Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
File: t4skH3ysfR5SHigxR-xhdjxCKqc.mft (raw, json)
Hash identifier: VHcf4GUnLwuBCnhDquvWWJdHaJaDHHQxvokKBVALZ4E=
Subject key identifier: 04:93:DA:DF:0D:6C:96:AB:C6:AD:74:39:B7:B6:0C:32:DE:EF:C5:C4
Authority key identifier: B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
Certificate issuer: /CN=b78b241f7cac7d1e521e283147ec61763c422aa7
Certificate serial: 019921B28D5CB3F250EB21FF47E9BD6D9D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
Manifest number: 070C
Signing time: Sun 07 Sep 2025 01:02:53 +0000
Manifest this update: Sun 07 Sep 2025 01:02:53 +0000
Manifest next update: Mon 08 Sep 2025 01:02:53 +0000
Files and hashes: 1: JeMCMYiH53cU_3LMDeSKcS3Thhs.roa (hash: q+KDU3te7tpkPWYDo6SVWUaxsvwlZ34vk9tdHz3W+pc=)
2: t4skH3ysfR5SHigxR-xhdjxCKqc.crl (hash: gk45l+mPXkAVGmbuzY0YnE5x8vjeGl3p8OmIs7qFUXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:8d:5c:b3:f2:50:eb:21:ff:47:e9:bd:6d:9d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78b241f7cac7d1e521e283147ec61763c422aa7
Validity
Not Before: Sep 7 01:02:53 2025 GMT
Not After : Sep 8 01:02:53 2025 GMT
Subject: CN=0493dadf0d6c96abc6ad7439b7b60c32deefc5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1f:ba:d4:18:d8:db:8c:4f:ec:79:f1:45:94:
0b:2c:4c:33:8e:b8:a6:29:fd:dd:c2:e6:30:4d:2b:
5c:22:dd:5f:c7:f4:29:d1:e7:20:5a:c1:fe:0d:9b:
e2:d0:44:fb:74:1e:1b:2c:a6:5f:02:46:b1:40:5f:
40:2f:c6:01:c7:66:c1:a8:2c:a7:61:f0:6f:11:c1:
74:0b:da:74:3e:52:d4:6e:90:a5:d7:f8:bc:6d:0a:
25:df:d5:84:f6:5b:c7:c3:91:91:9a:13:2d:59:15:
3d:4f:51:18:00:8b:0b:3b:6a:08:22:26:a2:62:96:
4c:2d:b5:77:23:91:88:63:f1:23:d8:22:d4:81:e8:
1f:be:56:22:1d:e0:cb:02:f4:60:40:68:87:91:f9:
54:1d:52:bf:71:aa:0a:4d:36:8b:24:1d:11:d5:28:
1e:e7:cb:ae:b3:8e:3c:e8:96:33:51:4a:41:34:28:
2c:a0:69:67:71:12:31:47:0d:f8:46:77:f2:95:99:
3a:dd:3c:8b:ec:93:a7:4c:79:4f:31:a8:d2:04:c5:
eb:98:d1:d2:65:f6:e2:48:d6:8b:43:cc:a4:db:00:
e5:f9:f8:59:11:19:14:01:95:35:78:a7:1c:2f:83:
b6:f9:83:42:44:a3:6e:3d:a4:38:22:ac:0a:e6:3b:
27:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:93:DA:DF:0D:6C:96:AB:C6:AD:74:39:B7:B6:0C:32:DE:EF:C5:C4
X509v3 Authority Key Identifier:
keyid:B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f6:d7:99:a7:be:04:a5:65:e8:0d:2c:f7:4b:51:07:98:71:
c7:b4:1f:6b:d3:ad:c9:e6:ad:2d:ac:7f:e1:a7:d1:85:c5:d9:
c2:80:53:b9:2f:a9:3c:fc:b6:23:4a:5e:8e:39:00:5a:7a:83:
0e:00:7a:c3:9c:79:1b:9e:21:37:56:6f:e2:bf:2e:9f:77:19:
16:f6:8c:b4:83:bc:aa:0d:fb:ff:17:07:d4:ab:e7:96:ac:ce:
11:de:93:fa:48:3e:97:b6:9a:4d:60:35:7a:50:50:b6:13:d2:
4e:b6:75:3d:f2:10:d9:50:59:24:07:92:5d:ab:21:a8:6b:24:
62:2a:cf:d9:88:f9:25:78:d6:d0:f3:4f:0b:54:5f:73:87:da:
e6:fa:b9:59:87:af:b5:47:6b:c3:38:10:d1:a7:25:e3:04:24:
ad:c5:20:0e:22:94:be:58:b9:c0:cc:14:9e:5e:ee:01:cb:0b:
20:25:83:72:8c:e9:a9:e8:d5:38:ab:1a:91:27:5b:d4:36:2d:
91:c4:29:22:08:b4:6f:13:45:e2:40:8c:40:59:f0:bc:20:19:
a0:ea:22:14:cd:dc:1e:68:30:f2:9c:4b:7b:bf:96:3b:ac:dd:
a8:b1:3e:7f:8d:80:9a:35:35:4e:a7:ba:39:92:19:46:eb:16:
48:85:1d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:21 2025 by rpki-client