Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
File: TBdAzvl0ncKw9fiM3xA02oHWBtw.mft (raw, json)
Hash identifier: Kc+KqqqYAhBlBqaSkQBTNLrZb8K9SwV/6QcYXvnGJ+c=
Subject key identifier: 67:43:A4:E9:D2:65:AF:21:2C:12:5B:9B:BB:30:7A:7D:A1:FB:13:67
Authority key identifier: 4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
Certificate issuer: /CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Certificate serial: 0198D5839CB8AAEB61D58CFA43141B80F7E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
Manifest number: 0FC8
Signing time: Sat 23 Aug 2025 06:00:29 +0000
Manifest this update: Sat 23 Aug 2025 06:00:29 +0000
Manifest next update: Sun 24 Aug 2025 06:00:29 +0000
Files and hashes: 1: 9UfG7ZfqsnxXdNjOVBB4EufGuiU.roa (hash: nBGGqWZhxqHLJh+Oq/1SCIlZ0ENh9e+rLU6y/LQvQNA=)
2: TBdAzvl0ncKw9fiM3xA02oHWBtw.crl (hash: wpmQZ/heOrAZB+kbOsdBSuFLXmUolHwZZdphWGvyTzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:9c:b8:aa:eb:61:d5:8c:fa:43:14:1b:80:f7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Validity
Not Before: Aug 23 06:00:29 2025 GMT
Not After : Aug 24 06:00:29 2025 GMT
Subject: CN=6743a4e9d265af212c125b9bbb307a7da1fb1367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7e:1e:86:fc:ae:39:ab:80:d0:34:49:32:48:
9a:9a:7d:5d:22:c5:2c:2a:0b:78:d7:41:4d:ae:09:
95:84:4b:48:82:e3:0d:a4:bd:62:9c:f1:41:64:bb:
db:3d:ed:c1:ba:29:4e:82:59:33:fc:e7:a7:5c:61:
2c:73:82:49:14:f0:6b:46:32:d0:a7:d7:33:2d:82:
7e:af:56:7a:2c:c7:f2:d5:18:e7:63:62:cd:7a:da:
9b:44:ee:6a:ca:c6:d2:7a:92:8f:5b:2f:24:85:bd:
59:39:48:2d:bc:d9:62:09:95:08:68:e7:66:02:e5:
e2:2b:c5:96:aa:84:6d:da:d0:8e:55:4d:47:33:f3:
10:13:57:e4:22:ce:de:a4:05:d8:46:be:68:16:39:
03:56:f0:ea:ec:ff:3b:63:f7:bf:b1:74:ac:a2:94:
e2:28:c5:fc:31:27:f2:e4:30:40:7f:49:9f:28:24:
bc:29:01:d7:5e:7f:63:73:be:85:2c:e8:5b:3b:a1:
4d:50:69:83:32:9a:27:db:39:c7:e2:9c:ad:73:36:
16:76:c6:46:e6:09:3d:33:76:79:18:59:b2:41:c9:
01:75:c4:ac:33:97:d1:ba:e1:01:33:c2:e2:6d:26:
10:f9:bd:e7:96:c7:3b:60:83:30:e8:37:18:06:a5:
a7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:43:A4:E9:D2:65:AF:21:2C:12:5B:9B:BB:30:7A:7D:A1:FB:13:67
X509v3 Authority Key Identifier:
keyid:4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9f:be:ea:85:30:a4:c4:89:10:6a:e5:dc:bc:68:29:8b:2c:
4f:ce:cc:03:22:01:1c:66:ad:fd:bf:5c:47:11:45:55:1a:f0:
73:d2:36:bf:0a:6c:b7:c5:80:63:34:3f:0c:92:00:7f:5c:44:
9e:41:71:76:d3:31:31:87:44:e4:a5:6e:e9:f1:85:77:e3:3b:
4f:36:e7:85:09:a2:fa:c1:1c:00:ed:d0:e7:b3:8d:c9:aa:56:
8b:36:8f:48:b3:af:f0:01:34:ee:fd:f1:5a:c4:57:8e:25:2c:
f7:b8:52:ae:90:03:41:9a:e2:9d:ca:ea:39:cc:dd:51:d6:f0:
54:5d:e5:0d:4f:53:70:c2:62:24:c8:0d:6c:16:00:e7:59:4e:
12:48:ef:de:7e:d3:5f:72:18:3e:65:66:d3:3d:d4:f6:c9:23:
a0:8a:76:ce:c2:1a:bf:04:83:05:6d:e7:29:ee:95:ee:02:ef:
6b:81:31:4d:e7:a2:13:43:66:7a:aa:1c:d1:97:8f:88:7c:65:
b1:7d:69:16:f5:44:b2:51:1f:2f:ad:47:67:3e:ab:ab:99:9b:
99:07:59:55:1a:b0:db:65:92:09:cc:a4:4c:f8:92:e1:b0:cb:
75:1b:d7:d0:d6:bd:45:d5:d1:ae:5c:50:34:db:88:a3:69:07:
f3:c0:3a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:24 2025 by rpki-client