Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
File: TxUpALDTI9NtlFEKsLAck_RRfIk.mft (raw, json)
Hash identifier: EPnJBY+dwyo10alI9ExJGNzvBjdhrB+HcVPRX1g4r0s=
Subject key identifier: 8F:5D:DF:AA:5E:D4:42:30:CD:B5:D9:43:57:EC:A1:22:00:36:56:5C
Authority key identifier: 4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
Certificate issuer: /CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Certificate serial: 01993047D702489028805824F71E21099E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
Manifest number: 1678
Signing time: Tue 09 Sep 2025 21:00:38 +0000
Manifest this update: Tue 09 Sep 2025 21:00:38 +0000
Manifest next update: Wed 10 Sep 2025 21:00:38 +0000
Files and hashes: 1: 8Zjvv60lC8NGP14VoQ8RNeofQIM.roa (hash: P7KtzcRE9odqg/BTLMYwDj7fh0a6LBnncSFvQDv5Bp0=)
2: FpKKPofiudOty7FxUMr6flRZ1Yw.roa (hash: 19qYKj9K4I/iMwutyl2SfY76xgKtvj/68+BwpIEN2Kg=)
3: TxUpALDTI9NtlFEKsLAck_RRfIk.crl (hash: QWkrvUE+zcxstP8dJno4ca9F0rA59OumMJ2skD1QFJs=)
4: yOx4nY5h71UsEVGCdqce7EnVtbw.roa (hash: pblfkKrPcMJNUK4hgNwzxNA61gyD6ePezh9yKZ6o3M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:47:d7:02:48:90:28:80:58:24:f7:1e:21:09:9e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Validity
Not Before: Sep 9 21:00:38 2025 GMT
Not After : Sep 10 21:00:38 2025 GMT
Subject: CN=8f5ddfaa5ed44230cdb5d94357eca1220036565c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:97:ba:45:47:61:df:e8:92:3c:9f:d6:55:
15:82:3a:d8:10:e3:ed:f0:05:cf:73:35:1c:21:8a:
6b:12:bc:03:ae:fb:d6:7f:54:d7:95:b7:e0:c9:27:
84:73:f3:33:b6:56:df:18:40:4c:17:a3:43:86:b9:
87:1b:d4:1b:fd:ed:17:63:5f:3e:41:1f:78:cb:4a:
e7:25:3f:77:43:a4:fd:e6:e0:ce:49:86:49:ce:39:
c6:a3:7d:32:05:31:92:b3:bb:ff:e3:e9:03:a2:63:
13:8b:3d:01:aa:fc:9e:16:84:03:6e:80:91:ed:49:
90:6d:15:0d:6e:63:b9:93:16:77:30:41:f2:e2:42:
ac:9e:fc:bd:c0:60:b4:fa:07:9a:6d:2c:97:26:f0:
14:85:8d:37:71:51:52:38:b9:87:21:5f:ff:c7:4d:
53:df:64:42:6d:49:1e:c9:bd:2e:7d:8f:30:38:d5:
23:c2:64:8e:6f:ba:b4:cc:f6:7e:1c:89:0f:cf:a1:
1d:92:c3:b0:ab:91:e1:39:1a:1e:eb:34:c8:c0:ed:
7f:cd:d8:ed:48:f1:9c:29:be:c4:66:e7:38:cc:16:
81:ea:00:29:00:98:68:7e:60:c0:7f:ab:95:2f:d9:
15:7e:c7:0a:6d:d9:f8:f4:6d:39:4e:6e:5a:40:e2:
55:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5D:DF:AA:5E:D4:42:30:CD:B5:D9:43:57:EC:A1:22:00:36:56:5C
X509v3 Authority Key Identifier:
keyid:4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a4:e0:a5:69:98:1c:5c:60:12:7f:be:ce:53:4c:78:32:36:
41:f9:3f:5c:0b:95:0e:a9:91:28:86:95:ac:d4:ff:44:7f:97:
48:72:7a:3d:27:05:d4:b0:e5:c4:5a:68:a4:1d:93:4d:00:28:
1a:65:df:8f:2c:bb:4b:24:50:56:c7:3e:0d:3f:70:4c:d6:77:
13:63:5c:bb:79:f5:cc:71:59:2d:e4:79:e3:0f:db:d1:36:f5:
51:1e:a4:0d:a0:1b:05:ca:68:26:5b:e6:b5:a1:10:cf:72:c4:
71:d3:5e:a3:63:5f:60:d4:41:08:36:90:ed:a8:9e:a6:17:6a:
e3:fc:25:ff:4c:15:6e:9b:9a:68:02:62:28:31:c8:d0:72:e3:
fa:2d:9f:cd:5c:49:5d:93:5b:e1:5a:5c:e6:3c:1b:93:aa:0c:
28:c0:d8:b3:3e:6a:47:36:e6:6b:7b:74:c8:b5:a4:33:56:ea:
b1:ca:2c:4d:d7:d7:6e:cf:2b:80:47:41:9d:76:be:91:09:57:
1f:cf:a1:6d:26:38:c9:09:cc:9b:aa:5b:72:de:0e:94:35:e2:
bf:a4:1e:b7:ac:46:94:fd:7f:e5:98:4c:cb:16:c3:81:5d:ea:
14:13:ca:4b:ab:bc:5c:32:11:3c:fa:b7:9a:95:7f:ec:a6:64:
50:95:0d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:35:29 2025 by rpki-client