Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
File: tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json)
Hash identifier: npckegawcAHmYz4pWnRVNKIb3Y5TkAvGXPBSC70JSZw=
Subject key identifier: F7:DA:04:25:26:50:CD:8D:2D:45:45:86:F4:7F:FC:1E:C6:0D:E5:0F
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Certificate issuer: /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial: 01992CA28FC03CB3484FE84075AA57180D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
Manifest number: 1677
Signing time: Tue 09 Sep 2025 04:01:14 +0000
Manifest this update: Tue 09 Sep 2025 04:01:14 +0000
Manifest next update: Wed 10 Sep 2025 04:01:14 +0000
Files and hashes: 1: BDcEAKntpIejrVcoW-jQtFYDt4A.roa (hash: 9rJ6V8MVwpwUlBMeKLrrT4d005j4mZf3dlxw+gQ0CuE=)
2: n9wbgcYA2gFozQl-awLgvubO0Jw.roa (hash: I7/eXt/2fdY6ma/4TQO3Dibom5bD15oMz/+pqihDXpI=)
3: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: PM2v7HYD8G9nE89b8MFUPlkByyhbxuK7lAZl2cI3I4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:a2:8f:c0:3c:b3:48:4f:e8:40:75:aa:57:18:0d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Validity
Not Before: Sep 9 04:01:14 2025 GMT
Not After : Sep 10 04:01:14 2025 GMT
Subject: CN=f7da04252650cd8d2d454586f47ffc1ec60de50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c6:4e:41:80:93:30:59:f2:a8:71:d7:88:6e:
ee:7b:30:89:42:e6:6c:91:26:fb:b1:bd:a1:22:33:
52:61:b4:14:4b:a6:1e:78:cf:5c:b3:db:0c:50:e7:
48:28:11:5d:74:ee:0a:8e:2c:65:76:64:f3:04:95:
77:52:1c:4e:ce:3b:93:0b:9e:94:c8:88:b1:06:76:
8c:b9:16:db:2b:b4:6a:a6:37:b5:50:47:7c:96:d1:
94:8f:26:64:48:1f:88:c4:4a:89:f3:ed:f0:5c:c4:
6e:ae:06:d2:3f:6e:54:cd:50:9b:f3:5d:53:31:33:
2f:45:c3:36:db:6e:d3:ef:0d:3b:b9:2c:c5:cd:dc:
80:40:5c:e2:f0:ff:63:3c:82:ed:99:a8:64:fe:c4:
ad:52:14:b9:a2:a5:63:9b:26:d9:f3:70:fa:1e:3c:
0e:5b:13:1a:e8:95:69:99:83:2b:3e:33:66:8f:5d:
42:00:22:5c:1b:82:22:ab:2f:ce:f8:f2:90:d6:c2:
57:91:87:85:51:34:06:7f:ee:fa:0a:46:df:d8:31:
57:dd:49:8f:94:c6:28:6b:96:a9:e6:39:f2:93:d1:
9e:ae:d0:6c:fa:da:77:15:d7:af:24:0a:e9:e3:d5:
f9:67:f0:ba:8f:bf:47:22:4e:14:bb:2d:27:cd:ad:
0c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DA:04:25:26:50:CD:8D:2D:45:45:86:F4:7F:FC:1E:C6:0D:E5:0F
X509v3 Authority Key Identifier:
keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:0b:4c:29:3a:89:f9:4a:cf:c7:07:43:21:a0:b9:cd:8e:8c:
d7:df:e9:49:89:72:fb:1f:b9:6a:ce:7a:2d:32:3a:08:42:f7:
0d:40:81:77:b0:58:b5:d3:41:31:b0:5f:a6:05:d3:32:f5:bb:
63:2b:c8:10:e0:7e:e4:fc:36:b9:6c:04:aa:d1:cd:61:9a:6f:
37:04:e5:e6:a5:97:46:c2:b2:65:d1:72:e7:ba:84:b5:63:b9:
ef:7e:ee:6a:b8:3e:9a:09:93:39:cc:aa:1b:a3:e8:42:f8:68:
3d:a9:0d:d4:47:25:6c:b2:66:53:4e:2a:e3:aa:df:74:c7:33:
91:66:76:aa:0f:cd:b0:b9:46:bc:c6:91:b0:c5:98:14:86:77:
94:70:ef:4e:b6:5e:e8:15:5b:73:23:a8:03:1b:7a:95:d9:57:
18:0c:10:a4:9e:e7:f5:f7:3c:b9:40:a4:f1:31:1b:1e:6a:c3:
d8:bb:9b:91:b1:54:42:6a:33:c9:ef:59:a2:04:43:63:8b:2c:
fe:23:bc:c9:a2:ca:31:aa:3d:8c:a4:13:25:51:90:3f:63:d2:
9e:4d:25:0e:b7:f6:d9:2b:e0:af:7a:cf:00:40:93:c2:eb:99:
d5:48:b9:fa:27:6c:12:37:6a:2a:23:bc:35:7e:37:a7:34:27:
bd:14:11:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 10:33:05 2025 by rpki-client