Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
File: TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft (raw, json)
Hash identifier: 2zF40rOU/1dl/C4DPfdwMBqjQ0uqwGUFKMCuw/THdzo=
Subject key identifier: E9:E4:EC:36:11:BF:EF:49:1C:66:58:E6:64:A6:C0:FA:3A:84:B2:67
Authority key identifier: 4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
Certificate issuer: /CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Certificate serial: 019895FFF21C992F44E4F017F3DF97938CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
Manifest number: 06E9
Signing time: Sun 10 Aug 2025 22:00:35 +0000
Manifest this update: Sun 10 Aug 2025 22:00:35 +0000
Manifest next update: Mon 11 Aug 2025 22:00:35 +0000
Files and hashes: 1: TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl (hash: j2uMsCOUD8KS4MiOCs75LGFVoOLnNLuLS/Cv8CNen8k=)
2: UJ9_FeIGOOjgZRJDmb3mfb4BJZs.roa (hash: Iv5M96f/4AyXNBfTo49Zxh554cDlKiW0Et8FXEewisM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:ff:f2:1c:99:2f:44:e4:f0:17:f3:df:97:93:8c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Validity
Not Before: Aug 10 22:00:35 2025 GMT
Not After : Aug 11 22:00:35 2025 GMT
Subject: CN=e9e4ec3611bfef491c6658e664a6c0fa3a84b267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d5:58:b9:23:81:58:82:2f:4a:cb:65:bd:86:
bb:a5:7e:72:51:73:a3:56:c4:76:59:c6:e4:94:84:
df:8c:8b:2d:4e:80:e8:7c:cb:1e:80:8b:0a:0a:21:
49:0d:1c:a2:e6:34:05:5c:f8:57:34:04:2f:c6:21:
fa:c1:cb:9e:e2:b5:b3:9e:67:74:25:fd:23:82:18:
93:5a:a9:11:b6:22:0a:99:ce:7d:a7:00:58:5b:40:
fd:38:f9:df:a3:78:8f:c3:d1:79:1b:18:d5:9d:42:
b0:b9:f2:6a:ff:ae:5d:ab:a3:92:ca:e6:47:12:ba:
9e:36:ea:29:bd:83:76:81:32:27:80:39:a0:85:41:
ff:46:07:4a:5b:c1:64:47:c7:7a:31:50:35:27:78:
ef:c5:18:f9:7e:d6:d7:a2:64:a0:78:30:6e:0a:e4:
74:74:29:08:29:51:36:3d:bf:39:6e:b6:da:15:89:
c9:22:8b:e6:5b:41:6b:b0:d9:5a:95:f7:5d:b9:f7:
c0:6b:98:f4:c7:3c:ea:cc:e3:b4:b1:39:94:92:3a:
8f:7b:3a:93:ca:49:af:17:e9:a7:71:8e:85:92:bd:
f1:ec:30:a9:2a:79:1b:66:f1:b4:eb:70:18:92:5c:
97:48:95:9c:8a:f3:98:cc:bb:97:59:11:28:fa:89:
d2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E4:EC:36:11:BF:EF:49:1C:66:58:E6:64:A6:C0:FA:3A:84:B2:67
X509v3 Authority Key Identifier:
keyid:4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4b:aa:07:36:9e:da:a1:e1:82:7a:bc:86:05:71:2a:b9:46:
71:66:b6:a1:f4:ea:f6:7f:93:3b:60:3b:a9:bf:63:7e:8b:17:
53:f1:38:3a:5f:c5:57:5e:14:72:47:1b:e2:c6:2c:d3:5e:8a:
c4:d2:48:b0:f0:4e:98:22:52:37:fb:4f:17:9f:ac:e6:ac:3e:
14:b0:ff:29:ff:5b:d1:10:a9:48:00:31:b6:8f:d0:20:38:fa:
e5:f4:2b:62:aa:c5:fc:f6:c4:00:3f:ad:89:2c:d0:7b:92:0f:
27:70:47:bb:57:be:1c:ef:11:f6:05:aa:57:33:ef:c8:8e:ca:
2b:61:ca:39:1f:e5:82:2e:8c:af:4a:e4:58:1c:e8:08:b1:52:
f6:35:45:65:da:e2:a0:c9:c7:ac:63:59:77:b4:e8:2e:52:2d:
eb:e4:87:15:c2:d7:85:5d:b7:96:c5:d9:1d:fe:b8:7a:32:1c:
50:ea:3d:de:c0:32:ea:83:15:3e:5c:ac:d2:3b:f9:88:4d:d5:
41:f2:2a:71:e0:18:c0:40:b7:f0:df:5c:b5:5b:ca:2e:6d:18:
9d:e4:97:70:d4:0e:69:b3:ed:1c:23:74:1d:30:80:44:28:6b:
d1:1a:ac:36:c9:83:72:19:f3:a3:fd:e4:0d:d3:e1:0a:d4:4e:
00:55:42:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:14 2025 by rpki-client