Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
File: TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft (raw, json)
Hash identifier: c+B2FHFGGdvXif5aQ4v6aXlYY0Ids7ezcqmbdRiuWvE=
Subject key identifier: 00:52:35:97:DC:08:26:F2:54:58:FD:B3:30:81:A0:F6:6D:D7:E1:15
Authority key identifier: 4D:F1:81:1F:39:97:B9:50:AC:89:E4:10:EA:3E:F0:18:A6:73:D5:FC
Certificate issuer: /CN=4df1811f3997b950ac89e410ea3ef018a673d5fc
Certificate serial: 019890DB5FF094E76F45528EC4E3DCE9D941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
Manifest number: 05E5
Signing time: Sat 09 Aug 2025 22:02:32 +0000
Manifest this update: Sat 09 Aug 2025 22:02:32 +0000
Manifest next update: Sun 10 Aug 2025 22:02:32 +0000
Files and hashes: 1: 4m_ZlqWE1YEBP4kWtbELic7ECzg.roa (hash: t8PO7dqvDfBV4dwcfBXHsLynSbU2oXoJqnNbzqZG81g=)
2: TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl (hash: /woIA5OWlfrWAPgqeW2gmZLEVXVGuYbrvTtEkSs9f5c=)
3: risExVobQciJpjckh7R5a6pHayQ.roa (hash: smtSJjRXs0E72dzCfhCCARBzkZPKWKCqhHgp8E/C6HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 22:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:db:5f:f0:94:e7:6f:45:52:8e:c4:e3:dc:e9:d9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df1811f3997b950ac89e410ea3ef018a673d5fc
Validity
Not Before: Aug 9 22:02:32 2025 GMT
Not After : Aug 10 22:02:32 2025 GMT
Subject: CN=00523597dc0826f25458fdb33081a0f66dd7e115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:91:af:ac:b3:bc:b9:24:32:71:4b:34:63:1e:
cc:18:eb:8d:66:0b:e3:55:85:d5:ee:73:e6:ce:f9:
4d:4c:71:eb:07:f5:cf:ee:63:95:d8:44:d7:d4:a4:
41:2f:02:a9:2a:6f:cb:3e:a8:a5:4d:d1:68:0e:60:
79:fa:80:9f:7f:1c:47:2c:3e:50:4b:a0:52:08:a4:
84:6c:45:24:58:11:a4:f5:4c:b1:44:86:96:b8:21:
d4:81:7b:3a:dd:20:4c:cc:fc:ea:56:61:91:9c:b4:
7b:59:74:17:e0:27:de:63:05:11:99:74:99:f3:2b:
9c:34:3b:4b:f4:c5:51:ca:f0:08:59:2d:d8:00:b4:
9e:12:26:94:fe:61:b0:93:70:75:04:ae:f7:67:72:
6f:5f:21:67:11:63:4f:d1:47:d0:c5:28:bf:11:5a:
19:3a:63:c1:08:7a:3f:23:cf:28:6f:8b:31:8e:c1:
23:74:ab:07:ad:1e:2f:e6:2b:72:91:8b:1e:b5:21:
82:73:e8:db:0e:61:f0:66:01:1a:09:69:90:a6:7c:
a7:32:44:8f:dd:74:33:13:93:1a:ea:f8:72:a5:56:
70:60:b0:cb:25:44:3b:8c:12:60:e5:52:1f:53:e3:
ba:5d:ec:ff:67:fa:de:20:3a:ad:88:ec:14:06:4d:
94:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:52:35:97:DC:08:26:F2:54:58:FD:B3:30:81:A0:F6:6D:D7:E1:15
X509v3 Authority Key Identifier:
keyid:4D:F1:81:1F:39:97:B9:50:AC:89:E4:10:EA:3E:F0:18:A6:73:D5:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e9:26:1c:d1:85:ff:0d:f8:68:1a:90:b5:40:70:f0:c0:30:
cd:2f:15:b6:08:53:a9:6d:35:38:a0:be:11:9d:12:89:8e:75:
f0:67:8f:bc:b5:97:e5:df:9d:80:80:09:f2:a0:7c:d6:72:1f:
73:51:79:73:81:0e:2e:00:8a:a4:2e:2e:6e:59:60:e4:22:48:
29:cf:2e:54:30:9d:13:72:3b:40:9c:60:c0:43:0b:d1:59:5f:
56:5c:90:0c:12:30:66:23:65:8e:96:3d:7a:3d:76:41:d6:75:
5e:63:33:9e:72:50:96:09:2a:ea:20:cb:26:2e:fc:79:c7:6f:
39:a9:dd:34:bf:ff:e3:4d:16:cc:54:47:4e:06:b2:0c:cd:8e:
6b:f6:8b:b1:7f:65:d7:5f:e2:a2:31:21:91:95:87:62:2f:c2:
fd:a4:ff:9a:3f:54:dd:3e:80:dd:8a:74:d4:c7:eb:b4:3b:da:
50:c9:42:a8:27:af:99:47:8c:57:f5:71:0b:99:57:a4:a9:15:
6f:3b:e0:e8:bd:4d:d2:ee:a9:1c:73:4e:14:1f:e2:cf:71:b2:
af:a0:83:d9:cd:13:cf:02:ba:1d:42:07:33:70:c3:10:b8:e6:
89:8c:94:38:f1:67:1a:4a:1d:b8:f8:08:2d:58:f4:1e:b5:d7:
1b:32:7b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:33:16 2025 by rpki-client