Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
File: TdI0IiZKecAxVILtTyfHUTU_Jrs.mft (raw, json)
Hash identifier: OgySVQ1oVmlB84AFJNSbnGDsRD0yr1eHBMhm5mp8ctk=
Subject key identifier: E8:FE:0A:BA:5B:32:27:FA:71:F9:57:EC:2A:73:B5:6B:25:5D:BA:E9
Authority key identifier: 4D:D2:34:22:26:4A:79:C0:31:54:82:ED:4F:27:C7:51:35:3F:26:BB
Certificate issuer: /CN=4dd23422264a79c0315482ed4f27c751353f26bb
Certificate serial: 01992330E610B55B46FC23668A6185999C1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
Manifest number: 07BE
Signing time: Sun 07 Sep 2025 08:00:31 +0000
Manifest this update: Sun 07 Sep 2025 08:00:31 +0000
Manifest next update: Mon 08 Sep 2025 08:00:31 +0000
Files and hashes: 1: TdI0IiZKecAxVILtTyfHUTU_Jrs.crl (hash: i54VmIIRtVRdNWMZJKClSrpO6auTFEowDzJZj9YzsWc=)
2: bJM_lGyoCdHM4Ew-bll92CWr05o.roa (hash: /LNeEVaQM+dKQQyk+FaHOgVJEKHJjoz/8u1g5mTs7vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:e6:10:b5:5b:46:fc:23:66:8a:61:85:99:9c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd23422264a79c0315482ed4f27c751353f26bb
Validity
Not Before: Sep 7 08:00:31 2025 GMT
Not After : Sep 8 08:00:31 2025 GMT
Subject: CN=e8fe0aba5b3227fa71f957ec2a73b56b255dbae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9b:ab:54:3f:c8:20:8b:41:1b:a1:23:d3:60:
40:50:6f:8b:a8:c5:4e:b6:e3:58:8b:2f:e6:bb:8b:
cc:a1:c9:da:de:c9:74:54:2f:04:ac:49:4f:4d:c1:
76:f9:c1:5c:1f:42:0a:98:65:d5:3e:31:5f:78:24:
25:5e:9d:f7:75:dc:8b:1f:41:0a:08:b0:ea:cc:3c:
e9:04:e2:70:61:0c:38:9b:86:9f:9b:1a:0e:5f:93:
38:9d:c8:d2:fd:eb:06:03:58:3c:26:63:41:68:0b:
95:fd:95:d2:1f:79:55:fe:42:a3:01:2a:50:42:e8:
45:0b:a0:46:00:4a:67:46:61:b2:2d:04:a0:81:ea:
7c:5e:3a:ee:05:e3:f3:50:fc:64:31:e6:ac:55:fd:
a8:01:99:be:23:1f:1a:f5:91:cf:83:99:42:6a:84:
35:66:01:c6:91:74:97:e8:cd:e4:61:81:8d:3d:99:
6c:23:24:0b:b3:8b:7d:92:36:fb:db:16:30:ec:29:
2c:d7:6d:0c:90:f4:db:44:ed:ff:ef:4b:32:d3:e1:
4a:1a:22:15:65:be:46:2c:12:bf:a7:13:24:da:05:
1d:8f:97:69:63:0f:37:67:72:9b:cc:dc:05:3a:3e:
06:9f:ad:fd:3b:e2:62:5e:36:c1:ff:f0:2f:d2:80:
c4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FE:0A:BA:5B:32:27:FA:71:F9:57:EC:2A:73:B5:6B:25:5D:BA:E9
X509v3 Authority Key Identifier:
keyid:4D:D2:34:22:26:4A:79:C0:31:54:82:ED:4F:27:C7:51:35:3F:26:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdI0IiZKecAxVILtTyfHUTU_Jrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f5c6ba-170d-47c5-9c7c-1766a277d85b/1/TdI0IiZKecAxVILtTyfHUTU_Jrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9a:58:72:3c:b9:b2:ad:a3:4c:e4:01:c2:e4:7f:7e:a0:9d:
ff:ba:49:88:79:70:24:80:16:79:d8:30:7b:24:e2:2b:ca:ff:
4a:43:20:05:aa:34:a7:79:ac:2b:1c:46:d8:21:3c:d4:28:e4:
05:36:66:16:61:db:00:68:fc:cd:b0:36:3b:8b:03:eb:14:5e:
94:f6:af:46:61:8a:16:4c:e0:e0:cf:71:a7:1f:15:f4:29:a9:
f0:4d:94:97:f7:73:49:9a:1e:f9:fb:24:16:b3:2f:1c:82:be:
e1:0c:67:e9:2b:27:38:ef:b4:a9:1d:0a:68:f1:d1:2c:2c:42:
c4:4b:cb:94:e1:7b:64:d6:3e:8f:fd:36:0f:19:83:f7:c2:7d:
55:b4:39:f1:51:79:33:06:4d:23:c6:a9:1b:c1:e6:e7:27:3e:
86:1d:9a:2b:92:e0:fd:66:ce:86:91:bd:3c:6b:fa:43:a8:46:
77:2d:7f:18:10:3e:1e:37:40:0c:14:b3:7d:d0:61:0d:ac:8e:
e0:4b:17:70:38:26:73:ca:c5:36:4f:67:55:98:a6:bd:7a:fd:
f8:0e:74:b2:e1:61:15:13:10:06:c5:5d:dc:8f:5f:9a:94:f4:
38:f9:22:8e:e8:b7:9b:ad:82:5a:d9:ce:26:4d:92:7e:39:91:
dd:ea:26:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:11 2025 by rpki-client