Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
File: tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft (raw, json)
Hash identifier: Bb9+vhiQSNEFEyhQWfXigWsJJwr15lstihSyO6sT8sY=
Subject key identifier: 0C:F2:50:EE:9E:5D:71:2B:C3:7E:1D:6A:F8:A4:8B:C6:EE:65:42:96
Authority key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
Certificate issuer: /CN=b573d2dda93e420409163da59e7414ee91a2eef2
Certificate serial: 0199345BD2FB8AB66B0439EC3B0AACE54CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
Manifest number: 0118
Signing time: Wed 10 Sep 2025 16:00:56 +0000
Manifest this update: Wed 10 Sep 2025 16:00:56 +0000
Manifest next update: Thu 11 Sep 2025 16:00:56 +0000
Files and hashes: 1: r2p_nfti9wP7acQGEaKHM_xZ5Y4.roa (hash: 8x452bR9h9FZkxCtz0Hac6JBkLr+TCy/u9myFaRh5zg=)
2: tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl (hash: B0z5PC6ThAUspE+ejP1zGqH01AiQEnCYu80e4Iwj8cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:d2:fb:8a:b6:6b:04:39:ec:3b:0a:ac:e5:4c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b573d2dda93e420409163da59e7414ee91a2eef2
Validity
Not Before: Sep 10 16:00:56 2025 GMT
Not After : Sep 11 16:00:56 2025 GMT
Subject: CN=0cf250ee9e5d712bc37e1d6af8a48bc6ee654296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:41:8a:c1:8e:7f:25:df:25:16:47:24:ec:
dd:b3:eb:bd:3b:fe:4d:04:5e:24:d1:6f:2a:0f:6d:
e6:de:49:cd:bb:58:a6:c7:73:ce:73:79:7b:3e:25:
37:a4:36:ab:6e:f7:2c:5a:97:74:71:99:6b:3c:a7:
b9:f2:c5:7f:6b:ed:93:c8:19:eb:50:1e:f6:6c:a9:
2e:49:b0:fe:4d:bf:2c:68:31:fb:0c:4e:2b:dc:35:
2c:02:5a:48:e1:43:64:14:d4:1c:cc:4a:9d:d4:57:
fe:32:8d:d7:7a:ab:8a:30:98:c5:e4:42:58:7e:62:
5a:b0:ef:8b:f6:79:36:8d:d5:32:e1:18:fd:b4:c2:
07:f8:f9:8a:f0:40:33:32:9e:68:92:a2:b6:9f:30:
8a:a7:2f:1c:3e:61:97:58:48:bd:80:07:07:65:2c:
21:a3:91:b8:37:22:05:ed:6d:df:b0:e3:fc:7a:b8:
35:92:98:69:db:d3:ee:30:ad:60:3d:a6:a3:9a:bf:
22:1a:34:44:14:4f:0f:e6:be:5c:48:f3:ae:d8:7c:
d4:84:89:a8:6d:e2:a4:2a:c2:5a:c7:9e:7f:be:18:
5c:d8:85:29:e5:b0:1b:2d:e5:c3:37:5b:ad:c0:58:
36:dd:22:0e:82:30:e7:bd:d2:4e:46:73:08:dc:15:
6c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F2:50:EE:9E:5D:71:2B:C3:7E:1D:6A:F8:A4:8B:C6:EE:65:42:96
X509v3 Authority Key Identifier:
keyid:B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:41:76:08:f5:1c:41:b7:0d:4d:ad:58:9c:29:a0:65:25:75:
6f:44:8c:e0:2d:78:8e:dc:99:f4:e8:44:6c:61:d8:77:11:d9:
a5:c2:89:05:56:de:b7:de:55:7d:e6:44:07:c6:a0:52:cf:7e:
ae:9e:b0:d6:d7:6f:d3:88:4e:78:3c:de:ae:55:26:1a:b2:e3:
e4:fb:32:0f:c4:b6:11:ea:14:00:d8:54:a3:f2:d5:3c:7b:83:
35:a3:85:7e:bf:b9:eb:b6:d8:ad:30:c4:95:29:4e:c7:c7:76:
64:0c:a7:56:e0:b7:b9:f9:1c:c4:5f:4d:ad:2f:87:9f:17:25:
c2:6b:9d:1e:21:e6:ad:84:fa:be:29:d4:88:f8:18:9e:37:3c:
22:a0:d8:cd:8f:93:98:b8:d6:ba:1a:77:46:d1:89:88:e7:ee:
8d:8a:3f:c2:2c:9e:4f:7b:dc:0c:fe:df:37:d8:20:b2:b3:2c:
fe:ad:ac:e9:31:9a:11:7a:d9:af:18:e2:3e:73:f9:2a:53:39:
e0:f2:4b:7a:8d:59:4b:a8:5a:6d:c3:74:2c:4f:d9:38:60:bb:
7e:a2:66:94:e2:df:66:15:29:97:ac:02:6a:6c:bc:57:4d:5e:
19:ce:d0:a0:e8:70:3a:75:92:18:69:2d:bb:b2:8b:60:71:ea:
03:d5:6c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:13:59 2025 by rpki-client