Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
File: TIEnPcsDw0V7eSUL4Qnhml508P0.mft (raw, json)
Hash identifier: Z/yQK7sbvAtbnf0Nx0oRYmUA55odI9BUhgNFEPcREfU=
Subject key identifier: B4:F3:22:45:C9:17:47:28:37:90:8A:4B:0E:71:72:77:15:9B:E4:07
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Certificate issuer: /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial: 01987450D91D63A6CC4FFD15BDC39EA89368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
Manifest number: 0811
Signing time: Mon 04 Aug 2025 09:01:52 +0000
Manifest this update: Mon 04 Aug 2025 09:01:52 +0000
Manifest next update: Tue 05 Aug 2025 09:01:52 +0000
Files and hashes: 1: 09h3HegSzHCmBBBWGcTWBjEqm-k.roa (hash: e2MlTegDWzHw8Qc0vpcn4p75pDoA+fAb45rhwd6sZ2c=)
2: 2H-bW8UZI3iJgi7-SD7ICzn-6yE.roa (hash: 6BFAD/kuUp8ggYQ5Z6VEt8Ffgu906xvZpM65LYf/A40=)
3: Nrmj7OZr3VRqV-mPGEt59p2belk.roa (hash: qKP+VMvb5X+LyJaWae51YmN4HE54Q3kw6hy8LaIxSiU=)
4: TIEnPcsDw0V7eSUL4Qnhml508P0.crl (hash: QB2MBGPQMqNDg20WIFyu1zn/HDDYNVln87ZsRVLzryg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:d9:1d:63:a6:cc:4f:fd:15:bd:c3:9e:a8:93:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Validity
Not Before: Aug 4 09:01:52 2025 GMT
Not After : Aug 5 09:01:52 2025 GMT
Subject: CN=b4f32245c917472837908a4b0e717277159be407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:83:01:0f:43:1a:19:b7:1d:d3:dc:fe:4b:22:
dd:67:f6:a1:cf:05:6d:94:69:61:54:09:11:84:e9:
e5:59:b9:60:a2:c7:1a:44:01:a0:c6:12:16:a6:4b:
c3:18:f2:7f:c9:eb:40:57:59:77:98:19:fb:c2:b9:
ad:b8:4b:63:15:73:53:0e:10:21:5e:e2:92:34:52:
9d:45:d1:f9:13:8e:a4:d4:98:b7:65:17:e5:31:80:
0d:73:10:a0:72:b0:3f:44:ac:a0:50:da:30:6c:da:
d8:82:80:f9:24:8a:07:5f:7a:af:44:af:f7:23:d1:
06:16:98:0c:73:f0:8b:9c:29:93:04:ad:97:96:d2:
3a:8f:18:31:dd:5a:ef:18:dd:30:67:5b:6f:84:6f:
b2:a3:bc:fc:1b:34:ee:4e:94:b1:50:24:1d:f4:bc:
ab:43:23:b0:32:fd:f7:ec:ac:8c:d7:20:21:c8:fe:
5d:4f:04:db:8c:ba:7c:eb:6b:d1:f0:11:c6:bd:e9:
9f:85:6f:b2:e3:0e:28:e3:5e:2d:0f:db:ae:5c:42:
8a:4a:ec:3a:ad:83:9f:c4:72:86:7a:bb:70:fd:d5:
5d:a2:ee:5f:ec:cd:52:94:00:fe:13:d5:94:e6:a2:
21:5d:36:f7:24:b1:4e:b0:0b:92:c0:86:b5:4e:7a:
cd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F3:22:45:C9:17:47:28:37:90:8A:4B:0E:71:72:77:15:9B:E4:07
X509v3 Authority Key Identifier:
keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:09:ea:ed:0b:b3:2b:4f:9c:06:32:c9:7c:6f:34:c7:9b:31:
b4:0a:73:a2:8b:2b:f2:11:d7:24:05:80:49:4a:cf:a0:1d:2d:
78:fe:62:18:52:09:fe:9e:95:8c:f2:00:ce:4c:f6:27:6a:ad:
ed:06:23:07:42:0e:27:6d:33:43:9f:b1:46:f7:71:ba:24:6b:
09:2f:1d:23:19:ab:86:ac:4c:86:94:a1:9d:3d:01:b1:f4:9c:
a1:86:1a:a6:1f:33:0b:ec:ac:81:c5:9a:33:db:8d:e0:21:8a:
5e:be:71:ba:83:38:e5:21:e9:04:8f:39:16:a7:f3:bd:bd:47:
35:8d:89:da:c0:97:d1:e5:fe:d8:e7:8a:4d:6c:93:78:ef:eb:
2a:a4:22:85:5f:45:b3:26:fb:05:07:cf:51:65:90:d1:6d:32:
2a:2b:1a:26:3b:a6:61:52:33:1c:0c:1d:c3:14:0b:5f:d8:36:
4b:c6:78:34:d5:b7:1c:49:98:b5:61:8f:f1:4e:bf:aa:a8:6b:
38:23:60:05:e0:19:c6:33:f1:1b:ec:7b:d0:da:61:b8:41:e3:
e1:5d:55:f2:82:1b:83:f9:4f:4d:69:0c:19:cd:4f:50:ba:11:
1f:d7:96:0e:d8:65:ee:e0:a7:35:0f:54:cc:17:d9:61:b3:f3:
b9:cf:f3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:24:14 2025 by rpki-client