Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
File: TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft (raw, json)
Hash identifier: Uf42B/2X8rdzHEt8yHQiavisPy8P9j4CCpo0AM3lItE=
Subject key identifier: C9:BD:A1:D0:F0:B1:9E:E2:3D:30:B6:A4:C7:7B:06:7A:1B:A2:79:63
Authority key identifier: 4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
Certificate issuer: /CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Certificate serial: 019922FA2F3F367C169BBEEF2991AD05CDF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
Manifest number: B6
Signing time: Sun 07 Sep 2025 07:00:45 +0000
Manifest this update: Sun 07 Sep 2025 07:00:45 +0000
Manifest next update: Mon 08 Sep 2025 07:00:45 +0000
Files and hashes: 1: TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl (hash: fsJsfNBkuxFMg6QF/4/3iAAt4JR6+okggECr/DC2/Lw=)
2: Wkxvq3ZiPl0qv1OLcV1kpa4Vvnw.roa (hash: S6LXrHLg6p9w4lwlyU+7OXuh80963B2E8AzibJIQL8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:2f:3f:36:7c:16:9b:be:ef:29:91:ad:05:cd:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Validity
Not Before: Sep 7 07:00:45 2025 GMT
Not After : Sep 8 07:00:45 2025 GMT
Subject: CN=c9bda1d0f0b19ee23d30b6a4c77b067a1ba27963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:18:6e:63:39:74:2a:5d:f7:f1:19:d4:3a:ce:
3b:e6:b1:93:1a:33:ec:2f:61:3d:c0:71:ec:82:1a:
9c:74:c2:ed:d5:c0:d4:af:d7:90:40:38:72:8d:cc:
ab:82:0e:d5:94:b6:e0:76:89:73:64:a3:45:71:12:
64:c9:f2:77:ba:fc:31:7b:75:ca:a4:ff:7a:04:43:
da:ef:e8:46:5d:2c:80:95:f9:01:aa:61:67:3a:1a:
98:b0:ca:1a:d6:2c:cd:49:4a:17:6a:bb:da:2a:8e:
68:32:9d:c2:73:7f:7c:01:b9:8a:1d:02:e3:fb:b8:
bf:0d:c8:32:a0:5d:15:d0:02:03:c4:07:c1:9b:dd:
d0:af:4b:4b:b7:e4:21:17:c7:a5:ff:12:38:75:78:
4f:f9:5b:aa:5a:e8:98:96:8d:30:dd:e5:ec:b1:06:
51:fd:f2:fb:a0:18:46:6e:81:b9:6f:25:7e:df:08:
1a:bf:9a:56:91:ea:1c:51:f8:37:37:de:cc:fe:3c:
1f:95:15:d3:f6:23:8b:8e:24:05:14:30:8b:17:54:
d0:aa:63:06:74:b6:81:43:e2:30:52:0e:16:41:8f:
2d:82:48:88:72:79:e2:6c:6f:e7:c9:b7:6a:61:4c:
53:ed:d9:96:83:fe:1b:ec:7b:6b:02:9d:3a:45:0c:
c9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BD:A1:D0:F0:B1:9E:E2:3D:30:B6:A4:C7:7B:06:7A:1B:A2:79:63
X509v3 Authority Key Identifier:
keyid:4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:35:0c:c0:ce:f7:4d:dd:67:bf:91:1b:7e:36:d2:2a:2a:70:
d7:c5:e4:30:d1:06:9d:fc:a7:46:76:9f:1c:74:b5:7d:eb:0c:
80:52:d3:16:cb:e6:fc:af:97:b4:74:2f:5e:45:ec:65:02:3e:
9d:4a:6b:74:15:36:51:91:d1:1c:61:82:f5:c6:35:c2:d7:9f:
4c:b8:97:9f:0e:64:43:91:d7:13:64:dd:42:44:31:dc:2a:e9:
e5:25:36:01:c0:b2:ae:98:67:02:e5:23:77:16:9e:96:bc:b0:
49:fa:32:03:b9:c6:05:2c:55:ce:4a:09:08:c8:77:f4:0e:2e:
8a:7a:05:c6:ff:e8:e1:cd:4d:67:9e:94:e5:b8:51:5f:c3:88:
0c:d7:f9:d3:c6:2a:15:f3:86:61:4d:49:3d:97:d7:78:e3:90:
05:6b:7c:00:94:66:ad:30:a5:1c:fb:2e:03:0d:ea:9d:76:58:
ac:d7:c8:d8:f1:bc:24:cb:36:c1:d3:49:d8:bd:97:c2:4c:8a:
02:20:f0:fe:d0:a3:37:10:46:b5:5f:b0:81:f2:e0:7d:1b:31:
fa:81:b1:3f:68:f6:b7:bd:17:d8:7b:ab:a2:bc:2c:ff:ad:f9:
c7:be:6a:c9:8f:f7:21:9c:c4:e2:49:3d:89:89:81:a8:d9:ea:
5e:ab:60:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:39 2025 by rpki-client