Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
File: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft (raw, json)
Hash identifier: 47hPCJJ8LMBjzt/KPZq3XM1VTmHVEekZTNEsHIkwfuM=
Subject key identifier: 5A:3B:EF:D2:B5:49:A2:3B:07:98:E9:7E:6E:9C:F7:0D:76:5C:7C:87
Authority key identifier: 4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09
Certificate issuer: /CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
Certificate serial: 019923D5D719445E08BA7472D3F9019ACA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
Manifest number: 164D
Signing time: Sun 07 Sep 2025 11:00:40 +0000
Manifest this update: Sun 07 Sep 2025 11:00:40 +0000
Manifest next update: Mon 08 Sep 2025 11:00:40 +0000
Files and hashes: 1: PHU8bveJ4V86SqIQTMnWW43DqBE.roa (hash: 3OhBnf8f8HGM5ArwPPNt9UU72cQZdAdKTbSA4Z11k2Y=)
2: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl (hash: IPb2w8dtvBOXhFG9jau3VHCHy9jWcOuZ7TRfCLqn1pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:d7:19:44:5e:08:ba:74:72:d3:f9:01:9a:ca:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
Validity
Not Before: Sep 7 11:00:40 2025 GMT
Not After : Sep 8 11:00:40 2025 GMT
Subject: CN=5a3befd2b549a23b0798e97e6e9cf70d765c7c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a3:d8:d9:bc:c4:0e:26:92:e3:e7:dc:1c:92:
7e:93:ce:52:27:7e:3f:04:5a:eb:26:ef:0f:3e:7f:
3c:d7:5d:f8:68:8e:de:74:c1:d6:fe:68:e5:8e:9e:
70:ae:46:dc:52:19:ec:c3:c1:51:cf:b6:d9:95:d2:
d1:e2:01:ad:75:af:c0:d0:5e:d3:32:4c:2e:4f:3a:
fa:76:fb:7e:77:3d:ff:02:0e:da:39:20:ae:d4:90:
97:e4:4e:4d:12:42:d7:3e:58:27:c9:f7:03:a8:3b:
0f:f1:47:db:6a:19:7d:55:43:b3:5f:41:5d:6a:af:
95:03:41:74:ab:2e:4f:48:ad:0a:01:b9:86:ca:85:
3b:27:e9:20:08:a1:d1:e0:f8:b5:54:59:6d:a5:b1:
1b:50:03:f5:65:37:9a:91:ca:46:11:cb:8c:0d:ed:
8a:f1:93:57:e3:c2:b5:25:3c:4c:84:aa:92:40:db:
7e:44:eb:31:36:de:c9:fb:0d:39:ef:9d:6c:02:e9:
08:2f:f8:c0:f5:f7:32:40:c3:84:18:81:ef:4e:19:
b3:3f:e4:3a:c6:7f:33:a9:a8:52:47:d9:cc:9e:31:
c6:bb:8b:80:1e:12:da:8d:9e:85:40:08:32:01:cb:
5f:ef:ed:8a:0a:e8:09:56:6b:ce:87:9f:7c:bb:e3:
f4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3B:EF:D2:B5:49:A2:3B:07:98:E9:7E:6E:9C:F7:0D:76:5C:7C:87
X509v3 Authority Key Identifier:
keyid:4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:fa:db:a9:07:d7:df:65:f7:ba:90:49:7d:ce:5c:40:28:c8:
ce:14:dd:51:f9:c8:8c:60:48:6d:72:de:da:67:60:94:55:dd:
81:5c:51:b4:37:65:f3:bc:6c:69:f8:27:bb:e2:3e:a9:fb:06:
f3:03:5f:cc:cd:f7:12:00:e2:02:76:3e:9c:02:8a:84:98:fb:
ff:10:16:db:44:11:67:8e:a1:0f:06:2b:d6:a1:8c:81:fc:40:
2a:ce:bf:61:53:10:07:36:f8:46:a0:bd:66:ef:05:d4:35:ba:
25:43:e3:dc:56:16:2f:9f:29:ea:d9:ba:c4:e1:fa:3e:0e:40:
94:de:a7:69:15:c7:0a:81:e9:86:92:b3:bf:c4:01:b6:16:83:
ce:2d:4c:50:e3:88:6f:3f:b5:08:b9:a8:0a:72:bf:5e:0b:cc:
0e:c2:0e:e5:60:28:fd:71:7c:db:db:c4:76:76:ac:c9:7c:d3:
eb:ba:96:67:65:8c:a9:56:35:06:f3:79:c3:a7:05:eb:fd:0a:
65:b8:62:ca:e2:64:6b:74:b6:70:4f:70:cf:3d:c5:c8:9e:63:
a7:5b:98:83:b6:04:bc:41:a0:27:a2:4e:b9:29:69:17:b1:47:
61:28:18:b6:d5:e3:cd:a9:a5:b4:2a:7d:5e:27:15:da:60:59:
0a:69:15:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:37 2025 by rpki-client