Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
File: Tg854squjizxS8xBsj88huGnIPg.mft (raw, json)
Hash identifier: BvBD5R5DlgESKEORAC/hVhgGi5panah77V7mwNrQFDs=
Subject key identifier: E9:3E:80:56:EB:24:54:1E:1F:F7:DB:96:A9:50:A0:A6:38:5C:83:8B
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 01995867E66524FEB3C1B8AAC5CA0614360F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
Manifest number: 1690
Signing time: Wed 17 Sep 2025 16:00:28 +0000
Manifest this update: Wed 17 Sep 2025 16:00:28 +0000
Manifest next update: Thu 18 Sep 2025 16:00:28 +0000
Files and hashes: 1: 3NL0_43JO4ViZMUt6FOGd4wRJes.roa (hash: iMUE0vTHXLYCmLZqj0qdPBpz5FgK9qmOUf7yFoe48OI=)
2: 4pgipsDtjzVZOnA4qzWqk83-xSA.roa (hash: nd8vlth0pBWJ/Is/avNVqT3xb/Gc3yDSmhppSZMRqxM=)
3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: IWDAiayb3BJTiolzu39qM5bdxswF4JP84AqYUUnNCzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 15:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:58:67:e6:65:24:fe:b3:c1:b8:aa:c5:ca:06:14:36:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: Sep 17 16:00:28 2025 GMT
Not After : Sep 18 16:00:28 2025 GMT
Subject: CN=e93e8056eb24541e1ff7db96a950a0a6385c838b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:90:ba:f2:3a:2d:b6:ab:ce:ce:7f:78:77:d5:
58:9b:e1:7b:2d:8a:c2:7e:7a:ed:5f:7b:47:31:a2:
a0:05:cb:60:ed:4c:e1:32:57:7c:b3:73:9e:3d:d3:
9c:25:44:40:c0:b0:6d:ee:c6:97:35:c1:e4:2e:f0:
7a:e1:22:e5:27:98:c2:27:dc:a6:18:fa:90:ab:66:
15:7f:44:5e:0d:ee:ff:75:f3:02:f6:e8:c2:3b:e7:
00:f6:59:6d:e8:6c:6d:f8:1b:35:6c:65:8e:c3:89:
e5:6f:0e:8d:14:64:3d:a6:75:d1:88:10:b1:64:49:
31:f0:0b:15:9e:7f:af:41:3c:ac:e6:93:34:f3:55:
57:dc:85:20:bf:84:90:ad:9b:75:b8:da:b2:75:1c:
9c:8e:fc:e1:33:2f:27:18:57:64:cf:63:5b:6f:72:
48:e0:04:bb:31:99:86:56:c3:6a:f2:41:6f:84:ab:
9a:81:c0:3f:ec:eb:f6:28:76:a9:ee:69:09:72:7f:
ee:e1:bb:b8:51:37:6b:04:0e:d5:72:c3:d8:4f:e5:
bc:a7:bd:74:7f:73:2c:1f:82:75:9c:51:27:13:ee:
57:eb:28:9d:67:70:f5:9e:b3:7a:ca:ad:ea:86:22:
f3:c7:56:ce:c3:9d:bb:45:97:36:c8:f9:90:be:51:
75:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3E:80:56:EB:24:54:1E:1F:F7:DB:96:A9:50:A0:A6:38:5C:83:8B
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:47:c3:12:9e:ea:93:ca:53:c1:62:26:9f:c5:7d:1c:ae:d1:
55:dc:0e:16:3b:21:40:db:d2:13:bc:fd:4d:b9:9d:b5:60:66:
d6:09:f2:48:17:1b:fe:cf:7d:f9:78:c6:23:0e:24:c5:c3:f6:
3c:cb:6b:06:74:4e:66:54:e6:cd:70:fd:14:d2:3b:f5:72:d7:
51:90:fd:6c:c5:19:9f:b2:9d:a0:9d:9f:5b:db:21:38:38:1f:
8d:f4:e9:dc:77:7a:c9:1b:cb:bb:05:5e:83:10:35:a4:6f:72:
70:31:81:f6:7e:90:54:f1:8c:e8:61:11:78:f7:4e:8a:64:25:
41:89:2c:07:90:31:5f:50:f5:74:58:3d:a8:36:bd:ac:21:a0:
cd:cf:49:f6:23:8b:0d:08:2d:41:3e:e7:11:65:c3:a1:61:84:
8d:60:8c:b1:17:14:45:dd:2b:0e:02:ce:53:7b:10:db:40:fb:
25:de:e2:57:6e:0b:4f:46:36:b6:2c:72:eb:3e:69:01:32:0f:
31:6d:7c:b8:c7:e7:75:b7:a8:61:d4:aa:e6:5e:6a:06:0d:fc:
7b:34:84:e8:33:f6:2a:69:79:7b:ca:80:79:78:b9:a3:4a:16:
49:2c:69:74:89:74:c3:8b:89:d8:54:8b:fb:12:03:4c:52:6d:
f0:b7:ab:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 19:49:31 2025 by rpki-client