Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
File: tn8bh-Z1L0VDm4UozJaLR3CloPs.mft (raw, json)
Hash identifier: oq2sFNW2j6HSo4Nj7rJNB+kXT9MSfOmX/D+DfBOFf1c=
Subject key identifier: 81:25:57:F7:25:8D:0D:59:D3:B2:41:A2:7E:15:8C:F2:49:BF:FA:69
Authority key identifier: B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
Certificate issuer: /CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Certificate serial: 0199375C5224999005361A96217211E5989F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
Manifest number: 167A
Signing time: Thu 11 Sep 2025 06:00:21 +0000
Manifest this update: Thu 11 Sep 2025 06:00:21 +0000
Manifest next update: Fri 12 Sep 2025 06:00:21 +0000
Files and hashes: 1: kYfhtSfEKW3P-62E9GiF_Ua9EUo.roa (hash: p1no5bz1+uk9Sv3KCtgs/QuEn0taiRhnvBxPn7m9ACY=)
2: tn8bh-Z1L0VDm4UozJaLR3CloPs.crl (hash: P5NS5j2UQOkSbY7KP4L3b5A+0lI7SoA9QPoCFT4RkZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5c:52:24:99:90:05:36:1a:96:21:72:11:e5:98:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Validity
Not Before: Sep 11 06:00:21 2025 GMT
Not After : Sep 12 06:00:21 2025 GMT
Subject: CN=812557f7258d0d59d3b241a27e158cf249bffa69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bb:00:9c:30:e3:a9:9a:c5:0f:c7:a8:9c:1c:
c1:7a:91:fb:a5:7f:d1:d8:a8:38:68:0e:14:55:85:
41:ff:e5:90:bc:2d:c5:be:05:c6:15:57:fa:55:1c:
94:6d:f4:d9:01:65:96:45:43:4d:f9:ec:83:b1:ec:
bb:7d:a9:04:f7:66:61:73:4a:e9:7b:43:48:a6:d6:
64:ef:d0:7f:db:9a:8b:f8:9f:56:34:fe:31:b7:de:
9d:af:e7:41:d8:e1:1f:c0:64:ba:9e:b2:66:80:d7:
64:cc:c5:1b:16:50:35:ed:f6:4e:ea:6c:7d:cd:cf:
35:6b:86:40:57:3f:30:99:4b:22:51:7f:8c:a5:7d:
3e:0b:78:6f:7e:da:ef:01:80:84:61:93:30:50:5d:
cc:f3:7a:f5:2c:e1:0e:d8:87:85:b7:5a:fb:52:34:
50:6d:6b:cb:1a:61:3e:39:bd:de:58:c0:b8:7d:bd:
3d:fc:13:e7:aa:90:7a:69:f3:25:c2:ea:ba:07:6c:
f0:ba:0d:c2:4d:d9:01:74:86:b7:3a:2f:f2:1e:fc:
77:b7:25:4e:0b:fc:a1:81:d6:5c:13:83:1b:8f:7c:
50:a0:19:72:c9:03:88:64:d1:52:4a:73:83:81:57:
c5:07:d3:2d:58:30:3f:1c:b4:98:be:3b:2b:e0:f6:
4b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:25:57:F7:25:8D:0D:59:D3:B2:41:A2:7E:15:8C:F2:49:BF:FA:69
X509v3 Authority Key Identifier:
keyid:B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fc:f2:d5:a3:25:57:2a:d9:1b:b6:a5:8b:02:bc:35:5c:a2:
2a:68:86:86:c8:c9:77:e9:99:41:e7:2b:bf:c7:a4:34:bf:27:
58:e1:3f:39:ce:9b:5a:05:94:77:86:81:9b:74:cf:a6:fe:a8:
8f:a8:5a:a0:7e:57:30:7b:e4:3f:ca:49:ab:d9:76:a7:6d:b7:
18:08:59:03:55:81:0b:9a:14:a7:83:52:ca:14:76:b8:e6:4e:
23:9b:45:08:a1:8a:b0:5b:83:62:fa:c2:39:f5:77:f1:1d:94:
db:fc:a5:b0:c4:5d:f4:97:a0:ad:ef:b0:39:5d:41:0b:5f:25:
dc:1b:1d:28:42:88:4e:b4:15:86:29:f8:a7:26:87:dc:85:21:
18:cc:74:dd:53:5c:b0:b0:1e:a3:ce:79:59:4a:c6:6b:9f:57:
1c:01:32:14:66:00:84:55:e7:56:2a:84:a4:c7:f4:bd:c4:c6:
7b:16:17:1f:40:10:ef:a2:65:06:4c:72:f6:c2:1b:b7:f9:b4:
e3:f7:55:1a:70:63:3b:d9:00:c2:c7:1c:4d:5d:1e:7b:09:89:
43:06:f9:40:e4:21:8b:67:8d:3a:6a:1c:41:b4:e0:5b:2b:32:
d0:84:bd:72:23:77:c0:19:e0:e1:49:80:00:31:9c:a2:fe:7b:
d7:0c:1c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 14:00:13 2025 by rpki-client