Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
File: tgtXTwPZiBVfRLossHvH37RXzw8.mft (raw, json)
Hash identifier: 0FQpUIAnVz4wDRGLC4erL+7qp2JEMFgIwLmyL3dF9/c=
Subject key identifier: D9:FA:9A:62:08:78:7B:33:62:DF:70:19:42:EA:54:1F:95:99:DA:6A
Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Certificate serial: 019896A50817DFB209B1AA36A531FA592BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
Manifest number: 15BB
Signing time: Mon 11 Aug 2025 01:00:54 +0000
Manifest this update: Mon 11 Aug 2025 01:00:54 +0000
Manifest next update: Tue 12 Aug 2025 01:00:54 +0000
Files and hashes: 1: BeOIJLd8_MIXUGufXTnw_YPsJgs.roa (hash: UFekJjmZxy4vjH3dPZliRBeAZT4NRRq/0IMLKsXu0f8=)
2: tgtXTwPZiBVfRLossHvH37RXzw8.crl (hash: PZCbdr61I70VijixiqC78FtnsCg9dSdqvXdXnhTlLiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:08:17:df:b2:09:b1:aa:36:a5:31:fa:59:2b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Validity
Not Before: Aug 11 01:00:54 2025 GMT
Not After : Aug 12 01:00:54 2025 GMT
Subject: CN=d9fa9a6208787b3362df701942ea541f9599da6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:69:64:13:93:44:2c:81:3c:b3:12:b0:78:
46:1f:03:c2:47:bc:6c:5d:9e:6f:4a:bb:67:1e:e8:
59:60:f0:bf:08:87:d6:46:84:a3:5a:f0:f6:a6:f1:
af:f4:20:85:bf:32:b0:25:f8:08:9d:05:7b:72:a6:
5f:c8:0e:5e:f4:a7:fb:5e:15:06:cc:79:9d:c9:f8:
5a:11:ea:25:f5:e3:82:c8:ba:bb:39:4c:8a:89:3e:
a6:63:1e:fe:a4:7f:6c:95:c6:b8:8b:5e:7a:c5:05:
63:a2:3f:0a:61:5f:a1:9b:c1:c5:02:36:e5:41:88:
d3:1a:f0:7b:68:a1:8f:69:d7:54:93:94:ea:05:c3:
63:3f:93:85:51:f1:a9:22:79:f8:2d:21:58:84:80:
25:1e:1f:37:4a:89:88:2c:3b:67:0e:f8:39:89:da:
0c:ea:d8:95:9f:0d:77:3f:76:33:3d:ba:e5:d3:b4:
5b:1e:a5:db:0f:6a:5f:3e:0b:47:51:54:3a:68:78:
ff:8e:8b:64:7b:2a:33:13:a8:d0:ba:ff:23:5f:2d:
56:82:27:fb:9c:02:6f:bc:80:8f:49:1a:ff:17:65:
69:93:33:d6:c4:f5:83:e4:4f:9e:45:7d:8a:ee:88:
e0:5c:ec:e3:2e:2a:de:32:57:e8:ac:fc:86:cf:25:
58:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FA:9A:62:08:78:7B:33:62:DF:70:19:42:EA:54:1F:95:99:DA:6A
X509v3 Authority Key Identifier:
keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9f:b9:09:1b:20:3a:3a:16:2d:e6:56:db:49:a4:b6:91:e5:
2d:37:9d:eb:91:cc:f1:69:66:98:29:ca:d5:42:1b:ac:6e:40:
42:37:11:6c:8e:81:6e:5e:a5:66:f5:52:dd:03:c7:16:f1:69:
d8:c4:89:97:79:10:d0:0d:a3:10:cf:98:ab:be:20:c0:14:aa:
43:54:0e:b4:41:5c:0e:8d:a8:46:3a:df:b7:b2:6b:1c:e3:5e:
b1:ee:04:ba:ec:87:3d:00:de:ca:ca:02:4f:3b:cd:76:75:f3:
6b:50:f8:6c:73:e6:c2:4b:91:90:5b:84:f8:b9:a1:6b:4d:ac:
d8:73:62:33:d9:79:ae:07:bd:8c:e2:f5:41:6b:79:a5:db:b0:
2c:63:8e:9d:8f:ec:94:ba:53:b9:7f:80:ea:27:10:a9:5d:67:
05:88:0b:db:86:c4:4f:6d:3c:26:0d:8d:00:c6:c6:65:8c:57:
94:c2:7b:20:63:d8:e9:2e:37:30:d8:36:b1:4e:19:97:c4:d7:
3a:c4:be:e6:e3:ec:6e:47:97:8d:38:f4:6d:f8:5b:3c:cd:8e:
9e:38:55:f5:cb:0b:63:2e:cc:86:cb:1c:11:9a:9a:21:8a:b5:
28:86:89:16:22:45:b3:fe:fe:45:16:6e:8b:8e:ed:c1:bc:eb:
9d:22:cc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:21:49 2025 by rpki-client