Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
File: tLuK74sObZxv9jIIB_WpAHWY7rA.mft (raw, json)
Hash identifier: NjoCGitggjC1Rei3OQ8AhzGB0I4ve3fTfHyr/2NVo0I=
Subject key identifier: 6E:2C:C3:9A:77:3C:84:C3:5A:6A:9F:94:1D:53:65:E3:86:22:98:9C
Authority key identifier: B4:BB:8A:EF:8B:0E:6D:9C:6F:F6:32:08:07:F5:A9:00:75:98:EE:B0
Certificate issuer: /CN=b4bb8aef8b0e6d9c6ff6320807f5a9007598eeb0
Certificate serial: 01992C6B5E837DEAD0B510D40C8685FA1DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLuK74sObZxv9jIIB_WpAHWY7rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
Manifest number: 0909
Signing time: Tue 09 Sep 2025 03:00:58 +0000
Manifest this update: Tue 09 Sep 2025 03:00:58 +0000
Manifest next update: Wed 10 Sep 2025 03:00:58 +0000
Files and hashes: 1: 8ntjSMus2ECR1PU4tfABg9_MTk0.roa (hash: NThyxZZCDawOVk5/yNg7I3X8M08Hqe7vBd2lZGQPe1c=)
2: tLuK74sObZxv9jIIB_WpAHWY7rA.crl (hash: Ji5T/QucZgrk8Awy19/L8vYIiLzI4TkYPx9tX0eGNOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLuK74sObZxv9jIIB_WpAHWY7rA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:6b:5e:83:7d:ea:d0:b5:10:d4:0c:86:85:fa:1d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bb8aef8b0e6d9c6ff6320807f5a9007598eeb0
Validity
Not Before: Sep 9 03:00:58 2025 GMT
Not After : Sep 10 03:00:58 2025 GMT
Subject: CN=6e2cc39a773c84c35a6a9f941d5365e38622989c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:57:c1:a8:48:5a:95:88:68:ea:65:d5:99:
47:df:a5:85:d4:dc:cc:e5:e1:d0:b4:e5:66:97:85:
36:70:d7:88:e9:52:09:7b:3b:27:40:f2:1b:51:9f:
14:26:2f:55:12:68:5c:69:85:30:b4:8b:79:d4:71:
9d:c0:69:e5:3b:cb:f6:25:02:6e:38:c3:d4:87:6f:
08:be:1f:61:63:41:eb:0e:3d:c1:2a:63:c1:52:bc:
89:8f:7e:92:73:5b:d5:31:f7:79:09:92:d6:58:6f:
d1:25:e6:f9:7b:f8:0d:84:fd:fc:bb:a1:c8:4f:a4:
68:fb:e3:04:40:1b:ee:d9:2f:29:38:f0:2c:89:3a:
dd:dd:5b:1a:43:0e:64:0a:96:cb:f1:fd:85:1f:48:
a9:ff:9f:7e:8c:8e:77:f1:d7:b4:72:71:88:09:e6:
7f:2d:b7:fa:45:7d:72:f0:86:53:f6:55:39:39:b6:
76:86:cd:5a:19:20:8c:9d:01:7d:93:b0:c1:ec:8a:
8e:f8:ca:12:6a:ca:d3:f2:4a:6b:49:d7:0c:5d:ec:
ce:0e:7a:6a:51:6f:f2:c8:fc:8b:cf:35:13:c9:49:
d1:ff:7a:c5:8a:2f:bc:d1:03:af:d2:cf:82:dc:57:
6a:43:6b:62:22:54:db:c6:dc:b6:32:5d:fb:83:bb:
0b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2C:C3:9A:77:3C:84:C3:5A:6A:9F:94:1D:53:65:E3:86:22:98:9C
X509v3 Authority Key Identifier:
keyid:B4:BB:8A:EF:8B:0E:6D:9C:6F:F6:32:08:07:F5:A9:00:75:98:EE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLuK74sObZxv9jIIB_WpAHWY7rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9a891-b818-499a-971c-bc5456962f2d/1/tLuK74sObZxv9jIIB_WpAHWY7rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9f:e2:cc:e7:31:78:6d:c6:ed:f1:89:e6:a8:18:19:fc:f3:
50:48:88:78:d1:90:7b:c5:eb:5a:6b:56:2e:53:6b:81:ef:4f:
a3:d4:79:0f:42:22:3b:27:35:7b:60:8c:50:42:d5:4d:66:c9:
62:69:3d:26:ad:6e:f2:d6:9d:15:1b:f7:fa:86:40:34:3d:ae:
62:30:28:f5:8f:20:8d:d4:91:7c:8e:04:6c:f8:35:59:90:d6:
6d:fb:c6:da:1f:1a:9b:16:fa:4a:44:1b:fe:6c:ad:63:c9:79:
22:3b:89:a0:04:7c:7a:57:57:87:d5:0b:60:4d:2f:f6:1e:da:
ba:bf:49:b4:0a:ab:60:de:4b:58:6b:d3:fc:ab:16:8f:44:eb:
bf:0e:00:71:8e:5e:f2:0b:21:80:66:20:a4:e5:a1:41:67:6e:
b7:7f:fd:60:7b:ca:6c:c1:8e:bd:b2:2e:b2:08:3e:92:eb:79:
b3:60:9c:5a:dd:3c:f6:57:44:cd:c3:7c:45:7b:cf:52:43:ec:
3a:cb:14:bd:cf:67:f8:25:8f:e0:b7:84:be:6e:95:1b:d9:7f:
2a:0a:30:70:42:53:b5:f8:3b:28:d5:b1:71:cf:28:03:e5:f5:
5e:56:df:f2:a0:df:b9:4f:a5:5c:33:6c:a2:20:0a:2f:83:6e:
47:be:f3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:20:11 2025 by rpki-client