Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
File: tfrsS42ZLda5zYmoSJ08OmUq7NI.mft (raw, json)
Hash identifier: 7InxF+vaZ+PZK+08P1Dm6NJ/zLxFuiBTNV8agCzlSfE=
Subject key identifier: 08:1D:C9:77:A3:96:17:A7:61:C6:88:3D:2D:9C:B4:47:01:8C:28:3A
Authority key identifier: B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
Certificate issuer: /CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Certificate serial: 01992E22F29D6856E68D42795F31F6696989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
Manifest number: 1676
Signing time: Tue 09 Sep 2025 11:01:06 +0000
Manifest this update: Tue 09 Sep 2025 11:01:06 +0000
Manifest next update: Wed 10 Sep 2025 11:01:06 +0000
Files and hashes: 1: 4yLFcyM54Hv8nF5ON-TIrD-1oYQ.roa (hash: hE+OT4FiIcXi0TRuDiRDYqpuBeR4hhUYci4sdFCd/CY=)
2: jKEy0LJLh7AqTPNLnCDWho1dIJ0.roa (hash: BKRsVG5h+FxIv9YJSObhtgL9EqcN1BIPxpc/4d7NHx4=)
3: tfrsS42ZLda5zYmoSJ08OmUq7NI.crl (hash: jn3q1tpjbcaeZreiv5IAe8lrRkfQSONMSSenFtCUw9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:22:f2:9d:68:56:e6:8d:42:79:5f:31:f6:69:69:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Validity
Not Before: Sep 9 11:01:06 2025 GMT
Not After : Sep 10 11:01:06 2025 GMT
Subject: CN=081dc977a39617a761c6883d2d9cb447018c283a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:0a:ff:67:20:37:9d:4c:20:d3:73:dd:b3:
91:ad:c8:20:5d:2f:55:e3:ca:d7:c6:72:20:b3:01:
3b:db:64:97:2f:0a:96:21:68:86:0b:78:3b:4e:6f:
a1:81:ed:2c:02:10:52:c4:2c:c5:ba:76:36:d7:e7:
6a:a1:5d:a3:a3:03:83:d6:0f:e1:5d:00:16:ec:86:
c2:14:b1:6e:ed:0a:65:ab:f1:2e:bd:f8:fe:92:ff:
ce:11:b6:91:30:f6:23:c0:a6:1a:8c:89:87:bf:7c:
2a:d1:80:b4:a9:af:6b:b0:51:ce:1d:5f:ac:7e:1f:
f8:bc:2e:41:d9:0c:92:d5:cf:9d:3f:d3:f3:f2:ce:
5e:c2:79:6a:8a:51:b3:02:cb:17:a3:cd:ee:8b:38:
82:f2:bf:4c:77:27:7e:74:a4:4d:fd:69:ab:13:e1:
35:1d:b6:51:50:2d:bb:a1:21:e2:1e:ae:bd:f4:34:
f9:74:1b:dd:c1:75:63:bf:f5:78:d3:39:0b:30:a5:
45:c8:21:44:9a:f2:fc:e5:dd:11:7c:48:38:08:69:
e2:bc:1c:56:4f:9a:e8:e4:c1:e9:8d:8e:a8:7a:d4:
4e:fe:ad:3a:ab:b1:2c:ad:d3:51:90:4d:0c:04:a2:
6c:f7:f9:8f:55:cb:26:3a:65:b9:f6:2b:18:58:fb:
bf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1D:C9:77:A3:96:17:A7:61:C6:88:3D:2D:9C:B4:47:01:8C:28:3A
X509v3 Authority Key Identifier:
keyid:B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:2d:b4:68:79:54:96:77:22:af:df:7a:f5:07:a2:dc:af:d9:
35:13:c5:de:09:9f:a6:fb:26:a5:0d:bc:38:62:26:21:a4:88:
d3:6d:a5:e2:bc:bb:d1:9b:37:f6:02:ec:8b:59:02:e8:e3:ba:
70:68:33:4d:c0:be:52:c4:67:b9:e6:e6:49:42:b8:67:cf:20:
c6:01:bb:bb:39:3d:4d:84:6c:69:73:58:1c:84:32:04:7a:24:
6a:49:c7:f4:95:39:c3:6e:79:1d:04:9a:83:b3:7d:13:c2:db:
01:25:89:ac:ee:89:0c:e5:0a:bc:67:53:49:9e:0e:27:30:4a:
ce:7c:fd:b7:e9:9c:0f:06:58:81:f5:78:b4:e8:52:5b:ae:d2:
00:2f:32:b3:d4:37:f1:43:05:f4:02:3b:bf:41:31:e7:20:46:
c5:02:a7:4b:2b:dc:88:2c:ce:38:7e:59:40:0b:3c:2b:cc:46:
ce:4b:d8:26:62:c1:91:0a:06:8e:8d:6c:f6:3c:24:ee:87:63:
ef:c5:bd:7d:37:30:1f:76:21:45:88:34:e9:74:45:c1:5f:11:
fc:1d:02:6f:b7:c0:21:08:58:8d:f9:e6:a5:db:2b:0c:c4:b0:
73:77:9f:83:49:72:bc:5b:16:e6:69:c1:31:59:96:d8:48:05:
67:0a:7b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 20:09:10 2025 by rpki-client