Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
File: TD6do79ZOALMgz_l2UelJpb1jI0.mft (raw, json)
Hash identifier: DnQ5Bad+7EQz4l2Gh7IQhVhVbnGxvXpOn9ujP+rl69c=
Subject key identifier: 65:DE:57:50:69:CE:E1:85:B4:7E:42:8B:AC:62:1E:1C:B3:35:1B:72
Authority key identifier: 4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
Certificate issuer: /CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Certificate serial: 0199239F821728A1AC209B22E4A9B0BC152F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
Manifest number: 15B2
Signing time: Sun 07 Sep 2025 10:01:20 +0000
Manifest this update: Sun 07 Sep 2025 10:01:20 +0000
Manifest next update: Mon 08 Sep 2025 10:01:20 +0000
Files and hashes: 1: EWuOguv1P9Rw7Q-U1qAW9dBN2No.roa (hash: rN97euvDe5WCriK9EjJsNO5wn2cUGLmPhpQvNqo71q8=)
2: TD6do79ZOALMgz_l2UelJpb1jI0.crl (hash: dr8EixV7GJwEeQfOQ0Rwigx9QCNKLVAvNAgvrlY51nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:82:17:28:a1:ac:20:9b:22:e4:a9:b0:bc:15:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Validity
Not Before: Sep 7 10:01:20 2025 GMT
Not After : Sep 8 10:01:20 2025 GMT
Subject: CN=65de575069cee185b47e428bac621e1cb3351b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f8:1e:80:05:20:6e:bc:6e:fe:18:a3:7e:a5:
8f:93:2f:cf:eb:6d:79:9a:25:68:9b:45:75:13:a2:
c8:4f:e1:36:e1:4c:1e:80:98:f2:68:f9:2c:00:93:
2d:d6:f2:5c:7e:b8:5f:7d:26:34:60:3f:49:ad:e8:
01:57:9a:47:49:13:fd:fb:84:3b:40:f8:14:2c:07:
5e:c7:6b:cc:96:f7:08:49:aa:94:04:49:0e:f8:b1:
c6:1f:b8:58:a2:4a:25:52:b7:15:4d:4e:6a:cf:9b:
68:83:4c:af:db:d9:c0:91:a8:48:24:30:85:ae:a6:
69:93:5b:db:0a:63:49:78:1c:dd:95:c3:2e:ae:d7:
da:37:ef:11:82:c9:ba:43:6a:b1:00:21:79:83:52:
75:e5:2e:9c:ef:3e:97:39:90:1f:20:70:dd:72:b5:
0b:79:04:4e:75:f6:c1:e1:e8:0e:a2:c9:35:32:fd:
bb:3e:ce:a4:32:eb:6e:ca:25:06:84:d9:57:b8:99:
06:f0:23:be:25:d0:d5:89:f8:79:54:a3:56:fe:01:
81:88:fe:0c:e5:f1:b9:0b:12:4e:e6:ae:4a:9a:4d:
a7:6a:c0:72:51:d7:e2:93:52:7a:95:df:1a:2b:a0:
52:a8:78:84:40:4c:00:32:ec:77:36:d8:99:68:f9:
ca:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DE:57:50:69:CE:E1:85:B4:7E:42:8B:AC:62:1E:1C:B3:35:1B:72
X509v3 Authority Key Identifier:
keyid:4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:17:d8:dc:dc:b3:3e:43:df:73:6e:16:22:85:4e:8a:e2:6a:
62:0e:56:cb:50:fa:93:09:1b:b5:70:7d:a0:5f:d3:61:84:20:
98:48:54:4a:13:61:0d:82:c2:dd:76:6b:5a:e5:ba:e3:80:6a:
79:e5:39:c8:6f:f8:b0:af:78:5a:51:e8:32:2a:11:a9:63:18:
b5:f8:af:ed:11:24:18:ca:22:bf:83:1f:d3:71:d4:61:26:c3:
c6:42:72:eb:79:4c:42:e8:83:d5:9b:42:35:f8:5d:67:de:06:
db:4f:37:1b:21:9c:fd:a8:19:e4:cf:dd:96:42:36:df:b8:f5:
bf:52:2d:b4:2a:ab:be:29:82:e1:ef:48:b6:35:2b:d1:f7:41:
c6:0a:96:45:e9:68:50:42:21:9a:7f:14:e5:03:72:62:22:97:
c5:9f:72:90:64:5c:0f:bb:b5:e3:21:c5:a9:2f:a0:24:7c:34:
17:83:8d:07:59:36:3d:22:bd:e6:8d:f9:07:01:19:d4:15:61:
1c:3b:a0:5b:8e:56:74:7e:6e:d5:57:9b:6c:4f:1d:b8:b2:6a:
c9:45:ef:fe:8c:41:13:4d:49:50:f8:ca:a2:a0:fb:86:bc:ac:
7a:85:f5:99:7d:01:3d:19:9c:0f:1c:4e:a7:d9:01:25:d2:da:
37:0f:95:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:36 2025 by rpki-client