Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
File: TBdAzvl0ncKw9fiM3xA02oHWBtw.mft (raw, json)
Hash identifier: EMhsl83Vmn6Ku6ewMgmRQTao+6mFj1QHcp1Brx7kRkI=
Subject key identifier: FA:80:43:50:74:46:92:8B:82:8A:3E:45:AB:D9:01:D5:03:35:BE:08
Authority key identifier: 4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
Certificate issuer: /CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Certificate serial: 0199172D1F00DCAFBF831CDD45E5D731D9E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
Manifest number: 0FEA
Signing time: Fri 05 Sep 2025 00:00:57 +0000
Manifest this update: Fri 05 Sep 2025 00:00:57 +0000
Manifest next update: Sat 06 Sep 2025 00:00:57 +0000
Files and hashes: 1: 9UfG7ZfqsnxXdNjOVBB4EufGuiU.roa (hash: nBGGqWZhxqHLJh+Oq/1SCIlZ0ENh9e+rLU6y/LQvQNA=)
2: TBdAzvl0ncKw9fiM3xA02oHWBtw.crl (hash: tjMBdQJfTVg0+cNVJiaSBhNHUnT8zLXC4ea3+4JL1k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2d:1f:00:dc:af:bf:83:1c:dd:45:e5:d7:31:d9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Validity
Not Before: Sep 5 00:00:57 2025 GMT
Not After : Sep 6 00:00:57 2025 GMT
Subject: CN=fa8043507446928b828a3e45abd901d50335be08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7e:cf:24:fb:59:8a:b1:64:67:e6:97:2e:0d:
31:e2:a5:b8:f4:7c:bd:d2:22:f5:4c:8e:8d:97:3e:
46:2a:10:2b:c0:65:f1:fe:00:8c:e4:3f:aa:cc:38:
50:c3:aa:55:31:09:1f:f5:f1:58:ce:31:69:9c:34:
f4:9a:73:64:eb:ca:ff:ae:d0:e6:c1:ad:7a:5b:f0:
4f:57:b3:fd:5d:71:b2:92:91:20:4a:80:b6:c4:c0:
03:c8:83:74:ec:0a:07:20:46:da:b2:c5:a1:b6:c2:
59:d3:68:68:6a:c1:93:63:18:12:47:7e:fe:95:f0:
11:89:3b:ca:58:c1:2f:21:59:77:75:50:6a:f0:74:
fd:2a:c8:0c:bc:ea:46:f2:20:22:73:d3:41:78:a6:
53:52:ee:40:d5:72:c7:b5:47:11:5d:b6:96:1a:19:
4a:2b:03:0f:58:95:53:4b:c8:0c:ec:47:c7:4f:6e:
7f:6d:c9:9f:5d:5c:99:62:6d:60:2c:9e:5b:ce:0d:
55:5e:49:0a:21:d3:e0:75:82:2e:98:95:6a:59:cf:
c5:c2:ec:ff:19:05:e6:21:c8:55:25:f3:6e:03:56:
b7:2b:b5:88:e4:7a:eb:c5:2c:54:2c:8c:16:47:f9:
0d:4c:d4:aa:de:5b:83:7b:d6:59:a4:e5:b0:85:48:
bb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:80:43:50:74:46:92:8B:82:8A:3E:45:AB:D9:01:D5:03:35:BE:08
X509v3 Authority Key Identifier:
keyid:4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b3:77:6b:31:55:00:7c:be:cd:1b:06:0e:f9:14:bb:f7:78:
36:91:92:4a:1a:bc:d6:f1:a9:c4:3e:f8:11:9c:55:96:eb:72:
10:93:df:97:d2:43:a0:93:16:18:98:d3:50:d9:9e:a7:ed:26:
0c:49:76:58:9c:a4:65:09:51:b6:64:dd:26:be:eb:ab:26:27:
e9:ce:91:46:e3:1e:a6:f3:31:9c:81:61:6f:69:a1:de:89:53:
e3:dd:5b:aa:b8:b0:76:9c:7e:1b:52:d9:15:a1:32:95:82:b6:
cc:c5:67:3c:78:24:b1:57:fb:d3:3f:53:ea:2d:fe:8c:f6:58:
72:05:c6:0a:37:c3:a6:3c:db:eb:7f:a3:8e:96:1e:ca:22:46:
55:2a:c9:4d:68:d7:3a:4e:3c:4e:bf:91:43:75:c6:5d:81:d9:
de:9b:50:00:13:5f:02:bc:f6:7d:78:2b:62:ac:70:e1:fc:55:
04:9b:d3:a8:54:ed:76:5d:74:9c:4a:1f:58:db:44:49:ef:1e:
4b:1c:0b:03:66:f6:94:03:34:d5:da:9a:5c:1c:6b:76:63:9b:
b8:d3:b4:50:b3:fb:bb:61:e4:c2:c8:e7:cd:7f:24:70:23:42:
de:8c:23:c1:41:b9:21:0e:0f:9b:40:3f:75:6c:68:e3:8b:f8:
cf:f0:f6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:20 2025 by rpki-client