Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
File: tLB5uhPORqvsf1vD893Ni7hnWQU.mft (raw, json)
Hash identifier: vs1lLCyfL/MVwRYCRLBn/98oE2D/HWWwPHeYbv1jG+c=
Subject key identifier: 9D:36:78:EF:7E:72:83:93:BE:4E:0B:B9:2D:08:FF:30:83:16:78:09
Authority key identifier: B4:B0:79:BA:13:CE:46:AB:EC:7F:5B:C3:F3:DD:CD:8B:B8:67:59:05
Certificate issuer: /CN=b4b079ba13ce46abec7f5bc3f3ddcd8bb8675905
Certificate serial: 019917647BBF346EA6307075ED66C85F50DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
Manifest number: 1669
Signing time: Fri 05 Sep 2025 01:01:25 +0000
Manifest this update: Fri 05 Sep 2025 01:01:25 +0000
Manifest next update: Sat 06 Sep 2025 01:01:25 +0000
Files and hashes: 1: tLB5uhPORqvsf1vD893Ni7hnWQU.crl (hash: RQaJBfx5gKzjarP2z8j8cQnIIw93hCAR1MO7hH9Egzg=)
2: u2BcurtkahmzzbpCvF5G__EHmrQ.roa (hash: sXnsJfkykB72mvD9Mf1AHstwJM/7MpBbK+WiRKqEOhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:7b:bf:34:6e:a6:30:70:75:ed:66:c8:5f:50:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b079ba13ce46abec7f5bc3f3ddcd8bb8675905
Validity
Not Before: Sep 5 01:01:25 2025 GMT
Not After : Sep 6 01:01:25 2025 GMT
Subject: CN=9d3678ef7e728393be4e0bb92d08ff3083167809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:23:ca:fd:37:c6:5a:d3:a0:c2:b6:00:6b:94:
e0:55:9b:f2:ef:2f:59:f2:b5:6b:11:e6:2d:8e:64:
cf:8b:31:4b:89:85:67:ad:18:43:65:33:1f:0c:22:
10:38:3b:e7:6b:8f:10:2b:df:62:c3:c2:83:9f:e0:
88:a7:20:b8:9a:09:cf:df:bd:45:5d:8a:a9:42:13:
a7:9a:7e:4a:05:6f:a3:06:2e:c8:a6:7a:f2:de:05:
0f:49:0e:e6:53:45:55:71:20:6b:a4:bd:cf:ed:3c:
51:72:52:dd:f0:82:a0:7b:b0:54:ff:a6:07:71:80:
a6:c7:42:4d:9d:30:b3:30:04:a6:3e:73:69:04:2f:
63:a7:6a:0d:9a:f9:ca:93:96:67:48:93:c7:f0:b0:
03:5a:fc:0b:fb:39:fe:27:fc:87:94:00:1a:d7:30:
7c:96:ad:a0:b1:be:b0:42:d4:4c:ea:16:6a:28:11:
e8:f0:c2:38:c3:88:ac:7e:5c:99:e5:02:9f:ae:f6:
e3:df:39:86:50:84:7a:71:56:9f:6c:3a:da:6e:f6:
05:e3:8a:ed:59:c5:7d:66:a3:be:8e:9f:e3:88:60:
e0:4c:7a:5d:f2:b7:bb:ea:9a:a6:9c:2e:a8:e8:57:
74:57:2e:ae:ed:f1:7d:b9:b4:6c:f0:bb:ce:e4:60:
9c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:36:78:EF:7E:72:83:93:BE:4E:0B:B9:2D:08:FF:30:83:16:78:09
X509v3 Authority Key Identifier:
keyid:B4:B0:79:BA:13:CE:46:AB:EC:7F:5B:C3:F3:DD:CD:8B:B8:67:59:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:74:2a:ba:43:f0:84:31:d9:f9:07:7e:c7:bb:0c:76:9f:ba:
1d:23:4d:8c:f8:ea:a4:b8:4f:57:19:89:0a:c1:e6:9c:ff:31:
1b:9f:50:90:70:89:95:62:2e:21:b1:c1:2b:eb:0b:31:c6:67:
78:1f:c7:db:ae:40:2f:a5:ba:c2:51:3d:f3:4b:dc:e1:6c:65:
34:a8:e0:0a:be:8d:69:b5:bc:3b:71:e7:53:95:7f:fa:db:e5:
40:82:da:b7:51:57:6b:37:ce:16:05:91:1e:67:22:23:8d:91:
1b:6c:96:30:40:73:3c:0c:d3:04:15:d7:da:d2:0f:c5:4d:0b:
e6:53:e0:b1:2c:9d:b6:36:67:5c:d1:02:bb:dd:74:8f:5a:07:
29:fd:b0:e6:ac:0c:de:8b:1a:67:b2:fb:40:04:97:9a:fe:81:
f9:bb:1f:44:b6:9f:43:8b:cf:62:1d:cd:ad:40:e6:a6:4e:11:
8a:74:89:d0:f8:61:d9:5d:37:3b:88:11:5a:32:07:ab:45:76:
f2:a9:02:72:7c:5e:0b:5e:f3:ce:da:db:e4:ac:c7:a1:8c:02:
06:3e:ef:5e:b2:a2:4c:65:67:3d:07:26:05:a0:a7:c7:50:99:
5f:6f:7f:8d:7e:fb:f9:9a:8e:55:4c:73:0b:ce:d6:6f:ad:86:
3e:c8:f9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:33:06 2025 by rpki-client