Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json)
Hash identifier: p4ei0WlCt15chUzRtmgjtVdebrrzW2nO0gamzGH0tjc=
Subject key identifier: AB:2E:80:BD:7D:C8:40:54:31:53:75:CE:B2:7A:5B:D5:01:70:52:55
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 0199530B2609A4BC2363E5B47AA38F95A404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
Manifest number: 1692
Signing time: Tue 16 Sep 2025 15:01:03 +0000
Manifest this update: Tue 16 Sep 2025 15:01:03 +0000
Manifest next update: Wed 17 Sep 2025 15:01:03 +0000
Files and hashes: 1: F0xtYGfQ_s_LJkUkk89IHcL9J5M.roa (hash: JVjlGGRIJlPuTdOW/N8SfdRvr3fAH3HHybxJ5aP4RD0=)
2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: MmshopZF6NqsqeebgI2y7KWogWMpCDRK5SciXjMZ8RY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:0b:26:09:a4:bc:23:63:e5:b4:7a:a3:8f:95:a4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: Sep 16 15:01:03 2025 GMT
Not After : Sep 17 15:01:03 2025 GMT
Subject: CN=ab2e80bd7dc84054315375ceb27a5bd501705255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9c:0f:dd:e2:d4:be:5e:29:39:43:81:ad:08:
9a:64:59:db:89:a7:0c:7a:2b:f4:4d:96:9d:aa:4b:
c5:ce:a6:3e:0c:84:84:df:c9:56:22:2b:1e:eb:6b:
97:80:bc:3b:78:f8:b1:14:67:ba:87:7f:68:91:28:
31:db:8a:4c:68:a3:cc:b8:62:ce:a7:86:84:af:c7:
c3:52:be:c8:3b:10:90:24:03:fc:36:86:30:52:44:
0e:b0:83:1a:c3:f5:0c:33:98:84:62:09:94:07:61:
96:8d:89:46:23:ca:1d:17:28:bf:d2:a2:d7:52:db:
0f:0c:b8:74:5d:a2:be:72:49:47:63:8b:bf:e9:0e:
58:17:70:f3:d5:1c:8b:29:3f:1d:27:c2:3d:7a:b5:
07:70:8c:24:6e:a7:e6:c1:c8:e7:cd:9e:2c:6c:ff:
8f:c5:70:25:0c:22:51:01:0f:8a:49:77:73:16:aa:
71:73:d0:f8:ed:c1:6c:ab:a0:13:79:19:a8:cd:b1:
fb:9a:36:10:7e:53:27:54:17:79:63:9f:c9:96:be:
84:f9:96:54:ec:34:a9:95:0e:eb:59:58:0b:e6:a5:
0d:d5:70:31:92:2e:e9:88:2d:5c:f0:2a:84:a6:01:
ae:a2:db:ec:8b:e8:3e:d9:9b:f2:d3:82:7c:82:f9:
40:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2E:80:BD:7D:C8:40:54:31:53:75:CE:B2:7A:5B:D5:01:70:52:55
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:39:7f:1e:32:30:2f:a1:1e:83:5b:e4:c6:f1:1f:50:79:2a:
76:8b:87:1e:3a:b2:16:b1:b9:df:90:b4:1c:1b:bf:44:60:1c:
21:cf:e8:f3:95:a9:ac:05:14:31:2a:a4:5e:7c:0b:2f:66:3f:
dc:14:7f:35:85:f6:63:1a:6d:bf:d3:f6:f6:65:2a:65:6c:91:
57:30:5f:32:48:9c:f0:b8:28:bc:0a:5c:ba:5b:e1:31:5a:1d:
fd:65:dc:ff:c2:ca:ad:d1:d8:25:e8:cd:0c:0f:c5:05:3e:a5:
bb:ab:45:2b:76:87:04:f3:83:67:f6:15:ee:ae:58:0e:15:a7:
7d:dc:e4:33:76:de:fd:c4:83:19:aa:74:63:c9:fa:3b:7a:95:
df:bc:3a:64:91:56:51:b6:32:af:33:e0:d5:b9:f0:fb:1c:80:
24:de:e1:cd:81:43:92:ad:9e:36:1c:da:71:68:7f:08:83:cb:
2b:09:f1:62:c6:be:2f:d9:82:e9:31:1c:0c:2f:51:9e:a9:ee:
d5:01:af:04:90:ee:fe:c7:96:54:d6:c9:92:2d:64:b6:ae:6e:
a1:ed:ff:d6:d6:4a:c4:64:75:1b:8f:a1:30:0b:53:c8:93:15:
10:d2:19:68:a5:e2:b0:f6:73:2e:d6:78:f0:4f:e4:87:83:a7:
04:35:d5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 21:23:29 2025 by rpki-client