:bc:cc:ae:f2:0b:78:31:ee:5b:87:30:64:76:cb:
70:63:ac:6e:65:1c:2b:9c:82:26:e3:3b:bc:60:e3:
5e:d9:07:f3:2c:da:e0:de:08:2f:cb:81:fe:f3:02:
c7:c6:7f:a6:73:8e:0d:3d:4f:87:33:37:4d:88:39:
4f:8d:88:d0:c5:86:2a:b3:7c:b1:d8:21:4c:22:72:
d4:37:fd:08:74:27:57:cd:5b:ea:01:30:39:d0:a1:
53:78:06:44:34:e3:da:cd:52:20:e0:2a:84:81:1d:
a0:cd:4d:34:49:98:99:68:f6:97:ec:7f:96:12:e8:
28:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3E:A5:1A:1F:85:13:DC:F9:47:15:7F:F6:04:ED:9C:97:71:37:0C
X509v3 Authority Key Identifier:
keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b2:03:56:73:b5:20:df:07:37:4e:d9:e9:96:21:91:f3:88:
9e:c2:99:43:b4:67:43:c3:8f:ef:04:94:ec:67:b5:35:c4:01:
65:a8:fc:7e:4a:bf:17:da:8e:55:73:3d:a1:18:4e:35:bf:a2:
83:32:63:34:c0:63:2a:da:12:85:11:83:b8:5c:73:03:a4:9c:
db:ba:e2:ad:66:c4:ac:a0:09:9c:b0:28:f7:ef:bf:de:48:1d:
8f:31:44:34:8b:34:d6:74:0e:e3:20:18:d3:f8:1d:1c:a6:87:
5b:97:6a:6d:b7:06:4c:9c:54:b6:19:48:68:f8:40:bd:1c:83:
78:b8:23:b5:a8:4b:ad:99:46:1e:94:83:04:ea:27:1e:bb:2a:
95:2e:7e:24:2c:5f:88:00:38:69:9d:4c:26:dd:ef:35:a6:c1:
e0:20:cb:d5:b4:f7:86:aa:2a:58:82:01:9a:0b:42:8c:7d:c9:
34:0f:a8:85:95:a7:13:40:6b:9e:01:a6:2c:08:41:ff:3b:48:
1e:55:cf:a8:88:8e:5f:5a:7b:30:74:43:33:7f:11:95:33:76:
f1:08:9a:01:f6:ea:9b:68:d4:47:98:b3:75:40:46:c6:2d:5a:
3b:59:4a:c3:b8:39:1a:ef:97:dd:88:ed:fc:22:7b:11:61:d1:
01:44:3a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:15:40 2025 by rpki-client