Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
File: TO94CCwHKSqq4kD27P06_bp4uMo.mft (raw, json)
Hash identifier: Dmj5rwn9T0GM0AX4izwnTsylrHpZ97ddGPerRMIsD8k=
Subject key identifier: C2:87:DE:AF:36:EA:13:9A:3A:4F:27:3B:72:45:82:9D:63:CA:BA:FC
Authority key identifier: 4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA
Certificate issuer: /CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca
Certificate serial: 019921E79C0514B374EA7DC26E088F445C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
Manifest number: 0419
Signing time: Sun 07 Sep 2025 02:00:50 +0000
Manifest this update: Sun 07 Sep 2025 02:00:50 +0000
Manifest next update: Mon 08 Sep 2025 02:00:50 +0000
Files and hashes: 1: TO94CCwHKSqq4kD27P06_bp4uMo.crl (hash: 7+iqxdZ5gE5KNyyEp0MSciAk6OvbwYYs4Ba26cjcX8Y=)
2: wqDhS7gdeGbdKyK4P2B2xid5RCk.roa (hash: pzt+fKb4dYAAFu+QRte1CXzAs8gCt6ejAy8RnTWXAJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:9c:05:14:b3:74:ea:7d:c2:6e:08:8f:44:5c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca
Validity
Not Before: Sep 7 02:00:50 2025 GMT
Not After : Sep 8 02:00:50 2025 GMT
Subject: CN=c287deaf36ea139a3a4f273b7245829d63cabafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:5e:00:a4:61:1e:e7:68:a6:3e:c8:8a:76:
5b:5d:33:24:41:77:8d:2d:2c:61:15:0c:b5:24:4b:
6a:be:61:74:c1:c3:37:af:f5:63:24:1d:4a:84:39:
5e:97:b2:f1:d3:bc:ad:95:6a:4d:2e:07:18:0e:34:
a1:04:d9:24:8d:93:54:2c:34:73:bf:c3:92:c1:70:
fc:e4:dd:f0:9b:b4:03:0b:e7:c3:f5:aa:8c:a6:b5:
c3:39:7d:c0:94:cd:35:19:c1:d2:6d:c7:32:b2:00:
45:72:91:18:66:d7:5f:0c:96:62:39:ed:39:42:bc:
5f:d4:35:74:f1:d5:75:dd:b1:8f:57:bc:6f:ff:5f:
06:0f:03:c8:d4:28:28:dd:a6:1c:d0:62:79:2f:02:
a5:07:c6:66:50:e5:7e:8e:1c:da:ea:2c:d5:a8:b8:
6a:9a:44:13:aa:14:5e:2e:f6:2b:af:42:96:97:8a:
8b:78:a2:b2:c1:00:b9:5f:c3:87:1e:94:ab:0b:f7:
4b:22:3b:3c:7a:f9:d4:66:4e:ba:62:4a:1d:64:c7:
b5:d2:39:68:6a:f0:29:91:68:ee:8a:a7:05:b3:b5:
7d:6d:e4:7f:66:1f:a1:f4:fc:88:3e:97:d8:88:5e:
76:fe:04:60:f4:c1:63:b8:33:a9:cb:17:e8:de:df:
1a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:87:DE:AF:36:EA:13:9A:3A:4F:27:3B:72:45:82:9D:63:CA:BA:FC
X509v3 Authority Key Identifier:
keyid:4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:42:dc:06:cf:f0:bd:eb:e4:c4:12:c9:a9:ae:4f:8f:06:fb:
d2:8f:8b:d4:9e:26:39:4c:09:24:2a:97:9b:4f:ed:c2:dc:e0:
3c:80:c7:35:f7:c6:fb:9e:87:62:0b:a5:36:d7:ba:f0:ee:07:
7d:0f:90:98:5b:9a:93:22:54:97:cf:9a:dc:89:cb:11:95:42:
df:e0:9a:b0:d0:55:6b:fe:95:12:62:cd:e2:0c:22:1c:25:a4:
fa:e5:48:bc:b3:56:60:bd:e5:98:ea:c2:62:f4:cf:93:a3:14:
09:a3:71:04:b9:f9:69:47:db:be:ca:ac:4d:3c:cd:c8:b3:91:
93:95:4f:61:19:8c:1d:b7:2e:5b:11:d8:2c:74:aa:17:c8:72:
e8:5e:4e:3a:f6:6f:b5:6e:84:40:33:2a:c4:f2:ab:f7:54:d6:
4a:24:46:a9:f2:5b:9e:99:c4:65:61:fe:bf:53:94:db:ed:26:
d3:35:30:30:7c:fb:b0:ff:67:41:74:0c:25:4f:b1:f2:30:bf:
4e:c3:97:25:33:f5:67:b5:19:ce:ce:06:e6:dc:28:60:83:ec:
34:56:7b:49:3e:40:ca:99:c6:9b:f3:5f:16:53:b9:86:17:8b:
2f:17:1c:26:1f:dc:1f:2a:36:67:5a:7a:02:93:e5:5e:2d:16:
cc:e1:71:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:35 2025 by rpki-client