Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
File: tF9VYNefBKktehUPPtjaQwir6jM.mft (raw, json)
Hash identifier: al+sbb5FoK55ldEG+RRIe0wxtwhkRn+9fN7oNayK2d8=
Subject key identifier: D4:24:7A:81:15:BC:90:14:06:26:B4:2B:3D:7B:00:F0:9E:B8:D5:AE
Authority key identifier: B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33
Certificate issuer: /CN=b45f5560d79f04a92d7a150f3ed8da4308abea33
Certificate serial: 019894EE28C381653EBC32042DD7C3106ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
Manifest number: 11B0
Signing time: Sun 10 Aug 2025 17:01:32 +0000
Manifest this update: Sun 10 Aug 2025 17:01:32 +0000
Manifest next update: Mon 11 Aug 2025 17:01:32 +0000
Files and hashes: 1: rFHksT2fJAQ7epdh-sMDgGR2SM4.roa (hash: Z/iFpAzmqAm2KrlQVqRFy4X3KTo7SXYWoBA5a7g2HG4=)
2: tF9VYNefBKktehUPPtjaQwir6jM.crl (hash: QxexgVl0YSJ+QVayn7F9nb6+hQ6cA2K8tuDYCiqGdnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:ee:28:c3:81:65:3e:bc:32:04:2d:d7:c3:10:6a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45f5560d79f04a92d7a150f3ed8da4308abea33
Validity
Not Before: Aug 10 17:01:32 2025 GMT
Not After : Aug 11 17:01:32 2025 GMT
Subject: CN=d4247a8115bc90140626b42b3d7b00f09eb8d5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:92:d2:33:7c:3f:1a:61:ed:d5:62:c2:fd:
67:81:40:7e:fe:36:14:93:dd:28:8b:fe:3f:e6:96:
a6:8b:c1:08:51:62:17:87:b8:fe:4b:19:e3:4b:37:
30:21:00:a9:a8:9a:18:eb:b3:62:fe:71:8b:83:64:
70:cf:1e:4d:ed:49:33:0d:91:10:e5:e0:43:bc:79:
6f:97:47:4f:59:cd:4b:db:37:ef:ca:c0:a0:d0:48:
04:cd:97:28:1f:d9:64:82:75:92:a2:fc:64:37:fe:
25:ea:1f:07:25:aa:49:38:9d:4d:63:dc:08:57:1a:
44:c9:1d:99:71:f9:5c:19:1d:b4:7b:3e:0a:64:e9:
fe:17:b8:34:d6:f1:7a:a0:fe:4d:85:ee:f8:6a:e3:
9c:a6:94:c0:18:43:65:14:d4:35:a0:7b:ee:c2:b7:
48:c2:10:ac:c0:49:18:4b:2a:d5:b5:52:2e:f5:32:
ad:f7:92:56:cb:8d:a9:e0:56:c6:f6:a3:c8:4d:38:
25:2e:de:ad:f6:66:d4:50:20:b3:05:fc:a9:05:ed:
1f:0c:70:16:9d:97:9e:58:34:cb:a3:31:a7:e9:81:
5b:31:ac:83:d4:52:9b:f2:ed:aa:6d:56:94:9e:14:
a5:12:5b:27:6d:25:9b:c2:63:db:90:2a:16:62:b9:
3d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:24:7A:81:15:BC:90:14:06:26:B4:2B:3D:7B:00:F0:9E:B8:D5:AE
X509v3 Authority Key Identifier:
keyid:B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:5e:c8:76:fe:e3:99:85:56:48:bb:39:8b:f5:8f:8d:29:84:
81:70:9d:26:21:63:17:d1:12:87:8a:21:e0:b0:d3:da:a7:fa:
6b:18:ac:91:66:fa:f3:a9:35:95:11:7c:19:19:e5:f6:67:f9:
a0:63:46:10:2b:c3:e4:62:0d:66:60:f7:54:b9:0f:e8:ab:27:
25:f3:13:cc:61:8d:e6:82:2b:ef:02:36:76:b2:87:c6:fb:eb:
4f:1e:dd:76:a7:2f:c4:34:11:7f:2f:fa:41:36:19:fe:f1:25:
2a:b2:a6:d2:8d:d0:11:2f:6b:13:e2:a2:65:e5:90:77:11:40:
4a:62:72:33:f4:0b:a8:14:d9:85:60:ae:ac:7d:43:60:b4:5a:
f4:5c:31:37:14:9f:1f:1b:34:24:d6:ef:ad:58:35:91:38:e1:
a2:44:c3:e8:00:88:3f:1e:ae:f2:98:9c:ad:b1:3d:ff:cb:7b:
54:b6:75:0a:1c:57:ad:9f:11:5f:ec:2b:de:c8:fc:9a:30:c3:
f9:87:9e:59:af:59:f5:6d:22:25:3d:63:14:27:13:3a:f4:ec:
ed:2e:4d:15:14:56:a7:b1:85:6d:a5:21:c3:3f:d3:b3:f2:e3:
ed:aa:ad:e8:98:ed:36:93:08:9f:62:ef:fe:de:63:1e:05:f6:
af:2d:ff:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:09 2025 by rpki-client