Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
File: tK4oip3bDvUKKUs8rpY-FHycfck.mft (raw, json)
Hash identifier: lhMzSAjSSk0W/+d6jq6dyOJo8NNoNR5Lk2Ahd0VHriQ=
Subject key identifier: 3D:F3:E0:59:0E:AE:FE:C7:01:A0:79:59:C2:14:3E:93:E7:39:C1:CE
Authority key identifier: B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
Certificate issuer: /CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Certificate serial: 019922C30BC21ADF98FD36C55A9D4EB6362D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 06:00:31 +0000
Manifest this update: Sun 07 Sep 2025 06:00:31 +0000
Manifest next update: Mon 08 Sep 2025 06:00:31 +0000
Files and hashes: 1: tK4oip3bDvUKKUs8rpY-FHycfck.crl (hash: HTMTEJQXX0kBu1OHG6SA4Xm4Rn7Ex+CoF7q/NT8uLuI=)
2: u16TB_X_VEL7--qGdSVXn8Zs3wY.roa (hash: m8sRTErDjjsLnDtgYn9w7y6plArnvxsTKmxxZwh54Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:0b:c2:1a:df:98:fd:36:c5:5a:9d:4e:b6:36:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Validity
Not Before: Sep 7 06:00:31 2025 GMT
Not After : Sep 8 06:00:31 2025 GMT
Subject: CN=3df3e0590eaefec701a07959c2143e93e739c1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:38:aa:9f:e3:f5:f0:8b:9b:9a:c7:fa:42:
b6:4f:74:0d:30:e6:17:db:b8:94:2d:ab:0c:e1:0c:
37:7b:00:f2:1f:1b:0f:73:26:fe:de:c7:dd:99:c6:
1f:f0:3d:72:14:96:39:3b:dc:2c:21:ad:d7:d5:93:
6a:7d:b3:bb:9a:ae:8d:e3:48:fa:86:62:ea:96:c6:
6c:32:8a:0b:7d:63:5e:a9:55:49:4e:5c:6c:f4:3a:
b6:ac:f4:55:4b:01:1f:44:0d:1e:f2:8d:ae:34:28:
97:de:6e:35:c6:27:51:05:fe:26:d0:68:f8:74:4f:
45:42:33:9b:76:4d:f5:b6:6d:86:e8:e3:4d:99:16:
46:ad:79:f9:21:79:f3:4f:4b:e8:f1:22:ee:cb:de:
c9:f3:8d:c2:72:93:08:a0:d3:ae:eb:01:ff:dd:6c:
60:af:50:0f:09:14:01:ae:61:21:55:2c:35:3f:f8:
dd:f2:10:a1:53:05:08:0d:c7:58:27:36:21:b1:1d:
3d:fd:61:4f:a8:51:03:84:52:b0:c7:bd:9b:a8:75:
2a:42:71:39:0a:15:0e:70:49:79:78:45:05:08:88:
77:10:fa:31:88:cc:7b:8d:d4:e6:f6:44:77:25:92:
63:3d:dc:6b:cf:fd:14:90:44:a2:2a:89:45:14:05:
69:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F3:E0:59:0E:AE:FE:C7:01:A0:79:59:C2:14:3E:93:E7:39:C1:CE
X509v3 Authority Key Identifier:
keyid:B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:3a:6a:ff:06:f5:9e:a3:94:35:4e:4b:b6:46:50:85:08:23:
50:f7:0d:e9:f5:ab:7e:42:f4:28:f3:25:bd:f2:dc:55:12:4c:
9a:46:cc:55:72:99:9b:ed:2b:da:4f:c3:45:38:ed:24:56:e0:
18:62:fb:df:b0:8c:e1:10:90:a5:08:52:b5:b1:68:0f:86:93:
4b:a8:1d:76:95:d4:49:14:b9:0b:87:e4:d8:2b:d5:9b:6e:d4:
b9:27:2e:88:74:44:f9:bc:69:de:2f:ed:d2:5a:38:8f:2a:63:
2e:c8:03:40:b8:40:da:32:dd:97:ba:a1:2e:42:e7:9d:0d:fa:
59:83:59:d7:5e:a2:60:b0:68:f3:53:66:78:ad:44:ec:5c:2d:
37:fe:b7:7e:66:5a:74:3e:ff:6f:bb:6f:93:50:1f:11:b1:bf:
8d:63:4d:96:0b:67:c6:f7:42:57:4f:ff:d0:65:c2:b2:22:27:
75:11:a3:f9:90:2c:42:c2:95:6f:6c:0f:13:17:11:92:8d:4e:
f1:0d:43:2b:8d:19:b7:b4:55:37:d7:4c:b0:a3:0d:b7:a2:f3:
9d:6b:85:3d:63:76:69:ae:33:52:28:b5:80:5d:99:fc:99:2a:
ef:ea:88:c0:89:94:0e:ed:1e:64:51:45:77:76:23:f1:4c:8b:
1f:3e:03:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:11:44 2025 by rpki-client