Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
File: TS-f1cihTNyfMcRYXNYNtXz_tMI.mft (raw, json)
Hash identifier: lWAZX9g9nVs64Tn/Q4vLMR7J9DAqkwgyfizvbKuvZho=
Subject key identifier: A3:7A:19:90:1A:D2:F9:ED:8D:DD:5E:28:92:30:07:B1:CC:43:47:A7
Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
Certificate issuer: /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Certificate serial: 0199616C50C074686EEE331D8E0451232A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
Manifest number: 0D55
Signing time: Fri 19 Sep 2025 10:01:52 +0000
Manifest this update: Fri 19 Sep 2025 10:01:52 +0000
Manifest next update: Sat 20 Sep 2025 10:01:52 +0000
Files and hashes: 1: 1-QMPtoomm6W5CX-SS0fyQ5AS734.roa (hash: hcd0LKLxrMub9hVDF7pi719s+IDTrzb/8hX4yl7gw2w=)
2: 8-JB4jMg3_rMGJjuIMVCBLnxwQ8.roa (hash: buBER4odhou/4TCkZQ3UeIhbfaoQJUXmTZ3cmJ4K9k8=)
3: TS-f1cihTNyfMcRYXNYNtXz_tMI.crl (hash: Ub5fwnV6GU5YSEfDkP5+dkFy20pl6QlVISnc3YMhWKM=)
4: pSmbhIOz_v9DcZ6BjkBTv88tPZ4.roa (hash: 1vOAxGM5C9HFgFv3tm1lOiYWc4bRDbFQtmaO7PV8kkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:6c:50:c0:74:68:6e:ee:33:1d:8e:04:51:23:2a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Validity
Not Before: Sep 19 10:01:52 2025 GMT
Not After : Sep 20 10:01:52 2025 GMT
Subject: CN=a37a19901ad2f9ed8ddd5e28923007b1cc4347a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c0:b9:93:08:60:2a:24:16:f8:ad:56:73:df:
88:eb:1e:1b:f0:b2:3a:86:08:4a:c6:76:c1:62:7c:
21:e0:a0:3f:c4:39:4e:5b:80:00:73:8f:c9:cc:9b:
83:24:46:38:17:4b:7c:c0:78:11:74:c4:b1:d0:4a:
4f:a7:d1:62:eb:49:45:b5:cc:fc:34:05:c5:a7:6e:
b7:8c:c1:a6:2d:8c:a2:61:b6:11:76:83:e9:ce:9e:
e7:ff:5e:00:b6:7c:d9:d0:3c:24:33:fc:af:1f:ea:
50:09:23:0e:ea:bf:bc:ce:49:de:d5:c3:29:1c:41:
64:9e:97:ed:30:da:95:30:d4:d5:01:a1:32:5f:32:
c7:d1:62:42:b1:08:55:28:a9:71:0c:ea:2b:05:4d:
55:28:98:ce:1b:9c:89:bf:24:64:33:15:1c:7c:2e:
a6:c7:fe:d8:40:f4:8b:dc:9f:24:06:03:07:1c:51:
35:db:b6:f6:0e:b5:c9:50:68:ad:82:f2:97:4b:dc:
f2:ac:e9:a6:49:5a:6f:55:39:4c:e1:27:71:c5:cf:
bb:c6:6c:f8:31:a6:23:a6:48:bf:66:62:63:06:90:
34:d8:7b:7c:ea:0f:e9:34:94:20:aa:d0:fb:59:c3:
60:a3:b2:3a:68:a4:f7:42:b2:f3:2f:94:13:34:12:
69:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7A:19:90:1A:D2:F9:ED:8D:DD:5E:28:92:30:07:B1:CC:43:47:A7
X509v3 Authority Key Identifier:
keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:77:59:f8:2d:f6:7b:7d:19:6c:43:96:6b:a1:8e:da:df:c1:
57:67:5b:aa:07:a4:24:da:bf:f3:b2:2b:b3:4a:6c:e5:d7:82:
0c:05:8f:f1:ab:b9:46:bd:29:d9:76:c1:91:2e:87:bd:11:bf:
52:26:10:b7:ec:62:cf:33:29:20:92:6d:06:00:35:40:32:36:
45:3e:91:5b:16:b8:8b:97:29:4b:b2:65:67:20:f3:68:15:b6:
1e:2c:2b:1e:ba:56:f1:dc:e0:1f:65:91:5d:5e:45:05:e2:60:
ce:d4:68:51:bf:e6:16:72:48:4c:fe:fe:01:fa:25:45:a9:4a:
de:bc:ae:34:36:00:19:b8:33:72:67:d5:78:1f:18:68:81:7e:
f2:98:b4:1b:91:0d:3f:cf:ec:39:a9:61:77:89:a4:23:b9:c4:
a5:65:45:62:ee:fb:e7:a2:b1:ea:ae:30:6f:c6:95:e6:7a:f6:
68:d6:c1:a9:fb:52:81:66:2d:5f:a3:6a:06:27:33:f9:b6:56:
42:a2:13:c6:9f:23:cd:ec:8e:78:74:3f:e4:94:3b:d4:c5:df:
ab:8d:5b:79:49:23:65:f6:32:b7:01:03:f1:27:cd:c8:a1:54:
10:47:8e:52:10:17:09:27:bf:4b:62:84:2f:43:c6:90:b9:89:
f7:8e:5a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:55:55 2025 by rpki-client