Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
File: TGtjcblFo16d8wj_Q4A-JheFEGk.mft (raw, json)
Hash identifier: XE5Yz2Llkb1X9S3EzXxteDBn2Ei/N6RUE6VphA6beuo=
Subject key identifier: 31:36:16:11:8B:8F:7E:86:46:F0:22:02:51:D0:0D:3B:0F:A1:53:C0
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Certificate issuer: /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial: 019933B70D659E4F6DC9D040F531EEF32596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
Manifest number: 1130
Signing time: Wed 10 Sep 2025 13:00:58 +0000
Manifest this update: Wed 10 Sep 2025 13:00:58 +0000
Manifest next update: Thu 11 Sep 2025 13:00:58 +0000
Files and hashes: 1: NETt5LyS--lV9_ycDBmp9TmpxP4.roa (hash: rz60bepxWIT7kbaafyZ48rHU8Vmg6Vvtzt7Ebp5hgDU=)
2: TGtjcblFo16d8wj_Q4A-JheFEGk.crl (hash: oBQbU3msPW89tc0Fe2US4MH7bA1bcQRQM4N1I4WTyXM=)
3: YU0ymXaczDxniPQtB_xa4RTEU2Q.roa (hash: +3YrNwFP0+tuTgevzTw2FGRwOLOaLfupz3GSxL5OXLE=)
4: e99v7pEfrFm4Dg1SnIaNO39I8Ws.roa (hash: GWy1k4OaIi0pC/Ap0hgLnIy0Gp664zirmOTGWdfBTaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b7:0d:65:9e:4f:6d:c9:d0:40:f5:31:ee:f3:25:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
Validity
Not Before: Sep 10 13:00:58 2025 GMT
Not After : Sep 11 13:00:58 2025 GMT
Subject: CN=313616118b8f7e8646f0220251d00d3b0fa153c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0d:9e:a8:70:c7:98:46:d2:cf:9a:15:40:20:
8b:f1:59:97:04:d6:8d:34:4d:7b:a4:e4:9f:bc:3b:
a4:b9:df:4d:f7:0d:bc:21:99:a0:35:2d:8a:ac:e4:
af:cb:77:4f:8b:b7:d2:0d:ff:5d:59:b4:98:7e:e2:
a6:fa:ac:03:20:ca:30:0c:9d:d1:8e:9d:f6:04:35:
94:b2:7d:90:5f:f5:ae:da:f3:b4:73:7d:ba:b5:56:
d9:b5:27:35:79:a6:75:96:b5:93:85:93:48:84:6a:
d5:ce:65:4c:3c:be:58:25:f4:0e:2c:5d:a4:97:d3:
94:6f:68:2c:9b:67:1a:66:75:6e:97:80:d2:b2:8c:
6e:5b:4e:77:5a:4c:01:81:43:cd:f7:f5:6c:56:24:
d7:49:ea:7e:7e:45:14:9c:1e:4b:55:c8:a5:28:81:
20:0f:de:91:57:2c:1f:ff:e9:c7:2a:fb:28:43:6f:
a6:c7:55:be:bc:93:2b:93:b6:c2:0d:68:ee:c9:69:
c3:46:44:f1:e0:82:99:d5:3d:e9:b1:f4:46:86:77:
ef:23:12:d2:61:a9:e7:1a:63:f7:93:aa:b4:c0:7c:
47:53:ae:e8:c1:42:97:29:be:45:5e:bc:18:04:5a:
9f:0e:55:36:73:ee:81:e1:23:c6:8c:01:10:74:6d:
cf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:36:16:11:8B:8F:7E:86:46:F0:22:02:51:D0:0D:3B:0F:A1:53:C0
X509v3 Authority Key Identifier:
keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b0:43:47:4e:b6:bb:9a:92:5f:f7:d9:ba:ce:85:cd:19:c1:
cd:a6:f7:ab:74:29:54:58:c8:8f:e3:c5:cf:d7:b8:c7:8a:a7:
c4:14:0b:5b:b9:63:d0:cc:3d:cd:53:1c:e9:d8:67:4c:b9:61:
2b:c9:81:b0:ca:d8:02:4a:92:a3:92:40:73:da:55:95:1d:37:
2f:ce:95:59:86:99:5b:b1:41:76:9d:1c:4a:88:38:a8:97:6b:
78:5f:2f:5f:4c:c7:bc:48:5b:fd:19:eb:5b:f4:0b:47:b2:30:
fa:80:fc:06:ae:21:74:a9:a1:57:e8:c8:ff:47:dd:1d:c3:57:
52:44:38:a2:5e:f6:cd:41:d0:b4:68:46:33:db:7e:2e:8b:08:
ea:67:46:56:c3:f6:10:7b:7d:58:30:31:6d:dd:98:8f:a6:ab:
0e:eb:7a:f2:a7:d1:0f:fa:43:12:80:3f:a2:22:74:cd:59:04:
0d:45:85:51:ec:e6:c6:e0:5f:fa:52:c2:39:d0:67:01:65:9a:
0e:75:f7:b0:6b:8b:86:b9:c5:ca:60:d1:91:be:77:0a:a4:23:
5c:87:b9:44:5f:1f:4a:2a:51:17:2e:b9:9c:04:66:64:16:7b:
a0:d0:ad:70:54:ae:f0:b9:f7:f3:94:18:f4:34:92:f0:af:c0:
2a:1c:1f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:14:14 2025 by rpki-client