Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
File: tFBrzj9-GuOn4sua0gXEzfsC3bU.mft (raw, json)
Hash identifier: 3kbYsflSfcrQESFPj1a9pptpH4OSUUFYbzGyimzTedA=
Subject key identifier: 9F:47:A2:81:02:C3:9F:34:56:45:D3:D8:31:8E:3B:65:B5:75:7E:96
Authority key identifier: B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
Certificate issuer: /CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Certificate serial: 01995A8D4E1B8619DB9AE008D4A8A89E4787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
Manifest number: 159C
Signing time: Thu 18 Sep 2025 02:00:33 +0000
Manifest this update: Thu 18 Sep 2025 02:00:33 +0000
Manifest next update: Fri 19 Sep 2025 02:00:33 +0000
Files and hashes: 1: Kd39P6546NpKkTMGeJ0Di1Tm-dg.roa (hash: whkcH/ShQkUqu7p697My2+ymwjNji4wGQLqM0wmvkYA=)
2: To-uv46-3XmiPKg6c_GrFJdFcf0.roa (hash: SmXcvoxvyvRm/BeOwyu47J7sKwYa3+1oFy5V9rexUqQ=)
3: tFBrzj9-GuOn4sua0gXEzfsC3bU.crl (hash: d+uKhw4a92o8D9QmtTrp/GYf9lBXzo1M3VYV54EMEaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5a:8d:4e:1b:86:19:db:9a:e0:08:d4:a8:a8:9e:47:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Validity
Not Before: Sep 18 02:00:33 2025 GMT
Not After : Sep 19 02:00:33 2025 GMT
Subject: CN=9f47a28102c39f345645d3d8318e3b65b5757e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2a:66:e1:78:98:39:28:9e:10:55:99:be:59:
2c:4d:e2:28:eb:69:d8:6d:54:e7:0c:46:fd:9b:44:
4e:41:50:d2:6e:b0:f0:13:20:81:2a:d6:b2:ff:c2:
ca:c9:af:ec:7c:7e:0c:3d:c3:7f:ef:4e:4d:34:bc:
13:e2:0a:f2:05:88:fb:d0:1e:2d:19:47:89:99:e9:
a2:66:b6:6a:5c:a6:c6:35:87:bc:c6:1a:a6:56:fa:
c8:f2:21:b8:29:35:f0:ec:28:91:33:13:32:d6:21:
a1:0c:f9:d1:e4:67:82:0a:ae:d7:3a:dd:43:08:2b:
87:e8:7d:e1:4e:1c:26:b0:60:1f:2e:0e:47:48:e2:
8f:07:e0:8e:55:c6:9a:5e:3c:4b:ea:00:fa:8c:25:
41:84:95:4c:5f:e8:4c:ca:cc:7e:e1:12:26:1e:e4:
d0:bd:fd:3b:9d:e6:4a:29:9a:ca:c3:ca:44:37:9e:
60:45:66:10:53:0f:cf:97:f6:c7:ca:ed:be:d2:14:
88:bb:d8:43:e7:0c:f6:b8:9f:16:68:ad:7a:fa:c5:
63:b2:3f:52:04:1b:2e:82:ba:cd:d4:7f:d2:b0:dc:
4a:47:06:e5:1e:03:23:3d:ba:11:fa:37:3a:d6:ed:
02:52:4c:fe:67:b3:40:bb:ff:c6:ad:92:a3:d2:08:
f9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:47:A2:81:02:C3:9F:34:56:45:D3:D8:31:8E:3B:65:B5:75:7E:96
X509v3 Authority Key Identifier:
keyid:B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3b:c8:08:e8:53:38:c2:47:24:b1:45:18:2b:ed:cd:5d:19:
64:ce:6c:3c:7a:ab:5b:cc:32:75:4a:c1:69:30:88:31:13:aa:
68:47:39:59:da:ff:3d:0e:6b:74:cc:b4:de:b5:de:36:4b:ea:
a9:c3:47:c1:df:a3:54:11:c8:25:5c:52:bb:92:8c:ca:96:cb:
a8:46:89:c2:e3:f5:55:ba:80:9d:02:ac:3f:74:3c:e1:22:e1:
6e:b7:15:35:bb:25:f3:2f:5b:28:f8:39:29:c6:11:b1:40:87:
21:d9:c3:05:dd:b6:b2:c3:19:1a:2f:a2:87:8e:a6:5c:2f:49:
79:72:fb:49:b8:f6:43:e8:77:8b:2e:2a:e0:7f:6f:10:ea:f9:
3e:b3:94:ce:26:ad:ff:4c:1f:89:20:85:1c:78:47:5d:7d:c6:
30:2e:f1:76:b5:e7:12:63:f2:ff:71:81:b4:a0:7f:6b:12:9b:
b7:af:3f:da:10:46:8a:5c:7b:20:ee:96:17:e6:02:8a:ba:48:
cd:ec:00:0a:68:53:f5:fc:46:36:6f:a0:8a:1c:b1:5a:cf:9d:
ee:56:26:a5:84:4b:32:ff:7f:f9:c0:6f:04:08:fa:0a:cb:46:
79:d1:99:dc:40:67:a0:b0:fe:52:c1:53:cf:73:97:dd:06:f9:
e0:b7:1f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:59:55 2025 by rpki-client