Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
File: TblS7RzXo4A89Nv9NA6nSWMmi6A.mft (raw, json)
Hash identifier: vjMuinsvldvq8UcPdOlZtO82a7l7+NzEc0UkntfIplA=
Subject key identifier: 63:0E:66:CB:14:BE:10:96:09:FA:14:2A:54:35:80:5F:54:90:17:0B
Authority key identifier: 4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
Certificate issuer: /CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
Certificate serial: 0199228C7B06C887C911EF29FB59CD775698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
Manifest number: 13BC
Signing time: Sun 07 Sep 2025 05:00:55 +0000
Manifest this update: Sun 07 Sep 2025 05:00:55 +0000
Manifest next update: Mon 08 Sep 2025 05:00:55 +0000
Files and hashes: 1: TblS7RzXo4A89Nv9NA6nSWMmi6A.crl (hash: Vn29lhqpChKnQV/3pBfrZqswRKZUFOVsknzpccevmb0=)
2: j5Ft5Wy8JxIF_GoPXz22l_KXIjU.roa (hash: mypsPRsnwnV3Yo/ZoSy7EsoVz4ps6Bh9fIm4sESstXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:7b:06:c8:87:c9:11:ef:29:fb:59:cd:77:56:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
Validity
Not Before: Sep 7 05:00:55 2025 GMT
Not After : Sep 8 05:00:55 2025 GMT
Subject: CN=630e66cb14be109609fa142a5435805f5490170b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:5b:bf:8d:ae:28:fb:ce:ef:11:d2:db:89:
b3:de:c6:db:e0:94:d4:0f:80:11:72:ca:6b:c3:8e:
54:bd:38:22:b9:a6:b3:fe:98:66:01:80:fd:b3:2e:
00:a1:a1:5b:b8:c2:a6:bf:1c:9b:af:14:10:74:28:
f3:5b:80:59:3e:71:c8:17:c8:89:e2:81:c9:e9:27:
1c:e4:96:70:e3:4b:80:ec:b9:02:4d:c0:ae:d3:b1:
90:25:42:72:e7:3e:56:68:93:ab:2b:a5:ca:42:08:
52:4f:47:e9:91:c3:cb:15:71:c6:8d:20:00:78:6f:
3d:6c:78:c1:70:11:14:bb:78:d4:76:e6:35:81:eb:
d7:8c:cf:33:bf:70:d0:1b:95:d5:ba:13:98:41:51:
07:b4:38:99:16:18:83:0c:af:c1:db:0c:07:bb:00:
c7:48:c1:e1:60:ba:f3:79:ce:91:60:a3:19:98:e3:
8b:95:b2:b6:d1:fb:ff:b8:84:c3:33:05:19:2a:1b:
12:34:b4:cb:06:3e:ef:e2:e9:b6:c0:88:e7:d9:5d:
55:1e:4e:fb:b4:e0:30:c4:fd:8f:90:5c:cd:6b:64:
b6:9f:3d:6b:f4:77:e5:5a:f1:19:0e:70:c9:19:01:
09:eb:46:72:e1:dd:99:b8:ef:83:6d:0b:b0:ac:0a:
67:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0E:66:CB:14:BE:10:96:09:FA:14:2A:54:35:80:5F:54:90:17:0B
X509v3 Authority Key Identifier:
keyid:4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:55:36:92:5c:1d:b2:2a:73:c0:ae:f6:b6:f0:a0:5e:01:39:
3f:d1:36:d4:24:b6:4e:0f:46:8e:ac:cc:98:c5:fd:92:fb:5c:
1c:9c:53:e0:7b:0e:cd:51:aa:15:e3:a8:ba:d5:9d:18:fb:e3:
d7:19:69:69:f5:01:2b:72:81:6e:1d:60:d0:89:0f:fc:a2:c2:
76:d8:85:b1:40:78:0f:7b:84:1d:a9:51:a3:29:30:41:e2:07:
2b:da:49:9a:bc:fd:0d:ad:02:5b:7d:62:ae:57:51:93:37:bf:
16:c0:55:91:fc:67:9e:40:cf:cf:c4:37:21:1d:63:e3:64:c1:
75:2a:8a:21:80:46:d5:f7:14:38:9c:68:34:88:a7:53:42:e9:
a0:12:89:a3:fc:93:8f:20:83:af:b3:87:3e:c6:0e:07:14:61:
57:63:0c:d7:f8:38:d6:3b:52:9c:63:b3:a9:a8:36:af:b5:60:
b3:21:23:18:55:fe:1b:cf:0a:4f:50:0c:7d:af:9a:94:2c:d7:
63:ec:47:dd:07:8b:d0:b0:8a:d6:92:55:d7:23:1a:a8:a0:18:
a0:8c:30:30:9d:3b:dd:5c:bf:6c:c6:ac:c4:03:8e:a5:55:e9:
9a:9d:d9:12:66:f6:d9:82:04:6e:c6:9a:9f:d8:0f:f6:5b:e1:
a2:45:71:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:17 2025 by rpki-client