Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
File: TFTszmy8nFSSnqpLIrM3sP2bNr8.mft (raw, json)
Hash identifier: 0/3yTz1vCWbwq21NxI9ZtX8lyeMzk0yDMFTL3bdh2hA=
Subject key identifier: 84:74:E7:D6:E5:55:81:21:85:FA:4C:EB:83:77:B2:FD:BA:61:23:D6
Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
Certificate issuer: /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Certificate serial: 019921B0C173CE814AE87EBB1311FC3E9C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 01:00:55 +0000
Manifest this update: Sun 07 Sep 2025 01:00:55 +0000
Manifest next update: Mon 08 Sep 2025 01:00:55 +0000
Files and hashes: 1: TFTszmy8nFSSnqpLIrM3sP2bNr8.crl (hash: 3W8ZR/pEAma9naoDCI3XUDfmKZtH3EsQa7jEoMSyPOY=)
2: eHPqpiMAvfqI-We9VzdWjZPR_bY.roa (hash: 2EtKDvjgQC4QGGaHfks3HUfVQC7NvALc/OB3oROL6rM=)
3: ePZ7Yuu3-_aTMfNEBfmL4fdhXII.roa (hash: ho6FnqARFfeawc2fVl+6U/A9evk5Ck/9UluGTSWRaEw=)
4: jEFUKY2bhw_vuBM1OshauBn8mvg.roa (hash: ZeWPCxGU+ldLXwfBechPAx21XNMieJ0auUVK9LjYs/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:c1:73:ce:81:4a:e8:7e:bb:13:11:fc:3e:9c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Validity
Not Before: Sep 7 01:00:55 2025 GMT
Not After : Sep 8 01:00:55 2025 GMT
Subject: CN=8474e7d6e555812185fa4ceb8377b2fdba6123d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:94:8d:e4:e8:de:e5:ae:38:08:3e:50:30:
be:f5:51:27:59:8f:a8:b4:31:2f:1b:34:cb:7e:e3:
e6:bd:79:a2:14:35:de:a4:2c:8b:46:1b:4b:c3:36:
5a:cb:b3:89:a4:a9:e1:9f:a3:8e:28:d1:30:d7:1a:
fa:82:e3:76:d0:81:20:57:57:97:c3:d2:9b:62:4b:
a9:aa:88:8f:e5:d9:d1:b5:1f:0c:61:40:67:24:2d:
65:24:85:14:5d:7a:af:2c:64:2a:1b:80:c1:17:0d:
3d:74:90:d7:e0:98:dc:0f:7b:b5:05:a0:10:b1:6f:
d3:a9:aa:51:05:26:38:dd:8f:73:3f:bf:44:52:07:
75:2a:11:9b:14:27:59:be:68:76:cd:6f:a8:d2:2e:
36:c3:c9:b0:fa:36:19:61:1f:b5:07:6c:94:e2:15:
1e:1f:0e:27:91:aa:aa:62:b4:09:04:05:e2:31:ae:
4a:fa:d9:94:dd:b7:18:8e:75:9e:0b:da:95:94:5b:
35:72:8d:98:eb:de:d2:6f:01:11:6d:c8:5e:74:d4:
90:b9:bb:6b:60:e0:f4:8a:c1:4d:9e:4a:f3:2a:a4:
c2:0a:9d:46:51:63:18:99:ef:2b:01:e8:63:1a:e6:
9e:92:4a:f2:d2:91:46:26:21:04:81:d8:fc:e5:77:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:74:E7:D6:E5:55:81:21:85:FA:4C:EB:83:77:B2:FD:BA:61:23:D6
X509v3 Authority Key Identifier:
keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:cd:5e:41:af:33:ad:05:5f:6e:fb:ee:4e:0c:08:14:fd:3d:
ef:89:0d:12:cd:bb:e9:69:87:fa:11:8d:f5:3a:0e:0e:39:98:
9c:a8:72:3d:f6:fd:e5:b4:05:78:96:f1:58:cc:33:41:dd:70:
5b:9d:97:96:17:31:52:33:fe:b4:50:b6:c3:5a:75:28:cd:d1:
20:b2:54:df:f4:07:13:4d:a7:1d:be:11:6f:6a:93:29:34:7f:
7b:0c:f9:9f:6c:f3:f8:5e:72:4e:1e:5e:d0:02:a1:8e:b4:6f:
20:2d:8c:12:44:45:1b:5d:86:2a:42:83:f7:a3:19:0c:16:3f:
b5:9c:40:0c:e8:f7:9a:3a:73:9f:c6:98:5b:1a:b6:5e:a3:17:
ee:8c:ef:01:61:bc:cc:f7:8f:b3:e8:99:bf:f3:f1:a0:b6:39:
77:5f:47:f2:f8:b2:5d:19:dd:66:d4:0f:dc:c2:e3:22:e9:24:
92:f1:97:b2:6c:66:30:31:ad:3f:90:33:49:96:46:e1:73:fa:
da:1d:9d:24:65:cf:35:b1:6d:12:8e:3e:c1:e4:8a:d9:5a:77:
be:f5:34:c6:d4:ab:75:d1:cb:bc:b8:1c:ec:55:d4:3f:10:78:
6a:a1:be:c9:f9:8d:26:0d:fa:d6:7b:af:9b:b6:ce:ec:e3:9e:
9c:86:13:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:58 2025 by rpki-client