Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
File: 1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft (raw, json)
Hash identifier: 8cZx79xDHJgtDdsBQMvl7EVivBw50il9s/+elR+AXkc=
Subject key identifier: 60:46:59:AB:15:13:87:22:F3:6D:13:91:19:E0:20:7E:D9:58:94:95
Authority key identifier: FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92
Certificate issuer: /CN=fad92323d22b44275dcecd4de295b44794623e92
Certificate serial: 0199221EAC5FA5289BFF5DE6E1CC63491EDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
Manifest number: 0D47
Signing time: Sun 07 Sep 2025 03:00:59 +0000
Manifest this update: Sun 07 Sep 2025 03:00:59 +0000
Manifest next update: Mon 08 Sep 2025 03:00:59 +0000
Files and hashes: 1: 1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl (hash: mMbzsfziaR/ZdSBv+oh9HDWfmu1qA4D5rCtWSC8Pu0c=)
2: abjDTRVBx93z2E7sN_HQNKnGE2A.roa (hash: yz4j9HyamSJCRl3OAqF2NjSGl0kugENBZv6tnB8JfMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:ac:5f:a5:28:9b:ff:5d:e6:e1:cc:63:49:1e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad92323d22b44275dcecd4de295b44794623e92
Validity
Not Before: Sep 7 03:00:59 2025 GMT
Not After : Sep 8 03:00:59 2025 GMT
Subject: CN=604659ab15138722f36d139119e0207ed9589495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:4f:f2:1c:94:9e:6a:15:6e:84:63:3d:43:
3d:2c:09:62:e2:b1:8f:20:62:e7:5f:49:40:83:48:
c5:51:70:ce:bc:67:19:9b:49:3a:5a:67:6f:cd:17:
bc:fd:77:ab:6b:ac:75:77:9c:8a:96:ce:8c:70:59:
d9:15:0f:10:45:84:67:3d:f6:96:69:32:2e:9b:6a:
cd:a6:37:30:8c:20:78:46:0a:7e:c3:24:54:66:ea:
82:ee:ce:03:09:12:e4:3d:c4:63:5b:f1:51:98:43:
19:c2:fb:34:85:e4:57:a0:e9:b1:93:74:46:10:5c:
73:19:db:5e:7f:96:09:62:eb:be:9e:89:91:26:0d:
24:2f:99:c7:e2:8b:ee:9d:2a:12:a8:39:5e:84:88:
b9:2f:d1:27:75:be:e4:32:ed:82:0c:7c:86:25:96:
d3:a5:6e:25:83:4c:ba:29:8e:0f:47:d1:e8:2e:b4:
57:d4:c7:69:7e:04:b1:be:98:19:37:73:f5:d0:67:
e2:69:34:8e:7d:a8:46:15:a3:7e:19:c8:31:2c:48:
8c:34:e2:49:f2:08:dc:9f:1f:80:ec:2c:39:10:2a:
d5:90:70:da:8d:ef:2d:3f:ca:16:1c:b3:1b:7f:a3:
49:07:7f:e6:19:3c:41:57:0e:c4:bd:06:bf:4e:ea:
65:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:46:59:AB:15:13:87:22:F3:6D:13:91:19:E0:20:7E:D9:58:94:95
X509v3 Authority Key Identifier:
keyid:FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:27:73:ce:6f:c6:c6:20:a9:5c:8d:41:41:c8:5f:1e:c0:ed:
d2:bd:5e:bc:b4:68:56:1e:71:66:8a:cf:8a:57:c5:d5:95:a6:
e5:26:bd:3e:78:35:39:6c:a7:64:c5:34:1c:2f:7b:9a:db:2d:
96:61:41:57:8f:a2:47:c8:df:0f:4f:c5:65:c3:42:09:b6:97:
48:24:eb:c5:fc:56:de:95:32:00:84:f3:85:99:15:43:9a:87:
ce:24:5c:17:52:0e:09:bb:2e:a5:24:d2:1b:95:f1:b3:90:75:
42:10:83:2b:b0:ef:a6:3d:47:f5:d1:5d:06:ac:c6:ff:69:ba:
ee:7e:18:a0:ed:e5:74:29:a9:3a:8d:ce:c0:1a:2e:ab:65:0f:
28:67:59:62:61:79:55:f2:0a:e4:ea:82:76:fd:b6:90:1e:3f:
3d:f2:8e:56:c0:86:2d:b5:04:c4:ed:be:3c:32:82:e6:85:3f:
50:60:d7:fd:3a:6e:19:0d:03:cf:b3:58:34:e5:3e:73:fa:d2:
64:33:06:67:0f:57:e7:bc:61:31:4b:c2:62:1b:9a:f0:f0:a8:
f7:89:ef:00:20:52:9d:bd:f2:a6:a9:b3:9a:26:08:dd:d3:0b:
b8:a5:4a:a5:b2:1f:78:90:5d:ea:49:0e:9b:37:30:70:5f:37:
15:4c:c3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:32 2025 by rpki-client