Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
File: _Tq5WEdps0xpXg7zvkAN5chwX1g.mft (raw, json)
Hash identifier: bkJAK5m+qj9dBLyzGbPNpEQnQFTKrEaQUv5VpjxiJwg=
Subject key identifier: C9:8D:4C:7A:86:FB:DD:74:0C:F6:CD:8E:76:C9:22:99:F3:65:62:92
Authority key identifier: FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
Certificate issuer: /CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Certificate serial: 0198974A1930095FA79EAADBEEF18F9B6C04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
Manifest number: 0231
Signing time: Mon 11 Aug 2025 04:01:12 +0000
Manifest this update: Mon 11 Aug 2025 04:01:12 +0000
Manifest next update: Tue 12 Aug 2025 04:01:12 +0000
Files and hashes: 1: _Tq5WEdps0xpXg7zvkAN5chwX1g.crl (hash: ClFbP8gAixgm/uWn902iZDZo50vgcxrA8UIh6oR+EEE=)
2: mm8C4Ou63If70LPWFRCmCNEI28c.roa (hash: g2mAP9bfs0Z2vFldLFVJmnHsqx5+Iksx21QgfS4cMys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:4a:19:30:09:5f:a7:9e:aa:db:ee:f1:8f:9b:6c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Validity
Not Before: Aug 11 04:01:12 2025 GMT
Not After : Aug 12 04:01:12 2025 GMT
Subject: CN=c98d4c7a86fbdd740cf6cd8e76c92299f3656292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:32:73:62:bc:16:a6:b9:be:cc:5e:5c:20:91:
b9:24:4c:4b:b3:c3:a6:15:18:e8:69:13:6b:0f:05:
48:ed:ce:50:b4:64:9d:6a:3b:b0:a3:96:5d:68:bb:
cf:d6:43:80:c5:15:c9:39:1a:75:db:e3:24:a2:f1:
e5:5b:fd:16:3f:23:ac:4d:22:b4:62:44:e0:73:fd:
4e:85:d3:db:f2:b8:69:86:53:48:e8:68:c8:82:36:
81:8c:b7:5d:fa:e4:8c:4e:89:3a:3e:ba:bd:85:b3:
45:86:bf:53:71:4e:be:e9:58:1e:8b:3c:e5:fa:df:
b1:c4:17:c0:b9:8f:3e:66:69:3a:0d:cb:43:6f:60:
5b:65:f6:09:73:22:b3:16:50:30:1b:3b:d4:42:9a:
83:b7:13:00:56:56:10:c1:ee:b5:46:68:1d:b9:4b:
7f:73:78:0e:f2:a0:78:e1:01:22:4e:e4:fe:62:71:
6e:49:32:61:8f:db:83:4a:0f:08:b6:e2:30:57:9a:
be:db:53:6c:f2:ff:68:3d:93:60:c2:80:8e:d0:e6:
16:e1:54:eb:1d:0d:ca:cb:c5:9c:8f:94:b8:77:09:
92:07:8e:e8:56:8c:da:38:fd:28:3d:e5:26:de:9d:
ce:a9:66:1e:58:b0:64:15:37:ea:1f:72:64:ac:05:
19:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8D:4C:7A:86:FB:DD:74:0C:F6:CD:8E:76:C9:22:99:F3:65:62:92
X509v3 Authority Key Identifier:
keyid:FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a8:83:a4:20:54:1d:7e:85:86:2d:4a:9b:21:b3:69:64:26:
34:cd:c6:e2:d0:2e:bc:d2:22:53:68:29:d6:fa:67:8c:63:fb:
74:ed:13:78:b0:23:6f:87:88:9b:45:f1:54:93:f8:ab:6e:9f:
e9:6a:b6:3c:81:44:b6:b8:68:85:bf:58:e1:d2:89:d2:59:76:
70:6c:ae:a1:10:ff:31:04:cb:d8:e1:2a:39:66:d5:d8:79:c4:
87:7f:7e:5d:38:53:0f:9c:17:18:9c:87:41:e6:87:7d:e4:2e:
11:a0:cd:5e:f1:8e:9e:64:fd:ed:7d:f7:3d:a7:f1:8a:25:b8:
cb:81:24:6f:eb:8e:5a:45:26:d1:53:e7:63:cc:0b:7b:1e:29:
b3:90:0e:4c:af:7e:83:80:ee:62:aa:19:34:e4:96:6e:3d:52:
03:da:ac:fb:c7:57:bc:25:ec:bb:f0:e1:7f:29:5b:d8:59:61:
4b:88:c9:4f:2c:38:d3:f0:64:cc:32:2c:75:4d:1d:8b:56:87:
0a:90:14:07:af:78:18:59:44:54:f0:62:44:aa:c7:b2:0c:b4:
57:e8:88:27:36:29:33:b5:85:5a:d1:48:ea:7a:ca:28:82:df:
3b:f6:59:45:b7:bc:57:53:84:42:4b:1e:9a:9f:a3:ba:a7:b4:
8a:e1:e3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:49 2025 by rpki-client