Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
File: TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft (raw, json)
Hash identifier: tsl7pYh9l1fy5hxJMHvvflJzzZFIrnE55htEsPZ2XX4=
Subject key identifier: A0:E7:AC:B6:91:4A:2D:19:CA:BF:43:32:F3:16:BB:93:A3:1D:17:3E
Authority key identifier: 4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93
Certificate issuer: /CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
Certificate serial: 0199221F3170B0D4DF8A050E8EF57E3E03CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
Manifest number: 106B
Signing time: Sun 07 Sep 2025 03:01:33 +0000
Manifest this update: Sun 07 Sep 2025 03:01:33 +0000
Manifest next update: Mon 08 Sep 2025 03:01:33 +0000
Files and hashes: 1: GJVV3SoEfsa0pgtLtiw7hYQqnlY.roa (hash: X3L+IE/tHK5/79Ef7HYRs6p2vD8nOugSbhs0gMsz8zU=)
2: TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl (hash: 7s8zXiV3iY2OKcg9aHClcbUMU/0uuo/kPIOaLpTdAqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:31:70:b0:d4:df:8a:05:0e:8e:f5:7e:3e:03:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
Validity
Not Before: Sep 7 03:01:33 2025 GMT
Not After : Sep 8 03:01:33 2025 GMT
Subject: CN=a0e7acb6914a2d19cabf4332f316bb93a31d173e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:21:67:f2:c9:0d:f6:06:89:1d:ed:50:bf:
9b:bd:f4:50:21:6e:9d:13:26:1b:3d:7c:0a:f8:c4:
64:24:b8:32:98:6f:a3:42:a7:9e:63:b1:ee:d9:32:
f6:08:15:45:2c:aa:03:ce:31:a6:60:92:cf:e6:4e:
59:28:52:5a:df:32:c7:12:2b:d3:71:4a:47:66:e6:
7c:15:d7:c0:f1:ae:9b:9f:b6:f5:63:64:ba:53:b8:
8c:68:f7:18:b5:f1:6d:b2:33:b9:99:bb:02:03:e0:
9f:bc:cc:a5:af:a6:54:48:80:7d:16:75:6a:a1:cd:
be:b8:e9:58:f7:5c:f3:0a:ac:2b:0f:c5:7e:6e:e0:
45:a7:27:2f:9b:70:87:63:36:4f:b1:63:da:58:d1:
ae:62:07:93:ab:29:12:8f:36:9f:71:2d:60:96:c7:
5a:a4:86:a6:b5:2b:03:5c:98:0f:91:e3:b7:32:b1:
24:c6:51:61:18:da:b8:38:3f:c5:95:da:81:0f:ec:
14:df:94:68:37:ce:6f:c5:74:f5:59:f8:65:47:20:
a8:b1:89:4d:df:5e:46:d8:ab:21:cd:3d:fa:4c:94:
2d:9b:b8:0e:18:72:95:b0:63:19:cf:42:e1:0c:d0:
ff:04:ce:27:57:53:00:8b:4d:bc:95:37:7e:c3:d1:
79:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E7:AC:B6:91:4A:2D:19:CA:BF:43:32:F3:16:BB:93:A3:1D:17:3E
X509v3 Authority Key Identifier:
keyid:4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5a:f9:11:1d:62:8e:05:7d:58:f4:c8:18:4e:b0:19:58:31:
36:1c:87:2a:7d:04:70:67:ab:42:d0:fe:e3:9f:d0:97:9b:60:
bd:31:6a:da:f5:13:f2:8c:6c:43:65:98:e7:7b:38:7d:ed:65:
d7:08:05:31:fa:35:60:29:75:d2:f4:0b:32:21:36:21:1a:54:
6d:11:bd:52:22:92:61:01:35:16:99:ed:96:80:f8:f1:b9:be:
60:51:05:60:fd:99:24:55:e8:cd:56:d4:64:33:ab:c6:76:ea:
85:eb:eb:eb:2e:6e:3d:3e:24:7b:27:fc:8c:77:2d:c8:b6:fb:
67:6e:6e:7a:33:e9:95:30:1e:66:8d:ce:15:5d:58:e7:2a:8d:
38:ec:bc:72:0a:75:c0:37:b3:de:03:79:58:d4:79:92:00:83:
e9:98:64:57:1a:4b:12:d7:b4:a6:3f:ed:06:50:69:25:fc:52:
27:02:3a:7b:9c:7d:8d:79:fd:a0:8c:ba:89:19:c1:a3:15:e3:
56:cd:8b:09:6b:ff:f8:62:8c:45:61:9f:ee:7c:fb:e4:32:69:
8b:da:5e:13:ee:e8:f1:11:a8:23:01:34:94:18:0e:72:e3:b0:
b0:46:5f:61:59:50:61:e2:64:7f:e4:bb:43:e0:6f:44:2b:c9:
6d:e0:3d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:29:31 2025 by rpki-client