Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
File: tGTgryi3VcTsiAENlCmGl9GIOTM.mft (raw, json)
Hash identifier: LU7ZleesjaVMVYcy5Tbc5l+pND8EcLXXanDXwWau7nE=
Subject key identifier: 9D:B8:09:E1:47:2C:8B:FE:81:19:19:D7:A3:C6:7F:5E:7E:59:C5:85
Authority key identifier: B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
Certificate issuer: /CN=b464e0af28b755c4ec88010d94298697d1883933
Certificate serial: 019931C85D3E7469023A716240F5E497E434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
Manifest number: 083D
Signing time: Wed 10 Sep 2025 04:00:38 +0000
Manifest this update: Wed 10 Sep 2025 04:00:38 +0000
Manifest next update: Thu 11 Sep 2025 04:00:38 +0000
Files and hashes: 1: 4ZUimyMSrmZMeMTJpofdIprKN0Y.roa (hash: +sbrqZ7npPQY0M7RUiP5uMAuk7XGp56zDb3oxzfgBs8=)
2: D6cOOwuzIu0b1VD3IEBzEJwwwCo.roa (hash: v5PJLnM3bwyGnG1xvGzcUgGuOEM5ARi6RIpoEpY7P4s=)
3: fyoJ9a9SSU9QMOOAnopUi24XOCI.roa (hash: Oq4G4KqExdW+YSWtwOksmXAFXdtGTgedgjAZaCPW9DM=)
4: tGTgryi3VcTsiAENlCmGl9GIOTM.crl (hash: jKEG808pCZRFzNBjG2OE+PTdMudfz/kPcncX4XUxlYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:c8:5d:3e:74:69:02:3a:71:62:40:f5:e4:97:e4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464e0af28b755c4ec88010d94298697d1883933
Validity
Not Before: Sep 10 04:00:38 2025 GMT
Not After : Sep 11 04:00:38 2025 GMT
Subject: CN=9db809e1472c8bfe811919d7a3c67f5e7e59c585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4b:8b:19:82:fa:85:6e:ce:26:34:bb:49:98:
ab:c4:5e:94:bf:c6:b1:10:2a:a4:a4:09:2c:0a:e3:
60:de:0b:cc:f3:5f:55:4e:41:1c:b4:43:91:9e:1e:
c2:10:ae:d0:da:f6:10:8d:17:88:66:12:4d:02:5c:
d7:35:70:19:91:54:1f:77:22:2b:11:cb:6a:85:d6:
3a:82:3a:a1:c2:a8:36:ea:f1:c6:27:23:0b:2e:c3:
30:da:9e:c7:1c:ee:a1:d0:78:8f:61:54:82:31:28:
43:dc:f2:87:c9:65:78:a1:cf:c1:d2:86:b6:62:f5:
a1:f3:48:83:f9:cd:fb:e2:73:9d:b7:a1:44:48:08:
79:18:e8:14:99:8d:8d:ab:db:47:ae:2e:58:bb:c6:
4c:cf:2b:ae:29:74:25:43:14:fc:73:59:a8:af:8f:
0b:66:38:39:d7:84:b7:cd:46:8c:c8:3a:39:0a:55:
ff:1f:2f:9f:fd:08:54:07:17:df:33:ee:21:5d:56:
67:02:b1:42:67:a1:9d:8e:86:6d:22:be:c5:33:0b:
4e:03:a6:ab:dc:7a:d2:08:b5:22:e2:b9:66:e1:9d:
99:22:3b:ed:9f:8f:11:ed:c3:19:9b:72:ba:b0:41:
f7:ca:6e:85:a4:40:50:e1:67:d1:12:14:f6:4d:24:
be:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B8:09:E1:47:2C:8B:FE:81:19:19:D7:A3:C6:7F:5E:7E:59:C5:85
X509v3 Authority Key Identifier:
keyid:B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0c:7f:d5:58:31:f6:d6:84:9a:5e:c4:26:12:58:6b:9e:eb:
a0:bc:83:b4:7d:c8:67:a1:7a:fa:2b:0a:86:52:5d:80:0c:af:
21:1c:31:fe:4c:f4:50:d7:db:af:1b:6e:60:ed:4c:a0:29:64:
1b:1a:23:a7:fd:0f:43:ae:94:08:47:0f:a2:08:43:4b:e0:67:
02:15:c5:5f:66:69:79:f1:c3:dd:b7:73:96:63:0c:af:cf:13:
2c:6b:4d:f4:5f:97:b5:d1:6f:0c:f4:99:11:ee:f3:df:26:f3:
6f:22:81:3e:d7:57:70:8f:ce:1a:48:90:3b:02:e4:04:7b:f1:
a5:64:19:a2:61:7a:e5:65:97:14:40:2e:f7:19:dd:f0:64:c4:
e4:4f:30:cc:f3:83:97:90:29:c6:bf:53:78:6a:5c:15:7b:ba:
9d:90:34:a1:25:8e:a4:80:95:ea:42:65:4a:7d:ea:0b:24:87:
5a:42:be:fb:46:41:0a:cb:da:ba:54:36:53:3b:08:3c:79:9d:
dc:e3:5c:8d:41:b9:5f:88:3b:b7:16:26:02:7d:dc:08:f6:a9:
20:dd:68:84:b9:c5:71:97:a9:3b:e7:43:9e:6d:f6:10:72:9c:
6b:01:f6:64:b9:f1:59:fe:1d:d7:41:15:75:80:4c:d6:0d:a9:
d4:80:56:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 11:55:12 2025 by rpki-client