Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
File: Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft (raw, json)
Hash identifier: WbVkyANQ5xxyxqKWGg2mMuiu3hEy29MIfg8hMCOE1QM=
Subject key identifier: 9C:6E:1D:50:81:63:05:D9:36:7C:BA:3B:9B:93:E4:C3:04:86:F1:9B
Authority key identifier: 4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00
Certificate issuer: /CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000
Certificate serial: 019923D60038AFA8A2429262876C7BA4D2F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
Manifest number: 8D
Signing time: Sun 07 Sep 2025 11:00:51 +0000
Manifest this update: Sun 07 Sep 2025 11:00:51 +0000
Manifest next update: Mon 08 Sep 2025 11:00:51 +0000
Files and hashes: 1: 91ZCHXFl5UUzytD2oCxDOo7Vf-U.roa (hash: GiWWhZLSNM54YFftILgBMiQnN9xd6n0FvV41BvORBF0=)
2: Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl (hash: P98EbM6zbbtaNf1PdmcA3wmvUSmocFfGzfL70nLQjv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:00:38:af:a8:a2:42:92:62:87:6c:7b:a4:d2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000
Validity
Not Before: Sep 7 11:00:51 2025 GMT
Not After : Sep 8 11:00:51 2025 GMT
Subject: CN=9c6e1d50816305d9367cba3b9b93e4c30486f19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ea:cc:96:64:d1:f9:9b:f5:3b:b4:bd:a4:cf:
e8:4c:13:ba:da:c7:06:c9:bf:4a:a8:4c:3b:49:9a:
36:c3:cb:fc:19:f9:83:ec:97:c2:59:64:90:03:7e:
e2:ad:45:fd:72:3c:0b:7d:01:ce:ae:1b:1c:34:43:
8a:e3:a2:f9:56:01:3c:2e:97:33:22:5d:22:fc:e1:
da:40:33:1d:df:e4:c3:9c:bb:ff:0f:b3:b4:da:b3:
91:ed:22:32:e8:bd:c7:5f:b5:d9:57:38:fb:3e:8a:
c7:a6:5e:2e:f2:20:91:b0:db:9d:18:4a:cf:03:c4:
35:53:8c:71:8e:16:41:9c:b2:ff:a2:aa:a9:a0:f6:
9d:75:2d:a9:e4:d5:be:44:63:4c:cd:b1:4d:2e:70:
4d:39:33:9a:92:3f:f3:6a:01:25:db:4e:0f:3a:06:
b8:1d:91:ec:ed:83:1e:df:42:41:31:6a:1b:a8:f3:
1e:d8:22:25:22:2c:30:18:b5:05:47:86:1a:ee:e7:
7e:80:3d:59:75:fa:19:a8:ae:7c:94:8e:de:8f:e0:
24:a3:ef:34:de:1c:2f:58:96:ff:1e:17:24:03:dc:
55:09:22:46:47:87:fa:2a:71:e8:7d:7a:2e:40:dc:
45:13:f0:87:be:3a:86:f0:c9:76:18:6d:99:ea:37:
61:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6E:1D:50:81:63:05:D9:36:7C:BA:3B:9B:93:E4:C3:04:86:F1:9B
X509v3 Authority Key Identifier:
keyid:4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c9:f1:06:d2:43:d9:52:c6:6b:dd:9e:d5:82:f5:d0:fe:0b:
39:10:ea:24:f2:9b:bf:25:13:f2:89:da:ed:ce:6e:f9:4a:12:
4f:63:3b:e6:4b:b6:2a:c9:1f:90:de:d7:3b:e3:71:db:2f:d9:
d3:95:96:2b:67:ec:34:72:36:28:62:22:99:40:ca:75:b6:0a:
19:d4:0c:dc:16:4d:0e:fb:b1:7d:a2:79:2c:74:68:0a:c0:20:
83:84:2e:a2:4d:a9:21:9c:62:98:87:e9:c6:de:a7:10:e5:17:
ab:ce:a3:cf:89:c0:0e:52:67:75:e3:ac:15:1b:c5:8f:9f:b1:
ff:f8:38:02:fc:7f:68:18:59:2a:f8:b6:e0:08:21:44:67:0e:
98:33:e4:94:79:52:ae:75:c3:6a:20:9e:d4:e6:2a:cd:6a:31:
7a:07:0a:49:d6:7a:43:d4:c6:80:93:b5:c1:66:72:89:ed:36:
bd:18:59:6b:8e:09:54:66:83:b2:52:cf:02:e4:83:34:bd:4a:
e5:9d:29:3c:dd:67:70:dc:22:1c:ef:02:0a:28:40:3e:5d:80:
5a:a1:ef:7d:bd:85:f4:17:75:fa:80:8d:29:1b:7c:8b:0a:bb:
e3:c9:a8:91:e0:3a:b9:09:60:ea:df:5b:f2:72:05:4a:04:94:
f2:2c:aa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:45 2025 by rpki-client