Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
File: tpJFTBZpZIbPBx7Rjnl240BJCfs.mft (raw, json)
Hash identifier: 2WFQ4BN54SDwfjNvrTDedkTAmzdCGmRgpifSGa8Wqho=
Subject key identifier: 82:36:02:36:3D:74:C6:9F:00:00:7F:80:DC:76:EE:CC:77:0D:97:58
Authority key identifier: B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
Certificate issuer: /CN=b692454c16696486cf071ed18e7976e3404909fb
Certificate serial: 0199326D2C0425BE641320AC576CC6CD8674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
Manifest number: 0AC8
Signing time: Wed 10 Sep 2025 07:00:39 +0000
Manifest this update: Wed 10 Sep 2025 07:00:39 +0000
Manifest next update: Thu 11 Sep 2025 07:00:39 +0000
Files and hashes: 1: 5czF8Od9k1lGzWbwlN6JD9EQv3o.roa (hash: xQiXSp/PKEr54Bt774G49z92F24A1eFshYT3vR6Fw2c=)
2: tpJFTBZpZIbPBx7Rjnl240BJCfs.crl (hash: kwqGv7lmelLz/OOdqSOtL0Ek224iB6dcv85aIjnYwxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:2c:04:25:be:64:13:20:ac:57:6c:c6:cd:86:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b692454c16696486cf071ed18e7976e3404909fb
Validity
Not Before: Sep 10 07:00:39 2025 GMT
Not After : Sep 11 07:00:39 2025 GMT
Subject: CN=823602363d74c69f00007f80dc76eecc770d9758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:30:04:f5:ce:83:48:c5:9f:e4:dc:f6:3e:91:
eb:c2:e2:c2:b9:81:02:57:cd:df:f4:82:95:00:6a:
ae:20:fd:42:55:4a:69:2c:a4:a5:c5:c8:93:6f:7a:
9f:32:e9:c5:80:44:f7:ce:3e:bd:05:13:9a:0c:b0:
54:b9:ed:02:1b:fa:01:8f:ba:10:dc:ba:eb:18:3c:
0f:f8:a6:28:bd:15:3b:15:0e:6e:76:32:80:ed:d2:
96:69:dd:be:bb:aa:9c:21:cf:9d:e7:7b:ce:5f:fb:
97:41:a0:db:61:db:6b:e0:8b:0a:9e:f9:2f:a7:8d:
b8:73:42:fe:a6:e8:b0:0e:32:4d:83:97:7a:2d:fb:
f9:30:fb:fb:cd:1e:6e:84:9b:0a:21:6d:db:66:31:
54:5b:cd:88:b9:9b:92:cf:28:fb:38:c4:78:2f:e1:
28:33:2f:9a:d6:cc:ed:d4:09:a0:c5:40:39:6c:54:
33:b1:05:6a:c3:9c:e1:4e:5e:1b:ba:c7:b3:82:a0:
11:ad:33:1a:20:e3:d1:2c:5c:66:37:92:1b:79:88:
ba:69:4e:ff:c8:78:9f:46:30:5d:ab:45:1e:62:7b:
bb:ae:70:2c:70:51:b8:ea:bc:c8:46:5d:b5:e3:49:
13:5f:ab:c6:4c:6e:03:63:ed:e3:0a:fe:02:e1:24:
22:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:36:02:36:3D:74:C6:9F:00:00:7F:80:DC:76:EE:CC:77:0D:97:58
X509v3 Authority Key Identifier:
keyid:B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:75:de:bb:ac:37:d5:4c:5b:c3:04:2f:49:f4:75:00:1e:0c:
af:10:03:26:35:6a:ba:c0:63:94:cd:f7:60:17:62:01:a8:f3:
2c:e2:3b:3b:e9:96:9a:77:02:86:31:26:f6:ee:2a:12:3e:14:
25:32:bf:b9:45:b8:14:83:67:1c:3b:12:3f:87:8c:3d:a2:3e:
00:0d:d6:73:87:5c:2a:bd:48:89:25:45:75:58:69:a1:2c:92:
31:0e:9f:19:2e:c9:26:f4:1b:de:80:0a:e4:f9:dd:5c:7d:2a:
1c:50:7f:f0:eb:7e:29:ad:e6:84:55:7a:35:54:1c:6c:84:f9:
ec:9e:2e:3e:13:02:ab:20:54:9b:b3:dd:32:8c:19:43:ad:a0:
e2:6d:65:07:71:d5:b0:52:2e:8a:6e:7b:14:06:98:67:5a:52:
2e:40:ae:74:61:91:40:5c:6b:0e:67:ff:2d:c1:f0:a8:05:af:
6d:e7:d5:92:6b:b0:f5:c0:70:db:83:91:e0:de:a4:32:03:42:
ed:88:36:63:eb:06:df:67:f1:24:22:3e:cb:48:5e:eb:f2:cc:
c2:ee:da:90:d4:54:ed:05:33:b7:66:44:bd:46:03:bb:b6:30:
50:30:e9:60:9e:e2:41:21:c9:89:6b:f2:7d:39:c2:83:b8:21:
98:4d:8d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:33:42 2025 by rpki-client