Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
File: tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft (raw, json)
Hash identifier: rfI4/L0bxZr92f4SUVKsECP6y+D1NQf/vHBkxyEa9h8=
Subject key identifier: DE:9B:1B:4A:01:A9:06:E2:0E:63:D9:46:E9:54:DF:B4:70:81:55:D7
Authority key identifier: B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A
Certificate issuer: /CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a
Certificate serial: 019960C6C54D21B209B2B0E1E0540DC402A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
Manifest number: 168F
Signing time: Fri 19 Sep 2025 07:01:03 +0000
Manifest this update: Fri 19 Sep 2025 07:01:03 +0000
Manifest next update: Sat 20 Sep 2025 07:01:03 +0000
Files and hashes: 1: R61HPMD68kIaSjuhapTR2hk_o_k.roa (hash: eWM7uVRHKJ0h/TzbbEISOsoLOvqx2gFtMEnPl7A/Y18=)
2: tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl (hash: uzU1p5Dbad2oJMlt9Tyg6c984CNLfgPRfNCh+A84LpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:c6:c5:4d:21:b2:09:b2:b0:e1:e0:54:0d:c4:02:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4023c8c518fa429ffca25977b6a8f843f8f0c4a
Validity
Not Before: Sep 19 07:01:03 2025 GMT
Not After : Sep 20 07:01:03 2025 GMT
Subject: CN=de9b1b4a01a906e20e63d946e954dfb4708155d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:19:cd:c8:28:58:30:5b:09:83:65:1c:9f:
b4:23:35:4c:be:b8:bd:5a:f9:6a:14:99:19:68:ae:
14:93:4b:24:f6:e0:41:dc:6e:30:4b:10:28:e9:eb:
c8:af:74:c8:d6:8c:ea:78:c4:56:38:49:33:43:dd:
4a:b1:08:fc:15:43:08:f5:ef:6d:1d:4c:00:33:23:
ab:b6:da:c0:57:46:5b:36:f5:db:4b:1f:13:0c:76:
2e:ef:15:c1:03:2e:78:3e:1f:5b:d6:55:de:fc:58:
2a:ae:ea:31:f5:6e:6a:38:a7:48:d9:f2:d5:11:2b:
80:3f:bb:f6:da:1e:fc:c2:d8:f0:55:52:bf:d3:a2:
55:36:27:79:95:49:01:ab:be:08:b6:e8:bb:60:00:
f7:ba:b3:c1:f0:d6:c9:68:f5:91:f6:d1:c1:b4:38:
ab:02:93:4e:2d:b3:13:63:50:e6:66:40:b0:8d:13:
5a:4e:a3:15:81:ea:04:50:44:d9:35:81:80:e2:ab:
9b:b1:63:9a:97:ef:a0:6d:43:d3:d6:2f:72:c9:61:
2f:64:91:f8:33:79:46:64:67:32:05:47:6d:1d:90:
b4:ce:9b:b6:8d:b3:ec:e1:73:17:6c:7c:d9:86:01:
a7:23:1b:4e:a7:2f:49:a3:c6:48:d4:e1:f9:12:57:
f2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9B:1B:4A:01:A9:06:E2:0E:63:D9:46:E9:54:DF:B4:70:81:55:D7
X509v3 Authority Key Identifier:
keyid:B4:02:3C:8C:51:8F:A4:29:FF:CA:25:97:7B:6A:8F:84:3F:8F:0C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAI8jFGPpCn_yiWXe2qPhD-PDEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52f5ad-850d-4a7e-9946-3b745dd8e21e/1/tAI8jFGPpCn_yiWXe2qPhD-PDEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:57:ff:cb:59:06:5c:56:35:43:6c:89:f0:bd:ef:b7:07:9f:
36:81:64:25:d3:d0:00:55:00:31:a7:e0:0b:08:08:f8:57:55:
7a:63:e9:38:7e:f9:97:12:05:e4:a2:27:67:b3:91:0d:b1:7b:
fb:80:4d:3c:c2:81:fb:26:4d:62:a9:79:f6:67:09:c2:e8:83:
c9:89:a1:51:0f:02:e0:3d:68:65:fd:b6:63:e1:1b:cd:34:4a:
a2:a1:e5:bb:70:90:7a:a5:78:cb:80:16:81:bf:dc:64:80:0d:
da:1f:35:3a:58:a5:75:fa:b0:df:50:32:09:a1:ed:53:f7:10:
22:1f:dd:73:e6:14:d2:b8:d9:61:fa:eb:18:eb:6c:6c:8a:f0:
af:6e:0f:cb:98:93:bc:86:ca:4b:df:aa:bb:b0:f6:3e:4a:a9:
23:7e:6f:d6:73:d9:2a:d2:62:3b:b5:5a:8e:31:1a:44:26:92:
51:69:b0:e4:0b:21:b3:da:4c:44:b0:83:39:7c:2b:9f:1b:07:
6e:72:84:6f:7f:1c:9f:82:20:b8:3c:dd:e1:c1:a1:53:cd:60:
5b:c9:91:9a:6e:88:2b:47:d4:44:bf:56:52:a2:5d:cc:84:57:
c1:60:a6:f4:82:18:5d:fc:2d:78:2c:c3:db:5f:2b:d2:be:90:
94:96:8d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 17:02:10 2025 by rpki-client