Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
File: TkwTiahJ713MuDA3A7iYyR5j0U8.mft (raw, json)
Hash identifier: b8iXadDUh8j7H+yaZI19CLGPI7V6N15q2I4ZtQOtoE4=
Subject key identifier: FE:F8:3C:F4:72:E1:55:DA:A5:5B:D4:04:C9:F0:A6:CF:D7:70:54:DA
Authority key identifier: 4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
Certificate issuer: /CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Certificate serial: 019950E5458B7E10C88527EFD1CE68879561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
Manifest number: 0F85
Signing time: Tue 16 Sep 2025 05:00:26 +0000
Manifest this update: Tue 16 Sep 2025 05:00:26 +0000
Manifest next update: Wed 17 Sep 2025 05:00:26 +0000
Files and hashes: 1: TkwTiahJ713MuDA3A7iYyR5j0U8.crl (hash: nN2LqZIRA+vFGS30Vc5EFWwVOVjkHzUn9PMKm/r/saA=)
2: Y2AwHZ4LjgCyZ7c3VA39uJ1uOJA.roa (hash: jN16HvDKq8wIqjLIVTWw0neRTt/pe6lIdR9PV+gdOvM=)
3: oslVCzjJDktKYJryYSyNdvUnSkk.roa (hash: SorYVglRqEFAzZq8qsgmev36Xx5W3U58FYVpLFp4hYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:e5:45:8b:7e:10:c8:85:27:ef:d1:ce:68:87:95:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Validity
Not Before: Sep 16 05:00:26 2025 GMT
Not After : Sep 17 05:00:26 2025 GMT
Subject: CN=fef83cf472e155daa55bd404c9f0a6cfd77054da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1d:57:d5:e3:36:f7:88:3f:08:9c:3b:91:83:
f0:07:bf:49:0d:36:3c:34:7a:4d:06:ca:7c:32:55:
0e:63:9c:8d:ec:ca:aa:b4:3a:a6:72:9b:b9:fa:ae:
6d:af:24:c5:c2:16:ff:86:21:b9:b7:48:1b:16:4d:
fd:82:16:66:da:74:4b:4d:70:15:46:3a:36:7b:30:
2a:82:02:7c:5c:ca:75:d3:0d:6c:a2:db:b1:12:23:
b3:d6:66:7e:67:99:06:1a:a7:7a:1d:fd:10:6d:bb:
76:c8:3a:f1:c7:55:d9:00:4b:0a:98:e1:dd:69:5c:
d4:4a:39:43:7d:76:47:85:19:53:18:7c:06:28:48:
5b:2c:c7:69:3b:32:55:95:11:4e:9f:9d:9d:a7:21:
55:b4:ed:8f:85:f1:05:6e:77:e6:08:15:75:2d:7c:
6e:d1:2d:1d:3d:e0:f5:45:3f:48:02:58:dc:24:10:
2b:7d:04:78:80:09:98:c8:c4:4a:02:b5:13:60:2d:
24:66:2a:75:43:ec:31:0a:dc:bf:7f:c7:f6:a8:64:
e3:a4:e9:03:d4:2c:05:6e:fd:6c:d9:16:5a:02:fb:
ac:a8:10:78:7d:fd:24:9a:b4:9d:df:09:ce:0e:43:
8f:e4:be:ff:cd:8d:19:c9:fa:cb:56:1a:69:e4:27:
74:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F8:3C:F4:72:E1:55:DA:A5:5B:D4:04:C9:F0:A6:CF:D7:70:54:DA
X509v3 Authority Key Identifier:
keyid:4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d9:17:3a:c6:68:27:cf:6c:43:45:8a:e0:80:28:46:ad:c9:
6f:82:71:73:3a:b2:01:bb:e9:15:1d:63:b6:d1:d7:b6:c5:77:
72:f4:4b:e6:4b:74:90:04:27:cc:e7:ae:59:82:78:bc:c8:7e:
c4:66:39:4c:d3:12:a2:d7:6e:96:cb:fd:ef:0b:84:01:16:14:
7a:76:1e:13:1c:12:1e:70:1a:27:28:39:ca:36:f6:b6:f0:4f:
e3:c2:41:ca:22:ee:c9:e8:d6:7c:6a:e6:a6:b9:a9:e7:e4:2c:
fc:c2:f2:66:fb:de:2e:a2:90:8e:8f:56:11:d0:a2:be:e7:c4:
40:49:7f:63:16:10:bd:ab:06:d4:1c:f7:0d:36:8e:6c:8b:ef:
0c:b4:84:92:09:e1:30:a1:db:55:28:9d:01:88:dc:d1:41:aa:
cd:38:52:52:71:08:42:35:f9:cc:05:3d:bd:55:90:8f:73:c9:
0d:3e:51:da:51:54:0a:db:7e:c7:06:4a:a2:ad:09:7e:85:d6:
dd:c6:b3:13:5e:b5:05:a1:4f:26:40:62:20:1d:c5:bb:5b:84:
aa:14:d4:a8:c6:0f:76:7e:8c:0c:2b:88:c7:43:55:8e:9e:a3:
48:9d:93:16:fa:7f:9e:79:1c:1f:f4:34:97:66:33:4f:a2:41:
a1:63:50:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 06:08:59 2025 by rpki-client