Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
File: TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft (raw, json)
Hash identifier: 5X85yaULeP0FlH7fgmVuWq3lL0/Wk2Q5oIlg4anzOHY=
Subject key identifier: E8:A6:79:DB:BA:C1:0A:A6:90:AC:B6:BF:83:2D:FB:7A:A2:C9:94:7F
Authority key identifier: 4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93
Certificate issuer: /CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
Certificate serial: 01989ECC0C499692ADAAD0CA8ACE439EDA0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
Manifest number: 1027
Signing time: Tue 12 Aug 2025 15:00:29 +0000
Manifest this update: Tue 12 Aug 2025 15:00:29 +0000
Manifest next update: Wed 13 Aug 2025 15:00:29 +0000
Files and hashes: 1: GJVV3SoEfsa0pgtLtiw7hYQqnlY.roa (hash: X3L+IE/tHK5/79Ef7HYRs6p2vD8nOugSbhs0gMsz8zU=)
2: TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl (hash: P9FhHCI07Z+8HwXFBSp8Gjhc+6tyMFz5MAjEDGfCsVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cc:0c:49:96:92:ad:aa:d0:ca:8a:ce:43:9e:da:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
Validity
Not Before: Aug 12 15:00:29 2025 GMT
Not After : Aug 13 15:00:29 2025 GMT
Subject: CN=e8a679dbbac10aa690acb6bf832dfb7aa2c9947f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:12:f0:82:e3:89:25:92:4d:2c:10:5c:bd:
02:8a:b2:84:4e:1e:58:bb:ea:c8:43:6b:f1:d9:b0:
7a:f0:0d:9f:bc:8e:01:b2:ed:67:be:bf:51:6b:4f:
2b:0c:0c:94:43:af:e8:01:6c:cc:c6:08:ca:f7:31:
f5:43:a6:dc:d6:18:af:6d:4f:a5:b1:c7:8b:c4:87:
2d:ba:b9:27:dc:c4:5f:66:54:ea:63:4d:8d:40:7e:
93:d2:2b:bb:e7:7b:f1:a9:ac:c1:e9:84:0e:cc:73:
de:4d:11:bf:ec:42:ac:ad:3a:c2:8e:c0:f8:50:fd:
87:08:7e:e5:30:7c:37:11:57:3d:95:ba:2f:9c:27:
ea:0e:7b:ef:e2:73:c2:2f:f3:f5:30:02:ef:74:e2:
48:e9:c2:96:90:16:7d:82:5c:12:10:6b:76:ec:0b:
f4:ec:15:1b:c9:f1:28:80:90:2b:98:a4:34:65:d3:
82:66:d0:21:e2:2e:ec:b8:41:fd:7f:d2:b7:d9:ae:
a7:bc:64:12:26:22:35:2d:55:bc:42:ac:9a:b4:bd:
28:89:c6:f9:82:bf:50:4c:f8:1d:a6:3b:d1:fc:17:
2a:6d:5f:ff:f1:51:7e:af:0f:9a:54:68:de:70:fa:
10:b8:54:2c:da:a0:5c:47:e8:dc:ef:4d:42:32:a9:
3d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A6:79:DB:BA:C1:0A:A6:90:AC:B6:BF:83:2D:FB:7A:A2:C9:94:7F
X509v3 Authority Key Identifier:
keyid:4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:61:c2:ee:a7:08:6a:d7:a4:37:f0:17:6a:96:4b:c7:a2:32:
02:6f:e5:05:72:47:41:54:ac:ce:73:4e:e8:d4:18:2d:57:58:
8a:81:a7:38:c3:40:95:c4:5d:f1:63:7c:af:6c:2b:b7:f5:69:
72:31:ce:4a:e7:03:52:3e:f0:5c:ad:74:ea:a6:ec:8b:51:fb:
b4:2e:1c:ab:32:5e:95:c3:02:4d:cd:a1:b7:de:5d:29:89:b7:
7b:d8:b9:cc:c1:88:c2:ce:e3:8b:04:72:15:bd:41:a8:f7:dc:
47:14:0c:51:47:74:8b:c1:ba:68:d0:96:c4:de:54:73:c4:c0:
b9:b8:c7:cb:57:9e:2b:50:5b:4c:e6:48:5f:38:f3:61:a6:3f:
7c:62:5a:8e:f2:ef:66:ef:da:8e:2e:79:32:d5:be:9e:fe:b6:
f9:af:54:2d:cd:b4:d6:55:b3:1e:3f:3d:ca:9e:69:b5:b0:80:
fe:15:58:51:c5:d5:b1:55:ea:d0:a1:86:bb:d7:07:cd:a5:14:
df:1a:23:36:89:0b:b8:48:31:3c:32:8f:71:0e:10:67:23:c4:
36:09:8f:88:b5:74:9b:0d:3a:77:ce:bb:65:8f:25:b1:d5:d7:
b1:45:d9:04:f9:8f:fb:88:b9:70:81:7c:06:95:4c:b0:a4:6a:
68:a7:66:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:48:23 2025 by rpki-client