Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
File: sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft (raw, json)
Hash identifier: 6GZnIFV0v1PGNs9eoSA093p1QRBHX/QG5BF+BEyZwTk=
Subject key identifier: C9:A4:17:B1:2B:63:ED:D1:14:C2:40:A0:4B:77:B4:56:82:EB:C0:6A
Authority key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
Certificate issuer: /CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Certificate serial: 01994F9BC27BC31E90E73131BFCC807A24A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
Manifest number: 12C6
Signing time: Mon 15 Sep 2025 23:00:31 +0000
Manifest this update: Mon 15 Sep 2025 23:00:31 +0000
Manifest next update: Tue 16 Sep 2025 23:00:31 +0000
Files and hashes: 1: DLK7aUuoCrkixmfK1Tr6lgYywbs.roa (hash: P1mAikX7/iUCIq0Iyy8fvjfAyIPndaCCAY0oESDv+Qo=)
2: mxU7ZGuWRrVnoU7neP0ntyKL78s.roa (hash: X4Bp+WOWNCY8+u0/f19L8Y2SQKOHLXJCsrOK+p7unk8=)
3: sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl (hash: jDfwnMM25OjU3CrOvPKm1/fBFNLCoekaWX3d4yvSDcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4f:9b:c2:7b:c3:1e:90:e7:31:31:bf:cc:80:7a:24:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Validity
Not Before: Sep 15 23:00:31 2025 GMT
Not After : Sep 16 23:00:31 2025 GMT
Subject: CN=c9a417b12b63edd114c240a04b77b45682ebc06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:cd:af:c2:c9:30:f5:58:77:4b:29:e9:8c:
be:4c:96:00:fc:a7:75:2f:8b:3c:0f:fc:af:5f:c0:
99:dd:b0:e3:ac:d1:f4:bb:38:2d:5b:08:64:c8:6d:
93:0d:1e:87:35:11:7b:c6:af:77:26:21:46:df:57:
de:8a:98:cb:5a:a0:97:95:d5:36:fc:26:f0:ee:d6:
23:dc:bc:d8:be:e0:38:5b:ce:d6:bd:ed:62:02:f3:
0b:92:79:87:1b:02:3b:b2:7c:56:01:f2:08:e4:c6:
93:8b:fb:b9:df:14:29:fd:db:49:f2:72:1c:e9:be:
e7:40:97:57:08:48:c1:58:18:6a:f5:3c:38:56:fa:
04:c9:7f:98:a0:d9:1b:d0:59:6f:6f:d1:71:52:77:
14:16:b5:b1:0b:7f:d3:e7:ef:dc:99:eb:95:bf:ac:
e4:dd:2c:79:d6:fe:e5:2a:82:91:65:e9:e9:0d:57:
88:0c:e3:18:b8:89:68:0b:09:e6:c3:b9:6d:38:74:
97:3a:df:36:a2:ce:15:a3:06:7b:49:f9:5f:3b:ee:
22:16:1a:72:01:7b:9f:1b:f9:18:a8:fb:e8:af:f5:
00:74:2d:79:ed:b9:b5:78:02:a2:36:99:40:48:b1:
09:ea:59:e5:a0:ae:c0:7d:f0:84:40:5a:76:9f:4c:
57:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A4:17:B1:2B:63:ED:D1:14:C2:40:A0:4B:77:B4:56:82:EB:C0:6A
X509v3 Authority Key Identifier:
keyid:B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:66:f1:f6:f8:d8:32:00:99:75:9e:79:ed:c9:db:57:a3:df:
ad:68:4d:ac:47:e6:45:a6:59:da:06:da:e0:c1:06:4a:3d:d4:
ab:e4:b4:5d:7e:c1:45:44:bd:fe:42:57:b2:7a:c0:af:77:17:
f8:78:93:56:4d:4a:b7:77:1b:d0:85:e0:4b:dc:f0:80:6b:f5:
8a:c8:5d:11:04:5b:7d:c6:55:fb:ba:44:6d:6b:45:e2:b5:ac:
30:bb:22:2a:c2:da:e7:14:c1:22:47:70:0a:87:1e:8f:cf:35:
b2:1c:7f:65:6a:c6:09:af:75:67:44:e1:8a:6d:bd:0a:9b:60:
0e:68:3b:9f:7b:a9:8d:09:16:ef:0d:b5:53:ff:79:b7:c5:68:
30:85:57:3e:60:72:ec:4d:b6:77:ff:a8:cf:95:08:53:5d:dd:
7a:83:e6:46:a3:52:77:43:9e:12:e5:bf:91:af:2a:af:18:b1:
ec:cd:e8:d1:7d:53:33:44:1f:35:22:ef:47:38:5c:fa:bd:51:
1e:9a:e1:e9:e0:37:ac:65:7d:a1:b5:be:25:60:e8:bd:07:4d:
a2:0a:21:52:c0:04:9f:de:1e:7c:58:00:fa:6f:bb:38:90:c1:
e3:50:da:59:b8:9b:da:da:9d:6e:22:ca:4a:38:dd:d2:ce:d9:
e5:b8:21:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 05:53:51 2025 by rpki-client