Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
File: TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft (raw, json)
Hash identifier: jfTzBLFBdVRNaankzFuFdIuE24hwP7cSG1wCULypUt0=
Subject key identifier: 68:EA:9B:93:98:5C:80:30:E1:05:C8:C2:F7:A7:5A:2E:E4:1F:09:2F
Authority key identifier: 4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
Certificate issuer: /CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Certificate serial: 0199C3448AAF40C374B10612690596DBC4E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
Manifest number: 1378
Signing time: Wed 08 Oct 2025 10:01:12 +0000
Manifest this update: Wed 08 Oct 2025 10:01:12 +0000
Manifest next update: Thu 09 Oct 2025 10:01:12 +0000
Files and hashes: 1: 7mVZwCskyJUQ7gPBL_F_4nbKWrk.roa (hash: Spe2b/mS1SAvEHCJH7XwFJrcW3b1Bvz1bY1SvDC0yz8=)
2: TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl (hash: iyDUmgeIZ2fKxD3uYqWnBEUPN5TdrfnHZi8vl3yFsVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:44:8a:af:40:c3:74:b1:06:12:69:05:96:db:c4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Validity
Not Before: Oct 8 10:01:12 2025 GMT
Not After : Oct 9 10:01:12 2025 GMT
Subject: CN=68ea9b93985c8030e105c8c2f7a75a2ee41f092f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:53:e7:7e:b1:d0:1b:1d:4c:e7:9f:72:6e:76:
e0:1e:f8:c2:a6:70:67:8b:c2:1c:ba:04:48:31:c6:
e6:ad:6a:85:34:b0:05:c3:d0:4d:b9:d8:05:a0:7f:
6e:39:2b:40:f1:e6:87:82:02:21:18:3a:40:11:75:
69:b8:7b:6b:0b:ed:1e:92:27:b2:ba:67:9e:b9:d6:
66:a0:97:7d:51:e2:22:d6:7a:db:f7:88:77:52:52:
b5:ce:fb:e2:b6:9c:bf:34:69:c7:a6:1a:21:7f:0f:
45:ad:19:1f:7a:9d:da:49:59:22:a0:b8:b2:6b:c4:
2b:ac:14:05:76:a5:7a:29:fd:5d:20:57:5b:a7:40:
59:59:96:5e:e4:3e:a1:a4:b9:5b:e4:4b:7a:4e:a7:
01:03:4d:b3:81:04:31:e8:bf:0b:83:cb:62:56:32:
be:e6:11:6f:b3:26:34:3c:9a:20:91:32:c0:b3:7c:
c7:4c:a9:b6:74:29:b6:3c:b3:0c:d2:af:22:d0:cb:
e2:ca:4e:06:ac:34:2a:02:e9:ea:67:01:b1:15:fd:
b7:62:95:47:81:23:10:11:ae:5a:c7:aa:12:28:84:
db:d0:d0:d6:8d:72:32:fd:2a:fa:7f:39:81:b5:a6:
ad:72:fc:99:14:bc:75:7a:71:f6:20:99:63:d7:f0:
b5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EA:9B:93:98:5C:80:30:E1:05:C8:C2:F7:A7:5A:2E:E4:1F:09:2F
X509v3 Authority Key Identifier:
keyid:4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5e:6e:6d:69:31:41:fc:65:7e:42:32:89:18:83:1f:35:34:
c0:d6:f8:da:48:4b:0e:e7:11:01:68:2e:70:88:44:0a:45:80:
e7:97:e2:07:15:25:1c:cd:fd:a1:7f:4e:19:1a:9d:a5:83:14:
6e:5e:6d:52:3e:99:14:d5:9f:96:84:2b:e9:02:cf:ce:7c:cf:
76:87:4c:46:b0:4e:9a:54:e9:f7:69:f6:97:ef:76:e2:07:91:
e9:c5:c8:84:a8:e1:b7:c5:ab:d6:f7:d7:6d:d5:a6:6c:2e:2a:
e4:31:8d:a0:27:63:ce:4b:f5:1f:70:d7:00:db:41:fd:b7:2b:
c9:75:e2:2a:9d:cc:c5:79:05:e8:c1:b9:c0:45:d5:72:e0:27:
0b:b4:15:2b:25:8d:ea:56:35:69:2f:ce:e2:62:1c:61:cd:74:
f4:7e:58:56:4a:01:03:8d:1d:88:03:38:c3:4c:4e:72:d5:2f:
ce:7c:2a:97:ae:23:98:59:e8:b2:a8:14:b4:65:51:cd:93:8f:
6b:7a:cd:7f:23:e7:13:50:86:43:1f:fb:e1:0c:b7:f8:f6:06:
a7:71:f5:4b:cb:a4:7b:8b:77:d7:42:48:35:49:00:1d:f0:37:
a4:54:df:a4:cd:13:11:56:73:0f:7b:98:5f:3d:4c:91:2a:30:
9f:0c:db:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:47:25 2025 by rpki-client