Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
File: tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft (raw, json)
Hash identifier: MKV5syAUIBgkty8UWqunO70UygcIYSstjz5qOpMR00I=
Subject key identifier: 72:13:06:03:FA:5F:E7:F4:4E:66:A1:BF:17:D2:B8:FE:15:6B:B5:20
Authority key identifier: B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
Certificate issuer: /CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Certificate serial: 0199180A08D7B22FBF9C8A32E0CC431D86BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
Manifest number: 08B9
Signing time: Fri 05 Sep 2025 04:02:14 +0000
Manifest this update: Fri 05 Sep 2025 04:02:14 +0000
Manifest next update: Sat 06 Sep 2025 04:02:14 +0000
Files and hashes: 1: tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl (hash: srd5+cQflxNp2oibs2fzrkT8XO20mcRkvXpZjJ52Bhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:0a:08:d7:b2:2f:bf:9c:8a:32:e0:cc:43:1d:86:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Validity
Not Before: Sep 5 04:02:14 2025 GMT
Not After : Sep 6 04:02:14 2025 GMT
Subject: CN=72130603fa5fe7f44e66a1bf17d2b8fe156bb520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8f:85:cd:5a:2f:c4:4f:76:d5:22:49:b9:38:
9f:d7:a8:00:20:65:41:cd:8d:df:4c:eb:0a:fd:8d:
e1:3e:8c:c8:05:83:7c:2a:0c:e3:75:3f:94:4e:54:
c2:a3:d4:16:35:d6:59:34:5a:ec:70:3d:81:20:0e:
e8:bb:39:fc:7b:b9:17:dc:f8:4b:be:0c:96:91:ea:
86:36:32:58:f4:47:ed:e8:1b:c5:3a:2f:43:08:60:
d7:7c:57:18:b7:d3:56:9d:be:94:11:8a:9a:a1:55:
bf:19:a0:8a:2b:51:fd:31:be:6f:98:58:ff:97:0f:
36:36:08:d8:a9:13:24:be:cd:38:a6:15:c0:89:73:
b3:33:fa:fb:39:85:7a:af:dc:76:8d:1b:51:5e:0c:
af:47:a4:f5:8e:9f:20:4b:2a:67:2b:77:74:61:e5:
b5:62:84:ea:43:d1:f9:1c:b5:bd:c1:a3:85:77:eb:
34:f7:f0:2b:bb:4d:82:98:1e:71:5f:83:ad:ba:05:
a8:8f:f7:f8:89:19:9f:49:51:99:4e:f6:10:81:6e:
ab:21:ac:9b:e5:07:93:99:0c:9a:da:e4:c1:ec:82:
2d:8a:33:11:7b:f8:f1:24:5f:9f:cb:4c:b5:cb:c7:
15:aa:ec:0d:80:a3:82:6e:ed:ab:d3:e7:52:57:af:
22:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:13:06:03:FA:5F:E7:F4:4E:66:A1:BF:17:D2:B8:FE:15:6B:B5:20
X509v3 Authority Key Identifier:
keyid:B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:13:20:a6:a3:d5:d2:23:32:7b:dd:30:3d:31:ce:56:9a:8f:
c9:a5:8a:64:2b:69:9b:61:44:75:9a:83:cc:3d:d5:0e:53:f8:
12:2b:06:da:d1:21:15:c6:01:68:fb:44:09:58:a0:b1:ce:54:
7d:4d:9e:d6:96:fb:a9:9b:a2:ff:66:ad:73:13:a8:93:98:19:
ce:61:03:47:ca:60:62:3d:03:62:43:c9:d2:c2:c4:69:6c:05:
e4:ff:bc:36:69:53:9e:e5:58:c6:98:5f:21:c2:e2:84:78:ca:
de:2e:fc:7e:2e:ee:76:c7:e4:10:11:46:31:3f:54:14:20:45:
b4:d6:09:01:28:dc:95:f9:2a:08:2d:9c:f5:d5:d7:98:c6:fd:
08:53:02:d7:6d:ec:fc:1e:8c:78:30:2d:d6:d9:3e:a6:2d:eb:
df:d1:2c:22:d9:85:5a:3b:43:22:27:c9:10:9d:54:f8:16:ec:
25:75:99:b8:79:e9:a8:3d:6e:3b:c7:22:e8:0e:16:97:54:b7:
c1:11:d3:a6:9d:43:5f:a6:e0:72:08:d3:1c:ae:18:9c:2d:97:
be:32:eb:97:d9:57:b7:31:3c:15:a5:0e:03:1b:c9:b9:4e:68:
5a:e6:5f:2f:cf:aa:97:79:a1:cb:88:c8:ee:9e:b5:0b:21:9e:
fa:2d:88:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:34:06 2025 by rpki-client