Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File: TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier: AvZkZ2QMAwgbppR6K72H9s+foRr2KAorMoSTBjy/GzI=
Subject key identifier: A6:7A:3D:6A:E4:A7:26:86:4F:38:6E:44:3A:87:97:F9:CD:E3:25:54
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 01993501F694EB26620FA390B06C988FB536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number: 167E
Signing time: Wed 10 Sep 2025 19:02:25 +0000
Manifest this update: Wed 10 Sep 2025 19:02:25 +0000
Manifest next update: Thu 11 Sep 2025 19:02:25 +0000
Files and hashes: 1: JjwEZWBFYdro1bclN7oB-fRyAwA.roa (hash: k4IvqBYPxW6gaMsyO55esYb4IVeV/xHT6lju64eLGfA=)
2: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: z80JeVMqWbqtN1mxlYiKuCb/uJ6EmNXqU9ZesRzRmq4=)
3: a9wio39nY7HA5Emvyn8dQazuTJQ.roa (hash: NmO/lOJq3pD1F19fAJROTywj9iP7yhDSrwvmQCnkS38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:f6:94:eb:26:62:0f:a3:90:b0:6c:98:8f:b5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Sep 10 19:02:25 2025 GMT
Not After : Sep 11 19:02:25 2025 GMT
Subject: CN=a67a3d6ae4a726864f386e443a8797f9cde32554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3f:05:06:3b:20:10:77:d4:4d:af:b1:5c:83:
1a:40:57:1e:9c:b1:5c:a1:16:f8:7b:74:c6:46:f9:
cb:88:01:80:b2:d6:32:90:fa:70:03:7e:81:e7:4d:
4f:ea:93:7e:b6:d0:b4:a0:31:b6:13:83:e0:db:59:
c4:37:9e:9d:e2:5e:65:e1:45:5d:2f:35:cc:92:f0:
1b:7d:ca:18:dd:64:32:3d:7f:37:fd:3e:86:77:1d:
88:71:ef:c0:55:cc:5f:b2:6e:92:43:b2:8e:2f:15:
29:3c:0b:5b:d0:0b:d4:53:ed:7d:d1:84:82:0d:3a:
e2:88:47:05:c5:67:18:c4:13:cf:9d:eb:9f:72:b8:
85:40:32:0c:db:bb:84:07:9f:38:42:4f:28:c3:82:
c5:26:72:a9:20:fc:1f:77:98:78:82:59:82:a6:e5:
43:fd:63:bb:00:5c:ed:3e:d5:a3:2e:68:9a:be:69:
ac:bf:ef:37:43:86:a9:e5:d1:ad:44:f8:fc:cc:a2:
1b:31:9a:b1:c0:7c:9f:0e:ca:4e:04:2a:9c:03:f7:
20:c0:26:29:06:df:7a:ac:c4:9b:ee:8d:ef:b8:12:
25:e7:f4:a0:1c:6d:6b:c8:54:b9:e1:21:ec:bb:ec:
26:9d:66:f3:c3:d6:e3:cf:df:c0:24:20:75:df:5b:
c7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7A:3D:6A:E4:A7:26:86:4F:38:6E:44:3A:87:97:F9:CD:E3:25:54
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e3:c6:1e:19:a9:aa:61:5b:13:00:37:a9:ce:37:a6:bf:1d:
4a:85:a4:56:14:f4:c5:fe:36:a2:f7:5a:ec:d2:e3:91:10:ed:
1c:ae:68:c0:c2:40:8f:97:92:31:70:4b:01:f6:e0:e1:d4:19:
73:10:ac:12:5b:dc:37:ca:54:59:c8:5c:1a:ef:5e:92:d0:ec:
71:65:b9:ee:29:a1:a3:f6:e9:f6:ad:5f:af:da:b2:fa:89:7e:
7b:b5:60:33:ef:db:a5:1b:1d:ae:ce:9e:bb:84:40:44:b5:1e:
3d:6b:54:01:1e:4d:98:19:98:82:34:f0:ea:89:36:bd:a7:33:
bf:f0:cb:b3:e0:0a:5b:c7:7f:63:90:84:fe:de:d5:c8:31:87:
5a:b7:ee:40:6d:be:44:47:69:41:7b:d6:b5:a5:45:89:6e:de:
d7:aa:3c:29:2a:6e:1f:77:f7:52:4e:c6:e6:f4:78:e3:48:48:
87:ac:08:19:e5:4f:92:70:52:e3:0f:17:0a:e2:b7:fd:61:ad:
30:43:99:3b:a2:e5:a7:1a:07:12:fa:00:2e:ee:d7:28:59:7c:
42:bc:a7:eb:77:fe:82:b2:d6:a5:88:06:c4:99:09:f9:c9:cc:
f1:7e:62:af:a1:17:22:1c:64:b3:52:3c:93:3c:d5:7e:47:3c:
fb:8d:01:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:12:00 2025 by rpki-client