Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
File: TfkmWGAQlO1kmFxkxpUr40FjAc4.mft (raw, json)
Hash identifier: LuYUGIG4hVAc2E2BQvyDqfpJRq4sXN57FTbYFvvST0E=
Subject key identifier: 48:4A:E8:EF:66:F6:5B:F5:12:C8:02:D4:3C:C3:6F:DF:34:59:25:54
Authority key identifier: 4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
Certificate issuer: /CN=4df92658601094ed64985c64c6952be3416301ce
Certificate serial: 019918088147A322DDC0177363D31C9AE055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
Manifest number: 08D7
Signing time: Fri 05 Sep 2025 04:00:34 +0000
Manifest this update: Fri 05 Sep 2025 04:00:34 +0000
Manifest next update: Sat 06 Sep 2025 04:00:34 +0000
Files and hashes: 1: 42VDtF9LMj3RUZlBTr5Tpxb7XhY.roa (hash: 06Fp4iuAbTOsazThfCr6hEmyN81BPyfi3nXeyKKT6d0=)
2: TfkmWGAQlO1kmFxkxpUr40FjAc4.crl (hash: KBzwWf2MYHtOw23izmq/aNB+OmLgu++DrnPah+R/jJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:08:81:47:a3:22:dd:c0:17:73:63:d3:1c:9a:e0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df92658601094ed64985c64c6952be3416301ce
Validity
Not Before: Sep 5 04:00:34 2025 GMT
Not After : Sep 6 04:00:34 2025 GMT
Subject: CN=484ae8ef66f65bf512c802d43cc36fdf34592554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e5:74:9e:49:14:60:3a:95:61:88:95:0b:fe:
55:4e:6d:03:13:dd:4e:83:57:c9:4a:32:b2:59:e5:
96:72:cb:d6:3e:44:3c:ad:87:87:18:13:2a:11:4c:
d3:dd:9d:d2:ed:65:a0:b0:d9:51:ac:9a:bf:64:66:
d3:6f:6a:1a:80:b2:5c:e6:6b:49:bf:24:c8:8b:03:
03:ad:85:e4:f2:62:b2:90:ab:2e:8d:1b:73:88:ac:
2d:d1:f8:62:0d:d0:57:ab:80:2c:6e:89:5b:89:0a:
9a:a7:d0:cc:4b:8f:cf:cc:92:66:78:64:7c:c2:4e:
a2:03:33:7e:c6:cb:70:cd:90:1f:8b:26:bc:43:b5:
16:06:1e:19:6e:c6:59:86:71:de:28:34:85:eb:23:
c3:81:26:fa:68:cb:4d:fc:25:e3:7d:4e:10:18:d7:
cc:40:72:c9:d7:f3:8e:bb:4b:f4:b3:94:a7:0f:7c:
47:16:31:1d:34:d3:bb:79:c2:7b:0b:19:0a:db:b8:
ee:7b:e3:99:8c:99:d7:45:85:68:0e:9d:f1:18:f5:
69:1e:e8:bd:1a:b4:f9:0b:dd:5c:2e:fc:76:87:66:
d7:06:d8:d6:2d:f7:31:d0:32:4f:13:37:e4:d2:38:
dd:38:9c:d9:b4:eb:52:d6:9d:06:86:b6:15:2d:48:
f5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4A:E8:EF:66:F6:5B:F5:12:C8:02:D4:3C:C3:6F:DF:34:59:25:54
X509v3 Authority Key Identifier:
keyid:4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:87:bb:e7:f2:ba:76:31:7a:89:82:6e:ae:a9:68:92:50:8f:
a7:fc:a2:37:79:b4:b1:df:4e:0e:c2:35:0c:79:90:ee:66:b3:
b1:d5:ed:59:e5:87:d2:ce:90:4b:d1:49:fb:56:64:2b:b6:39:
03:88:0f:34:bb:c5:76:30:c6:d5:71:b7:43:fb:20:b4:67:a5:
73:51:fb:76:c7:7a:4e:66:41:4b:4a:32:da:43:57:f4:bd:b7:
ee:ad:3e:c3:82:45:3d:82:81:d6:c8:56:ab:fa:bc:d7:af:ca:
88:4d:df:15:1a:9d:64:10:86:85:e4:5a:ed:81:a0:03:dc:20:
82:e9:50:45:96:5e:05:2a:12:5d:39:27:0f:e8:25:f1:bd:12:
03:13:06:3e:b7:8c:0d:92:97:ee:af:0d:12:0c:49:3e:d7:35:
a6:7d:c1:96:a6:91:26:97:7e:9d:34:df:69:a0:b5:e0:64:68:
5a:2a:9d:37:77:84:d1:19:64:c3:b4:70:53:87:86:d2:02:81:
bd:bb:ba:68:00:d7:14:9b:de:a5:d7:ce:70:c0:c4:5f:ad:7a:
7f:fe:36:39:08:d2:d7:9f:5a:9c:89:da:49:ab:ec:a2:4d:ef:
ed:16:74:4b:79:ee:60:c0:22:b7:8a:11:66:cd:26:50:fa:be:
ac:1e:e2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:39:23 2025 by rpki-client