Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
File: tVNDqiHHSjn81Rg_T99V3EZ56D0.mft (raw, json)
Hash identifier: q8GTVgh4BPiYSat1+JH+oVP+7Di8r1cIQyvXyIk59LI=
Subject key identifier: A3:02:03:0A:E7:DF:1E:FB:59:06:6C:5F:DF:5F:5F:DA:DA:2B:C0:BE
Authority key identifier: B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D
Certificate issuer: /CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d
Certificate serial: 0199221EE56012A53143222060BF52B329F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
Manifest number: 01A9
Signing time: Sun 07 Sep 2025 03:01:14 +0000
Manifest this update: Sun 07 Sep 2025 03:01:14 +0000
Manifest next update: Mon 08 Sep 2025 03:01:14 +0000
Files and hashes: 1: RXmLcd13ajoTVlcEirVukYVayjY.roa (hash: VMYnLhwMDYwO9ah7mzCKDLgq1vs8pRSHkOzi/+9nkdg=)
2: tVNDqiHHSjn81Rg_T99V3EZ56D0.crl (hash: dSBtRZeAfPr9G8pSDh+kr+r90sgNbTDZjWE2lYs9z2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:e5:60:12:a5:31:43:22:20:60:bf:52:b3:29:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d
Validity
Not Before: Sep 7 03:01:14 2025 GMT
Not After : Sep 8 03:01:14 2025 GMT
Subject: CN=a302030ae7df1efb59066c5fdf5f5fdada2bc0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:16:dd:f8:98:ee:fb:6e:ad:7c:2d:81:33:2b:
05:0d:f8:71:f0:39:75:c9:64:bc:1b:0e:43:74:a4:
9b:76:91:23:25:41:fe:09:a4:74:11:01:04:f9:f5:
b1:59:b6:fd:00:4f:48:fc:a8:e3:1d:36:dd:62:c9:
ab:98:d3:13:0c:81:2e:f5:ad:d5:a6:d5:9b:d6:73:
01:c7:f7:93:90:2f:22:64:cd:2f:f4:51:c8:3f:6d:
b8:e2:03:63:bf:fe:4f:98:35:64:ac:fe:cd:e8:b6:
91:7b:b0:9e:65:21:ae:46:90:fc:82:64:b9:ff:75:
3e:8d:33:22:44:ec:e5:78:0a:f1:a3:7c:65:15:f5:
3f:4f:fa:af:e7:7a:04:20:f5:ad:a7:69:ec:40:3c:
67:8c:98:2e:0f:f5:e3:c3:86:0a:43:c7:c6:dd:e3:
b4:e0:a4:cd:84:fb:c7:16:b8:b7:22:b6:3d:fd:d3:
41:a1:39:5f:d2:69:bb:c7:98:41:41:11:a0:ed:67:
b1:8e:2d:9d:68:5f:7e:14:1d:e5:a6:6b:60:87:82:
4d:bd:3b:1d:67:c9:16:7e:f8:0a:ed:6d:75:78:ca:
09:f0:90:66:37:50:f5:cf:09:c4:90:82:57:43:65:
6c:7f:b0:60:ac:67:16:fc:4b:bf:67:83:a3:a5:0d:
a7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:02:03:0A:E7:DF:1E:FB:59:06:6C:5F:DF:5F:5F:DA:DA:2B:C0:BE
X509v3 Authority Key Identifier:
keyid:B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e4:be:f7:14:1e:4b:90:96:e9:cd:ea:ff:ec:ec:e0:2a:d9:
ee:d3:6b:93:66:10:3a:97:4a:ba:87:e3:a9:ba:25:4d:13:17:
fa:37:d3:e6:73:52:06:65:f7:9d:7f:73:fd:44:58:4d:92:b2:
d8:90:55:f9:0a:ab:93:e5:3e:51:e4:8a:a6:d4:c2:48:dd:27:
56:2e:c1:32:19:ae:d3:ce:6c:0e:ff:9c:23:68:dc:69:89:18:
f5:d2:5c:b0:9e:4d:e9:eb:96:31:5e:99:06:1f:38:12:37:33:
0a:81:d1:4d:8b:22:1e:17:08:03:dd:4d:70:3d:d2:e1:28:5b:
86:a0:f1:98:dd:65:9f:da:3d:e5:51:af:c7:5a:23:23:31:54:
1c:1f:f5:dd:c6:a1:5e:8b:69:ce:2b:ec:16:fa:d4:53:79:93:
4a:82:9a:7a:ae:a3:b8:92:7d:79:db:fe:d6:b2:4e:83:f2:1e:
0f:c0:ef:6b:76:32:f8:24:f6:a5:1e:01:6c:8b:57:b3:d4:b2:
41:da:5b:dd:52:66:0e:83:bf:b4:93:b0:e9:73:de:7e:41:d3:
6a:2a:33:ff:41:73:88:71:f2:17:a6:37:24:51:d2:a9:85:bd:
6f:c5:52:8b:a3:19:e4:1c:3a:7d:73:19:47:0a:e4:67:0e:79:
29:37:ab:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:38:57 2025 by rpki-client