Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
File: tl47dPyTSwkhk63tfsoB2h7xhq0.mft (raw, json)
Hash identifier: ndHvM0XoZ/Ol3RgNXMvdZfbWUtznwlQ8rvVHfq6NJ4I=
Subject key identifier: DF:35:8B:AC:43:49:AA:E9:5F:33:7C:25:DC:0C:A5:70:9B:5C:F1:1F
Authority key identifier: B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD
Certificate issuer: /CN=b65e3b74fc934b092193aded7eca01da1ef186ad
Certificate serial: 019932368A0B221FDF89AA0F296EBFC05DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 06:00:59 +0000
Manifest this update: Wed 10 Sep 2025 06:00:59 +0000
Manifest next update: Thu 11 Sep 2025 06:00:59 +0000
Files and hashes: 1: e_jdHZ9UPX8fMzUgAyqh1YUrr0g.roa (hash: z1xUWbdUskV5wcwENPFUis/izRGF4jR036hFKOsflNU=)
2: tl47dPyTSwkhk63tfsoB2h7xhq0.crl (hash: nd+lIYLl0ihu6s5uX6oCDdDcCnXFljAFxiBLHsUEns8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:8a:0b:22:1f:df:89:aa:0f:29:6e:bf:c0:5d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65e3b74fc934b092193aded7eca01da1ef186ad
Validity
Not Before: Sep 10 06:00:59 2025 GMT
Not After : Sep 11 06:00:59 2025 GMT
Subject: CN=df358bac4349aae95f337c25dc0ca5709b5cf11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5b:0c:c5:4c:fe:f3:62:4a:c2:55:85:9b:bb:
8f:63:2b:7d:4a:b1:1b:c3:af:2b:c2:9c:1b:95:73:
09:74:26:63:fc:0b:be:e2:37:fe:b7:18:ff:f4:5f:
c0:cc:0d:86:0a:fd:8e:34:ad:94:35:72:5b:e8:97:
29:33:ed:66:62:1e:d6:f9:b6:86:38:37:87:af:f7:
de:0d:44:a2:75:c1:da:aa:97:bd:74:ed:09:14:d2:
38:a0:0f:10:64:04:de:f5:46:8b:f0:81:d4:80:16:
fe:91:22:1a:ed:09:5a:8a:1b:51:04:cb:ed:04:31:
df:fd:2f:1e:97:67:fb:1b:69:7f:57:c5:15:7e:f9:
d9:5e:48:69:76:75:7b:f2:60:fc:03:a6:66:e5:ef:
95:d5:4f:f1:47:df:46:7d:93:b1:e6:9a:92:dd:db:
90:ff:4a:0c:1b:de:b8:3b:cd:07:f1:47:11:92:d8:
00:ed:57:35:8f:32:2b:85:19:bb:84:5c:8c:9b:7d:
e4:c7:70:b7:4c:63:ea:3a:fa:32:d6:8c:bf:40:92:
f0:f5:07:51:b1:3a:fc:b3:65:c4:2d:68:0a:10:20:
dd:41:24:12:64:18:9f:7e:ee:7f:1f:ab:8a:72:6a:
12:7e:dd:0a:3e:44:6d:26:e1:aa:67:ca:e0:94:b1:
e3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:35:8B:AC:43:49:AA:E9:5F:33:7C:25:DC:0C:A5:70:9B:5C:F1:1F
X509v3 Authority Key Identifier:
keyid:B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:69:ac:cf:30:fd:30:e7:16:7d:60:5f:2e:ac:04:a5:62:96:
0e:ab:da:66:03:f6:3d:5f:97:fc:cf:31:de:a3:83:18:c2:9a:
05:4c:ba:48:94:2b:b2:a8:5f:f4:40:f8:d1:55:dc:08:e9:f9:
b8:d1:e9:68:4f:4e:1d:0e:70:9a:c6:52:16:ca:b1:20:b0:5a:
27:12:77:66:3e:2b:c3:98:c6:e0:e2:fc:d8:16:75:cd:af:93:
4a:be:84:c1:a0:aa:43:2f:dc:95:4a:fd:7a:e0:54:d4:17:5c:
39:19:8f:d8:54:28:69:95:09:5d:58:5d:c5:80:fe:aa:61:5a:
5c:9c:86:82:8e:9b:83:51:4a:a1:b0:48:25:cf:54:11:b6:a5:
d1:e3:cc:37:a6:f2:fe:7d:28:dc:52:3b:d3:6d:37:d8:56:4b:
d8:4f:c8:9e:bd:c3:fc:3d:b0:4b:69:5d:95:2f:62:f5:bd:e8:
52:90:63:a3:64:1f:54:ff:3c:e0:fe:06:6f:1e:84:d1:8d:a1:
57:5f:ca:9f:0c:0a:f7:a9:b5:60:8e:02:e1:0b:6d:e1:ab:22:
a7:53:13:f0:ac:af:4e:10:11:b1:40:f0:b4:24:e7:9c:5d:3b:
32:cc:20:29:c8:2a:7e:d1:43:b4:1f:8c:64:b0:41:2b:50:59:
22:f1:64:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:19:57 2025 by rpki-client