Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
File: t4SM0jk8F4NlegV3erMV45jrsj8.mft (raw, json)
Hash identifier: 189GbqlhcYBXBR3N7veOPfn+Jy7yU6mgdgC45cmRR5c=
Subject key identifier: 1E:53:28:D4:99:EB:3A:E0:23:E8:22:F4:4E:45:BE:89:A0:BF:73:F5
Authority key identifier: B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F
Certificate issuer: /CN=b7848cd2393c1783657a05777ab315e398ebb23f
Certificate serial: 0199228CA15BFF4FCB4C434654BDBE55E569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
Manifest number: 0751
Signing time: Sun 07 Sep 2025 05:01:05 +0000
Manifest this update: Sun 07 Sep 2025 05:01:05 +0000
Manifest next update: Mon 08 Sep 2025 05:01:05 +0000
Files and hashes: 1: pTPPFKoFJuWdMRGvxA7E4jX80_c.roa (hash: HeJcd3mD5OFJbnZMPOd7wMALaLnR8ioIMvdpAeeFOz0=)
2: t4SM0jk8F4NlegV3erMV45jrsj8.crl (hash: E297m5nLy9MtBZIx1K35Q8ihm7CPvGPd6rin/6daEtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:a1:5b:ff:4f:cb:4c:43:46:54:bd:be:55:e5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7848cd2393c1783657a05777ab315e398ebb23f
Validity
Not Before: Sep 7 05:01:05 2025 GMT
Not After : Sep 8 05:01:05 2025 GMT
Subject: CN=1e5328d499eb3ae023e822f44e45be89a0bf73f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ef:66:c8:99:2f:09:5c:82:1d:1f:7a:c8:0b:
00:33:ea:ec:f0:73:2c:bc:a5:a6:52:0d:c7:7e:6f:
12:3d:df:5e:1f:b6:8a:88:3d:66:3a:25:df:0f:ea:
55:3e:a9:c4:89:d7:41:93:a9:0b:02:90:f8:11:0c:
08:16:ac:08:4c:11:38:b1:80:4e:59:ab:4c:88:a0:
ae:05:89:c9:c6:07:02:5d:24:17:99:05:b4:dc:63:
77:d5:1d:11:a6:5f:23:8e:86:3f:95:a5:b1:79:22:
13:3d:2f:d7:c9:f1:eb:6b:68:2a:ef:06:ca:22:4c:
4c:3c:8c:fc:d6:ef:28:a7:37:0f:86:79:c7:12:10:
c8:15:75:73:52:4b:30:13:e2:2f:33:ba:0e:7f:d9:
ee:ed:92:78:e9:1e:c5:68:63:1b:f3:f6:f3:ce:3f:
93:e2:c2:84:94:3b:f3:9c:bf:fd:55:a7:f5:db:56:
c2:6b:3d:ff:97:72:3f:45:2f:89:73:8b:c6:11:d3:
c6:53:57:97:60:16:b3:79:9e:df:6e:a3:6c:5c:a6:
36:52:34:8d:23:4e:6e:3f:56:c7:f5:5e:39:79:48:
36:f1:97:a5:40:79:89:2a:f9:0f:c8:5e:58:90:40:
69:da:3a:ee:d7:b4:95:ce:29:df:55:44:26:38:a5:
e4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:53:28:D4:99:EB:3A:E0:23:E8:22:F4:4E:45:BE:89:A0:BF:73:F5
X509v3 Authority Key Identifier:
keyid:B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b0:ba:e8:50:d5:20:71:50:14:ce:d2:1b:b8:75:cd:9c:4b:
a2:af:c6:fd:75:2e:05:4e:69:c5:af:61:80:2d:1d:fd:51:07:
cf:f9:2e:2a:55:60:74:87:e4:d8:86:66:d4:d2:d0:60:73:92:
a7:1e:2b:a2:9c:f0:74:46:40:0b:cb:a6:24:ba:b9:2e:a1:9f:
34:c7:d6:a7:92:26:99:02:ec:eb:2a:ce:28:6a:75:7d:d4:76:
94:1f:fe:1a:b3:93:ff:1f:c4:64:bc:82:cd:20:b9:f3:51:6a:
72:9e:51:fa:62:d9:b1:5d:2f:fe:9e:3a:f9:a1:86:53:6e:83:
33:04:77:cb:a3:40:8d:0e:7e:4a:9c:10:2d:dd:3b:0e:e1:c5:
a4:ac:94:dc:62:d8:74:41:2f:9b:f8:f2:1b:23:8f:9c:2b:b1:
35:ac:ca:c1:3f:9f:82:79:98:b3:4f:a8:b4:0f:cb:90:d8:21:
b9:09:77:37:3d:77:6c:ef:fd:1b:7b:68:35:a5:21:19:41:b8:
f8:22:c8:63:ff:6c:35:0b:30:d2:b8:f3:90:ac:51:d2:b5:8d:
41:ad:4e:d9:b2:e9:c4:5d:bb:be:c7:1f:52:81:5a:c6:41:f9:
c9:ba:d7:3d:24:db:e9:ab:b5:cf:96:93:9a:88:e1:3e:c6:08:
3e:c2:e9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:32 2025 by rpki-client