Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
File: TAcbrZKeNisGK4nIf6QbXe2k_8A.mft (raw, json)
Hash identifier: v15+VEn0fRCCNoJQ87/5PUkYjT/YocZoSVX+5oNWwKM=
Subject key identifier: 41:59:11:46:4E:DE:14:D0:F5:31:3E:8D:3B:9C:A5:62:CF:1B:0D:7C
Authority key identifier: 4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
Certificate issuer: /CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Certificate serial: 0199240D2BB48065E0FB46DCBF9843888E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
Manifest number: 13B5
Signing time: Sun 07 Sep 2025 12:01:06 +0000
Manifest this update: Sun 07 Sep 2025 12:01:06 +0000
Manifest next update: Mon 08 Sep 2025 12:01:06 +0000
Files and hashes: 1: Q7AhmlPF0P4he1DdnyBzxO1UbNg.roa (hash: taA8dfVnJrloOBeiFJz3Gf4qdbtYPfCeh6aOOG2s/PY=)
2: TAcbrZKeNisGK4nIf6QbXe2k_8A.crl (hash: np6x2gN9ce/KCM792im9WAOp0mCGT/M2B8fAM/Q5DHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:2b:b4:80:65:e0:fb:46:dc:bf:98:43:88:8e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Validity
Not Before: Sep 7 12:01:06 2025 GMT
Not After : Sep 8 12:01:06 2025 GMT
Subject: CN=415911464ede14d0f5313e8d3b9ca562cf1b0d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3a:58:58:c5:6b:00:39:53:2e:80:42:8b:e1:
d7:a3:6e:97:a8:05:9e:20:c6:25:dd:25:f8:52:75:
fe:22:fb:64:6b:32:80:07:e1:c1:33:09:53:4b:bb:
a9:f7:6a:db:4c:e1:aa:d0:7c:d2:ef:a8:38:6f:c3:
81:3b:74:e7:11:36:98:6a:47:24:35:87:04:84:ae:
af:9f:a0:c0:e7:b5:2f:81:97:d1:d4:38:b3:8e:df:
ed:ad:ab:5a:61:3d:12:8c:90:ab:70:91:82:93:bd:
2f:39:1b:8f:ad:71:f1:58:62:83:1c:33:64:83:43:
ab:c2:0a:00:38:25:eb:e0:c2:d1:f7:ee:9e:1f:1e:
14:fe:1a:70:dc:df:80:08:26:8f:3c:86:b3:7d:ba:
9e:21:8e:e5:8c:2e:c0:a1:62:42:95:31:af:b8:25:
28:bd:e8:12:34:9b:cd:17:ef:fb:63:4b:9b:fa:f8:
35:ed:f3:c8:dd:9e:e0:dc:47:69:c0:0c:67:cf:45:
96:d7:a2:16:42:89:1b:66:68:b9:d8:d9:6a:58:1a:
f2:9f:f0:ae:7d:32:4f:78:00:e1:36:82:a9:9b:45:
2a:df:f3:40:2b:00:b3:53:40:cb:c8:e3:78:a4:fb:
5f:76:15:b3:d4:11:c4:22:7d:64:ff:c9:6f:97:12:
05:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:59:11:46:4E:DE:14:D0:F5:31:3E:8D:3B:9C:A5:62:CF:1B:0D:7C
X509v3 Authority Key Identifier:
keyid:4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e0:32:a0:c3:eb:b0:8b:90:ca:d6:48:5e:8a:fe:1b:3d:81:
cb:36:2a:4c:2f:76:bb:a9:22:ad:57:2c:6b:68:59:17:e2:39:
bf:86:4e:62:aa:2c:82:cd:e4:1e:c8:79:a0:e1:52:01:43:7b:
a7:0e:39:a3:99:96:e6:e4:25:7a:cd:6c:d1:f4:02:14:a0:ff:
82:2d:54:88:48:e9:bb:4d:17:70:30:f3:17:78:76:78:19:5d:
9b:61:c5:81:67:5d:e2:f0:1d:b8:0d:91:a6:f7:68:19:7a:0d:
a1:c6:af:e5:ee:82:06:f9:f5:a7:e3:42:ec:0a:cc:af:9f:3f:
bf:b2:5c:1a:a0:08:4d:92:e5:6b:28:66:3b:77:30:a6:14:6c:
2e:43:56:81:47:28:8d:51:c7:5a:4b:88:17:3d:22:88:63:cd:
f0:3d:7e:72:8e:95:34:67:58:a7:51:b1:b0:c2:5b:8e:30:1f:
c6:a0:5b:45:63:1d:a5:6a:33:ee:cf:54:23:a1:f9:a7:02:be:
3e:69:42:4b:c9:5b:69:5f:9c:b7:42:28:8d:e0:a8:fa:68:d2:
e6:1e:87:34:17:a5:b0:3e:48:f7:10:35:df:11:99:cd:d8:e7:
23:c2:28:a2:3f:88:33:2d:79:85:c5:20:dc:a5:3a:6b:10:41:
33:ba:bc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:54 2025 by rpki-client