Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
File: tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft (raw, json)
Hash identifier: PT4rypQ+ClioX+exqZ8TCrEQ7hQdL/fwvJD43yEANS4=
Subject key identifier: 89:6B:50:7C:7B:53:3D:E8:3A:94:C1:E1:12:7C:00:CB:D5:2D:57:46
Authority key identifier: B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05
Certificate issuer: /CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
Certificate serial: 0199228C7BBC28B4817DC64292CB7D375FEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 05:00:55 +0000
Manifest this update: Sun 07 Sep 2025 05:00:55 +0000
Manifest next update: Mon 08 Sep 2025 05:00:55 +0000
Files and hashes: 1: TDDnhsWgxkGdG7BfGlC4CIB8hXc.roa (hash: mAFWPEFNFtu12Nez2hG2dDFI+Ij+KVUdoJCzsE5w8Wg=)
2: tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl (hash: ys6bQy2J2XNtE8UA7dFtr7kpuW3mycz6XkTN4lKEY6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:7b:bc:28:b4:81:7d:c6:42:92:cb:7d:37:5f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
Validity
Not Before: Sep 7 05:00:55 2025 GMT
Not After : Sep 8 05:00:55 2025 GMT
Subject: CN=896b507c7b533de83a94c1e1127c00cbd52d5746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:c3:db:b2:b7:4a:42:d8:72:13:a7:a2:76:
60:72:99:92:af:da:5c:39:fd:d0:a9:1e:8a:8f:0c:
2f:42:2f:c9:7a:58:2b:d7:94:97:3c:a1:0f:88:87:
77:1b:a2:b3:53:01:67:7b:40:e4:09:bf:bb:09:61:
32:7b:7b:d0:a5:f5:25:3e:6e:38:03:e7:e9:ac:d0:
43:fd:72:dd:8b:9e:81:7e:07:22:ee:c0:59:69:3a:
11:41:e2:8c:c9:53:35:32:b3:8e:74:69:55:87:97:
6a:a1:75:24:a5:9e:5b:e5:b6:42:54:72:fb:7c:71:
10:3f:52:c8:99:ee:95:89:a2:a6:d3:47:77:00:c8:
65:2d:b6:61:38:9a:b6:01:c9:18:40:26:b3:3c:4e:
df:ec:0e:9e:22:37:3d:a0:0c:9e:13:9b:44:bd:9f:
fe:a9:f8:e0:ea:01:e6:92:f3:3b:c8:e7:d5:36:d4:
5a:9e:24:47:90:ae:3c:e5:0b:89:c2:6f:ff:98:6f:
66:46:7f:bc:2c:69:b2:50:34:73:ed:ec:32:0f:af:
76:6b:20:b4:da:c2:76:ed:0e:95:37:07:1a:49:19:
f6:79:7e:3a:a9:6b:f6:9c:9b:8f:c1:03:75:70:72:
90:a9:51:3b:b2:87:19:97:ea:2d:21:a7:ca:61:f1:
f1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6B:50:7C:7B:53:3D:E8:3A:94:C1:E1:12:7C:00:CB:D5:2D:57:46
X509v3 Authority Key Identifier:
keyid:B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ac:d8:e0:d1:af:bc:13:e2:d2:0a:26:7c:00:37:e7:87:d1:
7e:db:f0:d5:69:52:41:30:76:c4:90:30:ad:3f:2b:9e:c9:3c:
cb:a5:60:fc:64:2a:f0:f0:cc:66:a7:00:0f:06:ed:08:2f:50:
12:ae:36:9a:5e:35:56:62:ed:08:73:88:f2:59:66:e7:30:e0:
c2:d4:0c:99:ae:00:2f:55:2a:9a:84:aa:b6:2f:a6:ea:b2:50:
95:8b:ef:c9:38:1b:08:c5:b4:d6:5d:65:02:8f:97:11:cd:53:
ce:26:f3:86:bb:95:25:ba:af:e6:3f:a7:07:92:71:00:6a:f0:
fe:95:13:b4:f0:a4:f0:8f:6d:9f:34:a5:c2:9d:9a:c6:7b:25:
df:7d:71:0a:73:4e:c9:91:4a:8c:f9:f6:10:28:16:6a:94:63:
56:51:c1:80:cd:da:57:60:f7:1e:46:2e:a4:3e:4e:28:1d:15:
9d:c9:3c:9f:50:9d:69:c3:32:f9:5a:eb:f6:92:d9:80:25:6c:
8d:90:f9:9b:b4:1e:d3:fb:72:1f:9c:fe:6f:bf:1c:ea:df:bb:
9d:2c:e5:18:79:0c:a0:33:45:22:79:db:78:93:ae:9c:c1:31:
3d:a3:bb:2f:e9:90:1f:dc:b4:cc:14:48:d7:d4:40:00:93:ca:
25:d7:4e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:53:24 2025 by rpki-client