Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: 8onSKwnFQ5Jh6xf8dtuRJfCzrZ0ecDV3jNhi70IYegk=
Subject key identifier: 46:01:F2:23:9D:30:3D:E5:37:8D:30:91:6C:72:15:17:D7:1E:DC:04
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 019930B5F435DF325F8DBC31640C0A89F1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 1679
Signing time: Tue 09 Sep 2025 23:00:54 +0000
Manifest this update: Tue 09 Sep 2025 23:00:54 +0000
Manifest next update: Wed 10 Sep 2025 23:00:54 +0000
Files and hashes: 1: 7kCB1J_rNDVtgNFDQBz-ZFXo6aA.roa (hash: j6xn4MHIGZVJXA81hfabdadaay1xFRv4GfnwCa5VtAQ=)
2: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: UdFM3max9arn+rvL8zhJILB3rdyH7v6GORM2ub8K8Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:b5:f4:35:df:32:5f:8d:bc:31:64:0c:0a:89:f1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Sep 9 23:00:54 2025 GMT
Not After : Sep 10 23:00:54 2025 GMT
Subject: CN=4601f2239d303de5378d30916c721517d71edc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:96:74:5f:a9:1a:bc:07:9d:86:2a:10:f5:d1:
23:89:e8:b9:6e:f4:52:55:5c:1d:19:e7:a6:2c:ff:
4c:29:7c:0d:28:aa:ec:81:0e:b5:d3:97:16:de:ea:
58:a9:4c:b4:b3:34:4d:7f:8f:70:7d:da:bd:08:10:
a4:3d:0c:5a:23:bf:31:f7:07:de:e2:09:31:94:29:
0a:9c:dc:4f:dc:19:55:c3:57:30:d5:20:7a:f7:98:
f2:26:21:ff:5c:be:0f:17:83:59:44:f0:bc:57:c1:
8c:1a:a6:bb:66:3e:25:dd:51:00:ec:4a:b4:2f:1e:
c8:54:f8:30:bf:dc:8e:21:cf:0f:2b:f5:1f:27:49:
96:0b:42:b7:36:dd:87:47:e0:38:35:dc:80:09:f3:
b7:ec:ad:cb:c4:02:17:3e:fa:ad:f8:e8:8a:3f:51:
72:32:d3:76:a1:4e:49:5b:7e:5c:f1:89:b2:e2:23:
14:ef:8a:36:87:99:1a:df:0c:ac:1f:eb:bd:b3:9c:
db:13:48:fc:a3:57:af:b3:4b:54:4f:c6:73:77:ee:
1f:be:b0:b9:13:25:cd:22:5f:48:7d:43:28:35:44:
bb:0a:49:c3:23:24:10:f1:89:9c:bb:0b:5b:23:ee:
79:fc:cc:f3:6a:07:58:26:89:de:9d:ae:cf:3b:d7:
25:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:01:F2:23:9D:30:3D:E5:37:8D:30:91:6C:72:15:17:D7:1E:DC:04
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:aa:b2:5a:d6:14:2b:f6:af:3f:74:9f:7c:7c:a1:33:d3:04:
d1:84:a2:cc:28:5c:f1:72:9a:3a:4e:cf:ae:79:be:df:a1:f3:
c3:01:b4:44:dd:75:44:62:1d:6d:63:0f:7f:5b:ed:31:b3:28:
33:44:79:d6:e7:1e:1d:55:92:d3:a0:d8:c0:45:0e:e3:1b:69:
16:86:6d:d8:c6:73:dd:7f:72:6a:e4:65:27:56:f4:5a:e7:97:
e7:3f:30:01:a3:61:6f:80:28:9b:30:dc:02:f2:ab:59:13:8b:
22:09:1c:94:b3:c9:16:cb:38:29:17:ef:69:1e:96:72:13:48:
19:92:3b:ff:fd:6a:72:69:0b:b5:24:93:51:21:18:8d:ea:50:
8a:12:36:bc:dc:71:45:17:53:2d:b1:d4:ad:b7:c9:bf:a4:7c:
6a:60:26:8f:92:ef:b5:16:77:cd:74:0a:d4:2d:2a:4d:2d:fd:
b0:32:92:6e:e4:7c:24:2f:5e:15:08:93:51:f2:3d:85:11:c4:
a0:9b:6b:ab:4a:73:97:71:90:34:8b:e2:f4:4b:4a:78:bd:5b:
54:bb:f5:97:7d:3a:2c:d9:4a:b1:dd:1b:c7:6a:41:f1:f4:16:
03:71:7d:75:54:11:41:dc:e6:12:fe:45:b8:e2:94:a3:8d:2e:
f0:ab:3f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:50:09 2025 by rpki-client