Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
File: TnKscetFB6wKZSpUWY2uRR_jP0c.mft (raw, json)
Hash identifier: or2x88wA6G5FqlZT8tIeJR37DSK3RbPBtwRHPBr1ZZs=
Subject key identifier: 32:8D:B6:E0:0D:FD:90:11:C8:9C:16:24:C1:79:1C:82:A2:DB:7D:EA
Authority key identifier: 4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
Certificate issuer: /CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Certificate serial: 019921E76429E2884357E28853A60076E566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
Manifest number: 139C
Signing time: Sun 07 Sep 2025 02:00:36 +0000
Manifest this update: Sun 07 Sep 2025 02:00:36 +0000
Manifest next update: Mon 08 Sep 2025 02:00:36 +0000
Files and hashes: 1: 4zuoqc0Glu6ApY4rQHmNAlxxavo.roa (hash: qDD4JCBpI34S2Q624/ndlMxJa6qHAv5moxaFgFJvL3I=)
2: TnKscetFB6wKZSpUWY2uRR_jP0c.crl (hash: p6BVyX63uqJ87KXQ1he2aLZPwJkZBXG7BKmfOPjbY3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:64:29:e2:88:43:57:e2:88:53:a6:00:76:e5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Validity
Not Before: Sep 7 02:00:36 2025 GMT
Not After : Sep 8 02:00:36 2025 GMT
Subject: CN=328db6e00dfd9011c89c1624c1791c82a2db7dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:32:22:e9:ff:76:b7:48:e6:90:33:bc:3f:39:
a9:45:c0:c7:af:44:2d:37:c8:df:2c:30:fb:5f:69:
f6:d7:e4:90:2f:4c:d9:c2:ec:90:07:8e:f9:fb:9e:
e6:32:8f:39:0b:76:45:0a:62:ea:e2:f6:b6:63:47:
6e:2a:c1:fa:8b:00:2a:eb:89:3c:fb:7b:93:ca:77:
03:95:2b:ca:ef:3b:6b:23:31:98:c9:fc:77:fd:dd:
32:38:24:26:66:de:cc:48:c5:9a:82:4a:fc:78:91:
ad:60:65:c9:77:63:28:a6:28:bb:ee:f1:9d:73:ba:
58:2d:81:e6:93:25:5d:ad:74:ab:d7:24:86:4e:48:
a2:32:5b:43:3c:3c:10:47:24:14:1f:25:e4:bd:ef:
1a:1e:e7:3c:46:38:5c:a7:f6:90:56:67:de:46:0b:
fe:50:37:20:52:c9:20:b0:67:88:75:b6:08:ca:d6:
ba:38:d6:d1:b6:75:12:a3:54:58:f2:2c:a6:ae:09:
19:25:69:1a:65:9e:7f:eb:3a:54:b2:5e:d4:85:0a:
20:d2:51:69:5f:c6:db:b1:ea:3a:16:98:a2:14:81:
11:93:94:7c:2d:dc:1a:f3:33:c1:d3:16:bc:82:3f:
ca:57:13:22:69:0f:9e:58:28:0a:61:48:4e:82:dc:
00:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8D:B6:E0:0D:FD:90:11:C8:9C:16:24:C1:79:1C:82:A2:DB:7D:EA
X509v3 Authority Key Identifier:
keyid:4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5b:d2:21:7f:12:16:82:23:ea:9d:8e:65:06:88:8d:84:68:
17:88:96:0e:b3:9e:89:d6:d9:9a:28:8c:c8:a0:37:68:45:67:
0f:f4:39:6a:b2:02:33:0f:b1:f7:88:1b:bf:d7:5b:4d:7a:20:
23:5c:5b:1c:bc:de:11:d0:18:d9:e4:8e:a3:c8:46:46:32:b7:
7e:38:da:b7:94:fc:31:b3:20:d6:85:fd:88:a5:6e:f9:64:9b:
13:c0:27:21:32:05:8e:f9:32:57:ec:d3:59:ca:28:85:9e:a7:
71:0e:e9:9e:43:53:32:09:13:0c:5a:ea:62:26:b9:c0:4a:42:
30:1a:9c:ff:3c:ba:1b:3c:ac:c5:af:c0:ea:05:fc:75:63:d6:
e0:6b:1f:c9:0e:1a:44:df:7d:c6:31:13:94:33:21:fb:d1:08:
b9:e3:7d:b3:4d:6e:68:7d:a3:05:1f:a8:f4:91:04:6c:18:96:
36:2c:5a:fc:dc:c4:b5:4e:10:45:21:fc:cb:d4:54:82:05:24:
81:bc:32:b0:0c:c2:37:7c:20:5b:98:d2:f7:58:e5:d4:a1:06:
67:58:b5:52:c9:6e:0f:78:07:5c:52:a1:13:15:68:14:d9:f5:
c9:8f:c0:d7:38:0b:6c:dc:93:42:b0:f6:70:c0:c7:6b:f2:20:
e6:9d:a7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:15 2025 by rpki-client