Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: GZAnu4O8iUEgXmECpGRXAHJz7f5ELzdRcz6Uquj1SBA=
Subject key identifier: 3F:6A:66:07:EC:70:84:83:22:9C:69:FE:00:F3:2D:4A:CE:98:0A:D0
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 019935375AD7766351DA885C6F8371F6ED84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 0B31
Signing time: Wed 10 Sep 2025 20:00:44 +0000
Manifest this update: Wed 10 Sep 2025 20:00:44 +0000
Manifest next update: Thu 11 Sep 2025 20:00:44 +0000
Files and hashes: 1: E8fqlMMExB61QIsEKMENcZNpWcs.roa (hash: BmnUAt4AevLzEKuzLNe+ibP+z5vcZguaEireBbRJdHM=)
2: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: ijQlYRQT8R3HfV9fCzzeYJexTmm0KQI/1bYgDfoO2sE=)
3: gXlhbbxVLQVqCMGvhejieNdtoBY.roa (hash: 8u7C6SqKmEB/oIEa7cYGrPkrur0B3bFj0WV0Kh36+qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:5a:d7:76:63:51:da:88:5c:6f:83:71:f6:ed:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Sep 10 20:00:44 2025 GMT
Not After : Sep 11 20:00:44 2025 GMT
Subject: CN=3f6a6607ec708483229c69fe00f32d4ace980ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:a9:e9:6f:4f:43:ff:34:58:8f:69:d9:29:
a4:59:cc:19:fa:30:44:6d:4b:4e:3d:e9:fb:ca:11:
73:87:3b:7b:10:76:28:b8:25:d1:db:f5:a6:3a:d2:
9e:e1:8f:b0:70:1e:69:b3:95:a3:e4:25:7a:d0:00:
f4:7a:f9:10:ec:5d:67:a2:05:c0:81:09:ba:d7:06:
ef:17:da:31:73:5c:d1:6d:50:cd:10:f4:e2:0e:52:
ec:40:81:e5:ed:0d:99:ab:1f:95:bc:ed:fd:99:57:
bc:06:62:c4:d0:f7:0a:7c:a6:5c:6f:81:61:87:a6:
f8:2a:62:47:5f:e2:bd:1d:d4:7b:e8:fe:4f:03:b9:
93:05:89:bd:73:cb:92:a4:e7:04:cf:b9:3f:89:74:
4c:fb:8b:09:cf:7d:f4:1b:30:89:99:e2:fe:1b:60:
ae:15:41:27:1e:e1:22:04:58:b8:92:68:87:30:91:
49:62:94:f5:64:6f:5d:81:8e:c1:1c:4c:1c:9d:33:
e3:2b:33:d3:4c:91:d1:80:36:85:6c:23:72:b9:c6:
ea:96:6e:c9:5d:3c:e2:69:d9:1b:50:82:95:b3:06:
de:e7:69:24:db:4e:fb:0a:c0:19:68:8e:70:5c:b6:
4b:a9:ff:ad:e9:17:5f:d4:cc:25:1f:ee:5c:74:6f:
5c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6A:66:07:EC:70:84:83:22:9C:69:FE:00:F3:2D:4A:CE:98:0A:D0
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:73:47:5a:f8:96:41:fd:94:34:25:a9:bb:f4:e2:ef:87:9b:
ec:35:4c:1c:4f:97:a4:3c:00:7f:57:13:f9:be:52:4b:c6:fc:
1b:9c:39:ad:b9:b3:dd:9c:a7:01:5d:85:6d:a1:e2:27:d0:23:
de:97:13:04:bb:8c:94:a5:78:95:c0:98:1d:ca:23:a2:c2:8e:
ab:15:61:d8:f5:db:85:51:95:55:3f:80:61:86:ee:ae:d3:c2:
a7:cc:90:69:5d:df:84:0f:04:18:ca:29:f8:b9:d2:a5:6f:98:
ad:3a:1e:a1:95:ee:61:29:c3:57:a4:5b:d1:c4:c0:c9:d1:f9:
01:95:d2:a0:d3:4e:92:ec:a1:ed:37:f0:3a:e8:e5:d5:eb:ca:
9b:7c:61:e0:d3:d5:8d:a6:d9:b5:6e:f2:f2:fa:c0:56:06:d3:
0d:42:2d:95:d7:4f:70:7f:94:06:fa:e3:d2:3b:98:5d:ea:0a:
50:b6:b9:bd:3c:4f:01:d8:96:5d:48:1a:19:71:ed:63:bd:00:
9c:7b:2d:7f:cb:47:61:7b:cb:b0:9c:d0:c5:8a:13:af:9f:e1:
85:6f:e7:e8:a5:d4:d4:cc:3d:2c:44:c3:e9:2d:05:9b:5a:64:
58:0a:62:58:fa:ae:2c:e7:54:d4:63:64:8f:3e:e4:18:51:2d:
b6:53:3f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:32:52 2025 by rpki-client