Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
File: TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft (raw, json)
Hash identifier: 5yygYVidrn0AMJPEnuP7Fs+Dh1DVhUDunfxJMxRgfZQ=
Subject key identifier: E9:11:52:5B:F6:8F:FF:41:89:80:CF:D9:70:16:D5:5F:10:E3:4F:FD
Authority key identifier: 4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD
Certificate issuer: /CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd
Certificate serial: 0199239F8DBAF18A583EFF6CE597F959567E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
Manifest number: 0DCE
Signing time: Sun 07 Sep 2025 10:01:22 +0000
Manifest this update: Sun 07 Sep 2025 10:01:22 +0000
Manifest next update: Mon 08 Sep 2025 10:01:22 +0000
Files and hashes: 1: PVatpozxq2iSr5EjDz4p95PO1D8.roa (hash: jnj6J4YwXSNpdZA8cx57mMPaW12cBZG8T42Zb5JhBQ4=)
2: TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl (hash: fWrilwpl6X5O2cRoZ4D14r2CA+eC4lTwHXpEcZm41io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:8d:ba:f1:8a:58:3e:ff:6c:e5:97:f9:59:56:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd
Validity
Not Before: Sep 7 10:01:22 2025 GMT
Not After : Sep 8 10:01:22 2025 GMT
Subject: CN=e911525bf68fff418980cfd97016d55f10e34ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:b6:4f:10:c1:5e:55:56:fe:0a:4f:ca:d2:
47:63:40:e0:58:ba:5a:fd:c5:d5:51:e2:3f:e7:cb:
ed:ad:04:40:83:d4:22:fb:08:25:39:b4:b6:b0:aa:
ca:50:c4:f9:19:62:8b:b4:e1:bd:6d:bc:00:d3:3a:
ef:91:35:cd:eb:1f:08:da:43:6a:6e:28:fd:c2:f7:
18:49:db:db:e5:ce:c9:ca:e8:b5:0f:07:12:1a:e6:
60:2f:89:fb:df:d3:e1:cd:94:f5:d1:42:b4:ab:6d:
75:cc:6c:8b:d1:b0:ca:6e:5e:e4:1b:57:78:d9:66:
20:ad:90:db:c7:76:18:7c:f3:25:12:36:0e:fa:2a:
ce:28:4f:70:93:19:c5:7d:cf:56:0e:87:0c:13:4a:
9c:bb:bf:e8:0f:77:88:b2:bc:01:e6:c0:11:2c:01:
7c:7e:b1:f5:38:28:6c:b7:70:e0:32:91:12:3e:07:
4d:37:6c:73:17:a5:6d:ba:09:05:92:4c:4b:32:f4:
51:3a:f7:7a:0a:69:95:04:6e:05:d4:30:dd:5d:1c:
e9:7b:d0:e0:a2:4a:e4:99:ae:a1:5d:85:e0:dd:68:
08:39:b7:d2:51:24:6f:b0:f8:fa:38:6d:27:12:38:
64:ff:4f:9e:36:0a:56:76:3a:97:c2:fe:c7:f5:44:
fe:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:11:52:5B:F6:8F:FF:41:89:80:CF:D9:70:16:D5:5F:10:E3:4F:FD
X509v3 Authority Key Identifier:
keyid:4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ab:c5:10:10:c6:c3:a7:48:06:cb:42:23:49:e4:11:fc:56:
37:a2:56:e8:4f:0f:82:43:48:f9:57:cd:04:7c:ab:e4:e4:57:
3b:59:84:53:98:d3:29:79:3a:43:5d:3d:48:67:02:28:09:4c:
65:7f:38:c7:32:c3:15:5d:b8:1d:29:c8:d6:e6:61:d2:b9:f0:
54:3d:23:18:d9:b8:d9:5a:14:65:97:47:c2:9e:6f:95:03:a2:
0c:8a:f9:25:d0:e5:46:26:5a:05:ba:3f:66:df:49:5b:c2:8c:
32:ff:1c:cc:83:ee:38:70:8d:f7:d1:ab:21:54:2d:99:6b:40:
71:ab:a3:c4:95:24:3e:07:a8:e3:05:1f:3c:aa:09:81:73:40:
c8:94:05:23:28:76:60:41:60:c5:00:3f:94:0d:f8:b4:d5:37:
1e:79:14:82:37:9d:4d:c0:3c:e5:0f:65:b3:28:b4:3a:63:10:
73:ae:78:c6:d3:34:c3:42:0e:41:2b:52:9c:bd:1a:a7:8f:d9:
4b:d1:13:69:eb:cf:78:40:9d:ea:ff:28:97:00:2c:d2:3f:61:
6d:a7:6a:5b:b1:e0:11:7c:63:0a:74:25:8c:f0:94:20:fa:88:
75:19:31:a1:8a:ed:04:b0:e5:cd:68:d6:ab:12:c8:9c:52:dd:
7f:94:7f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:23 2025 by rpki-client