Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
File: 1-TmwPxKU69NaOxXWldfpH4y0H6A.mft (raw, json)
Hash identifier: EtZGsbU/l7+/YDgCD2ovodmkUMAOwiK1H3RQ/bE8mZk=
Subject key identifier: B1:55:59:65:D2:AB:D5:8D:BC:9A:A2:88:3B:48:14:7E:EA:31:45:B1
Authority key identifier: F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
Certificate issuer: /CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Certificate serial: 019880F972120C93AF91AA83597DBEAE33D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
Manifest number: 1269
Signing time: Wed 06 Aug 2025 20:01:27 +0000
Manifest this update: Wed 06 Aug 2025 20:01:27 +0000
Manifest next update: Thu 07 Aug 2025 20:01:27 +0000
Files and hashes: 1: 1-TmwPxKU69NaOxXWldfpH4y0H6A.crl (hash: RTU3fUB5dNL8Uuhvo6ARALP9YOc8HkwpuR4+WebTw5M=)
2: S1K-LNOfEdqMwJPR6JwjXy3twNM.roa (hash: 6+dgtQWWnCxkd6rViHnDLK3NWbLzGQNeNx6DA6f+PL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:72:12:0c:93:af:91:aa:83:59:7d:be:ae:33:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Validity
Not Before: Aug 6 20:01:27 2025 GMT
Not After : Aug 7 20:01:27 2025 GMT
Subject: CN=b1555965d2abd58dbc9aa2883b48147eea3145b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c8:b0:0d:0f:ac:87:fc:01:b2:e2:34:37:83:
9b:fd:47:e6:10:2d:69:7c:03:85:62:06:c8:5a:40:
fd:b7:d7:39:8e:eb:bb:c1:86:cc:db:aa:08:92:98:
1f:53:ce:64:27:25:fa:63:f2:91:8f:b9:31:cd:1c:
88:17:0e:af:b6:15:6c:28:38:6a:97:85:a0:71:e0:
be:e3:36:d3:de:2a:08:0b:3e:95:fc:cc:3b:fa:a0:
ba:a1:c9:2f:57:1b:df:c5:72:4c:a5:0e:c4:eb:dd:
47:98:b7:f3:72:ec:02:cc:88:75:8b:d9:42:26:c8:
de:ab:c9:cf:6b:2b:17:f4:8f:1f:9f:97:d0:ce:ad:
4a:14:f1:77:8f:32:e0:5d:7c:15:05:2c:af:5e:f6:
03:32:c9:d5:37:cf:9c:1c:c5:89:df:16:b5:28:ee:
e5:eb:ae:5e:fb:7a:7b:15:e8:a8:91:d5:be:b1:cf:
18:c8:5a:68:9f:07:44:e0:bb:ba:ff:7b:24:85:05:
4f:00:01:79:30:3a:a2:84:7f:ae:da:b8:b3:53:ed:
1c:e2:33:f8:13:fc:77:3b:1e:d2:b1:d5:12:79:35:
b5:ab:2b:5b:a2:20:30:ac:7b:b8:86:c6:99:33:a5:
e9:e3:a8:f0:6b:8f:c8:8b:63:3e:e1:06:66:66:b7:
00:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:55:59:65:D2:AB:D5:8D:BC:9A:A2:88:3B:48:14:7E:EA:31:45:B1
X509v3 Authority Key Identifier:
keyid:F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:8d:4b:ed:47:d6:dc:c8:93:c0:5c:5d:34:8f:24:ea:82:7b:
4c:20:21:00:68:14:19:d5:da:55:a9:e7:f2:f4:11:c4:8e:8e:
13:2e:2b:41:1e:a0:0e:b8:12:10:41:b8:46:41:a8:1b:1e:bc:
ac:a5:04:b2:9a:bc:27:69:ac:0b:37:ce:9c:93:0e:76:26:18:
ee:1f:c9:60:f0:69:5e:22:db:b7:a1:e6:97:83:39:8b:3e:f7:
f0:54:f9:34:47:52:fc:27:75:21:0e:57:be:58:92:41:43:8c:
ae:3f:82:e3:d9:ec:9f:7e:08:62:09:cb:fe:70:cb:be:50:ca:
6f:02:a1:70:00:b1:9f:bd:70:19:43:f5:40:6d:b1:83:f8:97:
a4:a5:a8:2a:ff:f9:86:5d:92:5b:d0:5e:cc:3c:f9:8d:8c:cb:
51:8b:09:00:98:6e:77:43:7f:5e:56:32:df:ea:b0:1d:b5:56:
ac:41:ec:34:9f:5d:17:26:2b:82:61:9d:34:c2:d7:1b:c5:66:
eb:c4:04:82:43:1f:81:fe:ba:74:ac:a1:aa:09:97:31:05:60:
13:db:de:a7:cc:6f:85:81:de:ac:af:62:e3:14:45:55:95:85:
d8:5e:cd:8f:a4:3f:97:be:d3:49:af:e3:79:db:ab:a7:3f:e0:
ae:01:e5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:27 2025 by rpki-client