Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
File: TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft (raw, json)
Hash identifier: JtsJQ9/jGt0Kuu5Qs2jgKJE97gzqrGKZVSZxiiBPydY=
Subject key identifier: CB:01:8C:04:0F:19:C8:C2:04:2C:39:07:4A:E9:76:9D:5C:2C:0C:D5
Authority key identifier: 4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
Certificate issuer: /CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Certificate serial: 019922C388167EE9A37742FE3E0216AB46C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
Manifest number: 0147
Signing time: Sun 07 Sep 2025 06:01:03 +0000
Manifest this update: Sun 07 Sep 2025 06:01:03 +0000
Manifest next update: Mon 08 Sep 2025 06:01:03 +0000
Files and hashes: 1: 54qil-gtsg-VmWMUKBbSoP89Sh4.roa (hash: +lFuYFZIeWq9AFirWvNO/gLe0U+wLrmb+nny8MFDRhE=)
2: TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl (hash: socn4N2F6B3tNbjW+hktfjSg/scrnzphUCgx9Ih2fKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:88:16:7e:e9:a3:77:42:fe:3e:02:16:ab:46:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Validity
Not Before: Sep 7 06:01:03 2025 GMT
Not After : Sep 8 06:01:03 2025 GMT
Subject: CN=cb018c040f19c8c2042c39074ae9769d5c2c0cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8d:20:fa:4d:f4:b2:36:61:82:7c:22:a0:17:
ad:4e:f4:c3:d4:81:54:b2:9b:ca:a9:a1:b8:cc:8e:
a0:bd:2f:e8:9e:3b:04:f2:c9:60:f9:1a:c9:89:03:
48:cf:e2:13:bf:00:b8:89:b6:df:1d:b5:a2:83:c1:
fa:03:bd:53:9b:d6:26:ec:d3:ae:46:5f:ad:9d:01:
c3:5e:80:53:40:99:31:db:86:f3:c0:d8:4a:3b:ca:
38:6f:f7:f0:df:7a:b6:e6:39:97:50:0a:eb:c9:dc:
56:06:69:8a:84:54:5f:ac:ae:2c:19:59:c1:1b:51:
e6:ba:1e:3a:32:07:ae:e5:14:1b:bb:5d:f1:b1:c8:
b2:80:8f:7e:2e:24:16:e8:46:7d:b8:92:65:f1:50:
b0:d7:11:55:17:c7:d0:07:cc:69:49:8a:6f:0e:74:
f3:9f:e7:0c:6b:f5:51:2a:fd:45:f2:53:dc:c9:10:
99:e0:53:29:d3:2b:a5:a2:e3:63:e8:59:5b:92:83:
f1:0b:c0:e3:bb:d4:14:a1:b1:71:8a:a0:85:08:0a:
c0:c1:2f:cd:51:7d:8e:92:52:92:79:0d:16:e7:67:
b9:1e:ac:2c:f6:fb:f3:d0:90:17:70:92:e2:a3:16:
e8:00:76:50:b3:66:d9:66:18:ca:a1:3e:f1:9f:02:
8e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:01:8C:04:0F:19:C8:C2:04:2C:39:07:4A:E9:76:9D:5C:2C:0C:D5
X509v3 Authority Key Identifier:
keyid:4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:81:8f:67:3d:e6:78:e0:3a:4f:2d:7e:3a:15:43:42:29:0d:
7c:92:77:90:39:e3:a4:b9:05:30:17:37:eb:f3:7b:36:ca:c4:
a6:99:d9:32:32:43:be:76:2b:35:94:4a:e5:cd:ba:6a:3e:ae:
c5:11:46:c2:a2:8b:ea:a1:d0:7c:65:14:4d:57:15:43:9f:4b:
e1:c3:28:3f:1c:84:eb:c0:ce:9f:82:cf:fe:2f:a8:91:95:75:
b9:58:e3:00:93:8b:e4:04:fe:d9:03:0a:2f:16:b7:f6:fc:d3:
5a:c8:91:a0:34:4d:00:0f:e3:bd:d0:21:52:49:23:c5:cb:77:
4a:e6:85:e5:86:a2:b3:89:6f:91:b8:d2:a7:39:ef:bf:96:03:
9a:1c:d4:57:50:1f:7d:ef:a0:de:65:33:47:7f:0f:41:b1:15:
71:81:d1:4a:9f:91:37:79:20:f9:ed:04:ba:7f:11:c8:6c:b7:
f1:41:72:60:ba:49:00:43:c3:ed:75:4b:7d:21:19:48:96:34:
33:0f:88:31:18:13:ed:5a:df:29:f8:6f:3c:f1:ca:57:6f:c7:
b5:ca:8c:8d:71:18:91:db:83:71:78:d9:b3:69:04:61:d7:77:
75:fc:43:4d:08:9f:34:1c:c1:da:82:47:94:ee:03:d6:27:5e:
f1:4e:df:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:20 2025 by rpki-client