Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File: tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier: vKh6peVsZT6bTMff9Q2SLQWdiJJ7IgUZSC2FIqG1oP0=
Subject key identifier: 30:46:C5:D1:F6:F1:6F:5D:8E:70:DB:50:69:36:76:E0:F0:EB:F0:1E
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 0199277C535B0066E6DE3F41048CE1C8BE50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number: 1677
Signing time: Mon 08 Sep 2025 04:01:23 +0000
Manifest this update: Mon 08 Sep 2025 04:01:23 +0000
Manifest next update: Tue 09 Sep 2025 04:01:23 +0000
Files and hashes: 1: 0WgKhjREJrZPp5eivCc5Ledwy08.roa (hash: g1cMz695Vu5b1v4C7JspTc1yMqOrx6XRuND1g3o80ZU=)
2: c4XFDsuP3oiOPuoN5dW6Mp7swps.roa (hash: RShjOJ6yyL7rh4X46zYbqRc79tC1/dWZp0uZXHk88jM=)
3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: A1qDHg7bfXkLhYnt76xl6+XPnJ2JbOtwNrcNMDAz1Cw=)
4: x8qy1V86ggKXIYJ47lPp7-bEQ08.roa (hash: Tid2ObTc99hFnnGIy0KhVlQV4ZEsaX9AQcsvz/R/sw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:7c:53:5b:00:66:e6:de:3f:41:04:8c:e1:c8:be:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Sep 8 04:01:23 2025 GMT
Not After : Sep 9 04:01:23 2025 GMT
Subject: CN=3046c5d1f6f16f5d8e70db50693676e0f0ebf01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:bd:65:b8:02:4c:3e:90:17:19:7f:f5:f0:
a6:b9:ae:b8:2b:54:e2:36:fd:d5:34:f6:c8:34:26:
01:82:ec:2a:5d:8d:0b:93:aa:5b:a6:f4:5a:09:f4:
2c:86:3a:69:e0:c2:c9:f4:c6:ed:75:52:7f:4d:3e:
8e:1f:21:28:ba:84:e4:7c:0b:39:91:eb:e3:f5:c4:
79:b1:3d:ad:cc:fa:4c:eb:06:27:b8:cf:63:18:cf:
26:43:10:fb:ad:bc:03:51:8d:a9:52:a4:c2:6b:60:
05:e8:15:83:fb:3e:ef:24:a1:5a:84:21:0a:bb:67:
97:64:f7:14:cd:6f:a9:be:46:66:c4:80:fe:ea:7f:
4e:ad:8a:9b:8c:f3:e0:9f:9b:74:92:c9:63:80:56:
ed:f9:0e:3f:03:34:b1:97:4c:d5:a2:51:21:67:e1:
db:86:df:6a:7d:58:e1:3d:17:06:0c:ea:fb:39:a4:
02:ff:df:dd:7c:67:05:d5:2e:8a:f7:1e:a5:3e:c9:
f2:52:c5:8a:ca:fa:b9:4d:bb:91:61:8f:b7:3a:b1:
6a:68:48:31:bc:03:f7:f6:db:c2:a0:c2:dd:36:06:
18:33:b5:d7:f8:9b:a7:42:98:f9:06:86:6e:41:55:
ab:3f:34:7e:50:f9:52:e9:83:18:6f:2a:39:47:1a:
75:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:46:C5:D1:F6:F1:6F:5D:8E:70:DB:50:69:36:76:E0:F0:EB:F0:1E
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d8:17:ea:51:39:c9:d0:a8:43:bc:72:fc:cb:6e:8d:0d:30:
11:e9:0f:4d:34:93:4c:bf:93:64:48:33:ef:55:15:56:d9:d5:
10:5f:d5:22:16:86:6d:c1:16:8c:5a:5b:44:33:b8:5a:29:37:
51:f5:9a:74:73:c7:30:2b:6d:a4:93:33:5d:bc:bb:5a:64:82:
62:af:13:a1:94:83:fc:f4:37:ff:f1:4e:8c:dd:26:57:db:4b:
7d:02:ad:87:a3:2d:27:5d:ba:6b:7c:6c:1b:57:9d:30:da:91:
2f:42:1a:81:13:3d:3f:4c:be:ea:91:2c:d7:23:a0:14:10:9e:
71:36:63:30:23:d2:61:64:02:f4:14:92:b8:b4:16:e3:dc:d7:
a2:27:d5:58:6d:8c:ce:6c:08:c0:c8:a0:03:bf:36:a3:61:65:
55:b3:1e:11:52:d7:eb:25:9f:2e:61:eb:6e:1f:8c:2c:00:01:
54:02:51:a7:61:af:19:58:88:d8:d1:bf:b5:7b:5b:ad:71:38:
5e:4e:80:8a:4b:33:3e:cd:bc:24:4f:53:8e:d0:80:8a:16:d5:
8e:2f:6e:9e:5b:c6:c9:6b:40:63:bd:f2:37:28:0f:50:b3:66:
79:c2:77:a7:c2:36:8c:2f:3f:5c:d3:c6:ac:3b:0e:30:4f:78:
e9:5a:9d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:38:58 2025 by rpki-client