Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.mft
File: 1-tfhSiYlYBkcZldpmOnGm4nDwTY.mft (raw, json)
Hash identifier: TxM6bZmHAH0nIFOKv8opYO6QI4Wx7+ulBCMnFZemU8c=
Subject key identifier: 2C:AD:AD:2A:E9:01:47:6B:D2:F5:4A:6B:3C:82:51:F0:24:CD:75:78
Authority key identifier: FA:D7:E1:4A:26:25:60:19:1C:66:57:69:98:E9:C6:9B:89:C3:C1:36
Certificate issuer: /CN=fad7e14a262560191c66576998e9c69b89c3c136
Certificate serial: 019872D00DFF5337F70399CA55E331AE91BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tfhSiYlYBkcZldpmOnGm4nDwTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.mft
Manifest number: 0AA6
Signing time: Mon 04 Aug 2025 02:01:34 +0000
Manifest this update: Mon 04 Aug 2025 02:01:34 +0000
Manifest next update: Tue 05 Aug 2025 02:01:34 +0000
Files and hashes: 1: 1-tfhSiYlYBkcZldpmOnGm4nDwTY.crl (hash: buy22Uf2VbhpA8YG+Prjp3BjrMIs61yQAIxBxZUEYyk=)
2: ELYZJGHcWhKUiY7ABJ-PY-iSroQ.roa (hash: XKv64QH5ODk1+MXzK56Lue/Lun/NuUmKCWEmKamL9J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tfhSiYlYBkcZldpmOnGm4nDwTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:d0:0d:ff:53:37:f7:03:99:ca:55:e3:31:ae:91:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7e14a262560191c66576998e9c69b89c3c136
Validity
Not Before: Aug 4 02:01:34 2025 GMT
Not After : Aug 5 02:01:34 2025 GMT
Subject: CN=2cadad2ae901476bd2f54a6b3c8251f024cd7578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:eb:ab:2f:aa:32:cf:aa:b5:82:90:56:60:
c5:f4:1a:a0:4c:a4:49:73:e5:b0:a4:a9:c9:26:1a:
98:2c:4d:31:be:e9:7a:dc:99:3b:75:25:71:00:e4:
e3:fe:f2:bc:db:70:93:42:66:6a:2e:73:b1:03:77:
50:7e:1e:49:b2:db:c6:d9:e9:ea:71:54:9d:70:64:
43:25:c7:18:71:96:18:3d:40:57:b3:f0:de:43:08:
81:f7:23:9c:f3:db:e8:87:4c:2e:62:52:8b:2d:33:
ee:4f:2a:0a:4b:1a:43:cd:b2:c6:b9:7b:fc:24:fc:
d5:18:1e:e8:52:cf:b8:ea:ab:68:12:a8:47:e2:15:
04:ed:e7:64:29:54:b7:f6:69:14:65:7e:0a:58:a8:
a3:e0:e1:b1:96:bd:e9:d6:78:59:ef:f5:29:dc:d3:
78:6d:c2:30:ec:39:e6:e6:3f:87:7d:09:10:51:c4:
70:54:23:88:38:b4:23:4f:fc:64:58:c5:2f:71:0f:
ce:c2:5b:24:82:0d:db:ec:2b:4c:9a:cb:e3:86:8b:
cc:21:06:19:48:34:77:85:82:4e:8e:f6:a2:d3:f2:
6f:fe:8e:e0:98:34:df:7a:3c:61:91:74:e4:9e:ba:
77:0b:d1:25:cf:d5:f6:e9:61:13:b9:0f:2c:0f:3d:
24:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AD:AD:2A:E9:01:47:6B:D2:F5:4A:6B:3C:82:51:F0:24:CD:75:78
X509v3 Authority Key Identifier:
keyid:FA:D7:E1:4A:26:25:60:19:1C:66:57:69:98:E9:C6:9B:89:C3:C1:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tfhSiYlYBkcZldpmOnGm4nDwTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:22:41:78:85:ab:c8:12:4a:f6:05:80:ed:21:07:9e:8c:43:
a6:20:f7:2c:dd:d5:96:e9:5d:a2:6d:eb:c7:c4:a5:7f:cc:de:
2b:a4:6a:1c:c8:9e:c7:af:ec:d0:99:8f:fd:56:de:04:de:64:
25:94:01:78:e1:c9:b7:0c:15:a7:2d:5b:f1:3e:58:67:2c:78:
f1:40:74:ed:2d:84:ff:57:ca:40:2d:d6:29:1b:38:f7:83:4c:
69:7e:7a:6b:39:e3:e7:81:4b:bb:39:ce:a9:d3:05:70:b9:7e:
b9:e7:78:9f:c5:a0:88:31:c3:22:71:97:b5:bd:bc:c7:d5:bc:
a0:bb:02:30:d3:73:69:b7:6f:08:b3:e9:ab:45:2d:7a:e6:c2:
33:8b:e8:c4:d9:18:9c:24:fb:bf:44:05:c4:9e:19:89:9d:80:
52:fb:73:4f:67:f2:00:e0:80:a1:0f:e7:e7:29:ff:84:2b:3f:
20:18:f9:65:10:88:98:49:de:b8:cc:ed:4b:c8:ae:61:f4:80:
88:f8:c1:bc:cd:06:53:2f:5c:c5:3b:82:9d:ca:34:11:1b:03:
aa:37:18:10:e7:f9:af:03:36:fe:8f:ac:4f:2e:8d:9f:6f:51:
e9:95:6c:df:89:e7:dc:59:13:74:eb:53:72:5c:61:3a:a9:b8:
e6:a6:52:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:45 2025 by rpki-client