Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
File: tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft (raw, json)
Hash identifier: Vio23MtAbdmvbspt+HyZIXmJH9aTw70kTt20gT6ok7E=
Subject key identifier: 87:CA:A0:01:2B:EE:18:EC:90:67:EC:2A:F0:A5:26:42:23:6E:FE:85
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Certificate issuer: /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial: 019931C8519A82488BBA47C275AD39E1EA4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
Manifest number: 13FC
Signing time: Wed 10 Sep 2025 04:00:35 +0000
Manifest this update: Wed 10 Sep 2025 04:00:35 +0000
Manifest next update: Thu 11 Sep 2025 04:00:35 +0000
Files and hashes: 1: HqctvWxlrIEslD4ELNpmV-XhZkU.roa (hash: CGfhQ4fck7gcAxsslFd0Q8T9jYmDIbHyBLNxPR9Qais=)
2: bKSpPE5-kXmlbnT7r_1atj4jQSY.roa (hash: L3QXcpXiam9j36oZrcZebMrghkDu87SD2DJXHj63ivw=)
3: tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl (hash: ugE6ESGm00e5YNyRkG5H3iwhy11aIJ5o0k4tKQeUHt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:c8:51:9a:82:48:8b:ba:47:c2:75:ad:39:e1:ea:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Validity
Not Before: Sep 10 04:00:35 2025 GMT
Not After : Sep 11 04:00:35 2025 GMT
Subject: CN=87caa0012bee18ec9067ec2af0a52642236efe85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a1:6b:6c:6e:c2:11:60:fd:fa:51:a6:3b:2f:
ef:46:a1:d7:0d:f3:88:d8:d5:d3:f4:48:63:5f:10:
67:6f:1a:03:ed:db:69:c4:0b:ec:59:71:55:a4:3d:
5a:cd:e5:0f:1d:9c:e0:01:2f:e7:56:1f:a7:74:e8:
3d:55:3f:4e:68:23:73:4f:ff:0b:a6:ed:a6:c6:32:
88:6a:1f:a5:24:cf:1a:17:e9:91:bc:5e:77:dc:fd:
11:ef:ad:13:e8:e1:df:48:88:3d:37:22:bd:48:44:
0c:bf:e0:41:b6:ce:1d:40:2b:e1:d3:dc:ea:63:1b:
93:8d:c7:05:4e:ba:f9:06:44:05:02:c0:2c:94:8b:
ca:41:d5:0a:66:ce:81:c3:49:83:2b:f8:98:5e:f8:
27:85:70:6b:f7:3d:fd:4c:ae:bb:c8:37:01:72:9c:
86:8a:92:ee:46:37:22:f0:d4:ae:bb:99:f9:1a:15:
b2:6a:cb:2f:2f:3c:20:ee:ca:0c:e0:02:fd:6e:43:
f4:6e:48:e2:7c:7c:65:a2:84:8b:47:ee:e6:e4:74:
e5:f9:cc:f8:05:cd:0a:2f:25:34:d4:91:08:28:33:
31:76:2a:14:c2:93:28:47:d3:54:9a:cc:9d:6a:1a:
fb:f6:d3:ef:2c:a3:4d:20:8c:bc:2b:cc:e1:4f:65:
e4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CA:A0:01:2B:EE:18:EC:90:67:EC:2A:F0:A5:26:42:23:6E:FE:85
X509v3 Authority Key Identifier:
keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b5:25:06:34:30:0f:58:fd:85:93:ae:7f:ba:30:e8:3a:44:
85:a5:f7:b9:84:40:ef:5e:c8:4f:9b:c4:dc:8e:e4:f9:31:08:
d3:4d:a6:a2:fb:72:19:c3:21:10:b0:60:5e:15:c4:fe:f7:c4:
df:5e:a6:14:56:f7:59:43:85:ce:d2:3c:77:89:e6:cb:36:c3:
52:fb:b7:82:d3:f3:37:dd:55:8d:11:69:df:b3:8d:74:29:d8:
bf:30:60:cf:dc:aa:45:83:ca:bd:2e:a5:d2:e7:00:99:01:fa:
bf:61:a9:c4:7f:b6:c2:19:5d:a3:2a:64:b5:3b:9c:c2:ba:f6:
fd:12:06:a5:d6:b8:65:0a:b5:d6:09:1e:15:b4:18:69:dc:5c:
a3:5a:10:85:a8:c2:d8:57:1e:f3:38:35:7d:9c:b3:fe:27:6a:
ca:40:92:91:72:f2:4c:f2:d8:bb:11:2f:23:10:e4:73:3c:ca:
17:54:33:c8:36:55:c4:53:30:27:2b:ef:e4:a3:05:df:59:9d:
3c:f2:e4:06:f8:37:b3:b4:9d:a2:17:69:c6:2a:2b:d5:23:dc:
f3:5e:03:aa:64:4e:60:92:c2:20:4a:0a:28:f7:b5:14:9f:98:
92:cf:ad:fa:61:85:5b:8b:24:a2:58:f3:ab:aa:93:8b:8d:ca:
f9:4b:3e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:24:21 2025 by rpki-client