Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
File: TWh9higIIltFn6OZ5l-KBpRpq6M.mft (raw, json)
Hash identifier: cRos3TIytelNAMkbH3zP/rd8qHOxVQIQKI4CEHfZPzc=
Subject key identifier: D0:FA:7B:E6:AC:83:5F:48:32:08:A5:75:F1:94:19:A2:0D:C8:C3:15
Authority key identifier: 4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
Certificate issuer: /CN=4d687d862808225b459fa399e65f8a069469aba3
Certificate serial: 01992255DBB36DF1059D25974931C6AE5D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
Manifest number: 1602
Signing time: Sun 07 Sep 2025 04:01:16 +0000
Manifest this update: Sun 07 Sep 2025 04:01:16 +0000
Manifest next update: Mon 08 Sep 2025 04:01:16 +0000
Files and hashes: 1: TWh9higIIltFn6OZ5l-KBpRpq6M.crl (hash: tZbEC4sq31P9PsPVv3aYJjgxB0yvKUr/BIb2yy1g/Qk=)
2: yj8S8MOtSmVKNjXl11Yr8esDgtY.roa (hash: px/AqUdCFaeUdcOlWlEpkaK3sSjZNzpfw2t/zU4ncMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:db:b3:6d:f1:05:9d:25:97:49:31:c6:ae:5d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d687d862808225b459fa399e65f8a069469aba3
Validity
Not Before: Sep 7 04:01:16 2025 GMT
Not After : Sep 8 04:01:16 2025 GMT
Subject: CN=d0fa7be6ac835f483208a575f19419a20dc8c315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bc:d3:31:6f:e9:84:56:d6:40:d5:a9:c7:e9:
4c:fd:5b:fa:65:27:b6:90:b5:93:eb:c0:7f:38:9e:
ab:04:af:82:fa:b1:af:cf:97:31:80:a5:de:cf:b1:
b7:fe:da:6b:0e:b7:db:df:88:3c:9c:19:1b:84:1a:
9d:ad:a8:6b:36:c4:2c:a5:65:d9:e6:5a:df:00:f8:
f8:b3:b9:40:c7:b0:3d:bc:cf:53:1d:ab:f4:9a:28:
18:43:85:fa:3e:f8:2b:11:c2:d2:86:fd:f1:79:0d:
c6:3c:c6:de:a1:be:26:ed:f6:88:d8:d1:11:b2:3a:
e6:b5:fb:82:93:6c:35:47:31:ba:9d:ca:91:79:55:
c4:cd:21:eb:fa:f9:61:5f:82:34:3e:89:22:b4:d3:
45:56:2f:98:56:f5:f1:21:01:69:f5:74:75:37:55:
0f:7c:be:34:48:91:fb:5c:0c:1c:4a:ff:3d:44:ac:
a5:6a:92:16:c8:ab:2e:a6:7b:8d:7b:90:9b:6f:00:
7b:03:0a:e4:0e:2d:84:96:f8:b5:f6:c8:99:d5:66:
d2:1b:09:a6:18:6f:ad:4f:2e:9b:21:2f:83:27:a4:
fa:02:2e:49:df:12:44:92:7e:d5:72:d1:07:b6:f5:
d8:73:7a:10:cd:79:d6:f0:fb:02:6b:56:aa:e3:f2:
32:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FA:7B:E6:AC:83:5F:48:32:08:A5:75:F1:94:19:A2:0D:C8:C3:15
X509v3 Authority Key Identifier:
keyid:4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:bb:15:5b:58:9a:2b:6c:41:0f:22:38:a0:a8:e2:51:e8:17:
8b:29:db:6f:88:37:ee:7d:dd:43:1e:28:54:7a:da:9f:17:31:
70:21:0e:88:43:91:8d:8f:37:09:36:2c:70:90:c2:aa:72:ee:
e5:29:82:30:ae:2c:d8:4c:b5:3f:32:43:71:b2:3b:88:31:8d:
44:a6:7d:7a:cb:81:75:79:7f:e1:6b:4e:45:d0:3f:83:71:ad:
cb:22:9a:d3:86:53:23:3d:a9:08:1b:c9:6d:e3:4e:4c:a6:eb:
e6:10:0c:8c:25:57:fd:9b:6c:27:38:d1:bd:db:6c:48:a0:ac:
93:ea:35:a5:82:90:9f:a7:cd:e8:16:ff:f1:b9:6a:df:0d:84:
b9:bf:07:a3:7f:ca:73:f5:22:5e:46:70:34:8e:61:69:6a:be:
72:dc:c4:35:a1:6e:4b:61:d0:91:f5:e9:e0:83:dc:9e:94:66:
3e:55:03:44:c7:df:fe:70:ec:02:f0:a3:36:24:7a:39:27:23:
8e:64:8d:79:d8:d9:08:74:58:1a:76:43:6b:d3:e6:fe:25:ce:
d0:2c:60:e4:cf:6b:d4:f8:ac:d0:65:b6:a2:4b:e9:7f:6f:aa:
15:18:0a:ef:1b:18:ea:0f:4a:a2:59:76:bd:b1:62:99:7a:90:
67:66:89:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:58:23 2025 by rpki-client