Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
File: TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft (raw, json)
Hash identifier: S8tOC5WLczEnss0jDkepEklxzS3NHLziX3Mn4H+rzTM=
Subject key identifier: 81:7A:71:E1:16:12:00:C7:74:E7:C1:DC:30:5E:CB:69:06:AA:AF:9F
Authority key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
Certificate issuer: /CN=4c51636fde905f8521f411479e81321cdcf49049
Certificate serial: 0198D65F769688E86F060EB5BD39955A00CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
Manifest number: 08DA
Signing time: Sat 23 Aug 2025 10:00:37 +0000
Manifest this update: Sat 23 Aug 2025 10:00:37 +0000
Manifest next update: Sun 24 Aug 2025 10:00:37 +0000
Files and hashes: 1: TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl (hash: GIk7EJ8BYnC3uWISaMr0yc5W9BzDp2jm5f/MPw3QRJ4=)
2: k88eKZ3ggVkstFfz6v9jAollFdM.roa (hash: RToXutf5Qdv2Y+G73kPgZr6gfiGthSFW8G2eqnaoH64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:76:96:88:e8:6f:06:0e:b5:bd:39:95:5a:00:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c51636fde905f8521f411479e81321cdcf49049
Validity
Not Before: Aug 23 10:00:37 2025 GMT
Not After : Aug 24 10:00:37 2025 GMT
Subject: CN=817a71e1161200c774e7c1dc305ecb6906aaaf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:04:10:a6:0b:48:7a:73:3b:e1:fb:3b:13:71:
32:5f:34:50:24:18:e5:f7:b3:7c:2f:ed:56:ac:ba:
89:2e:4c:59:02:53:e7:3e:0e:3d:c2:a1:da:8c:b5:
2a:93:18:aa:0e:bc:64:45:62:bc:fa:13:2e:2e:28:
c8:1b:1f:5d:39:15:e6:16:74:04:1b:e6:7d:9d:f3:
fa:d7:5f:e4:4f:f0:b0:2f:48:9f:2c:ad:75:e4:cf:
5c:c9:5e:85:c9:cc:10:47:3c:18:54:0e:f0:41:cd:
50:33:c1:92:4c:6b:42:3e:9a:d2:9e:1c:ab:22:2f:
29:d8:d7:92:4d:11:be:c6:b0:af:18:0b:fc:a6:57:
24:63:6b:91:2a:ac:59:06:1b:9a:e2:a6:68:98:8e:
f9:19:5f:0d:32:f9:c3:e5:a5:47:52:1e:d6:45:de:
b9:51:95:09:07:b3:84:bc:85:da:f7:e3:31:84:8f:
c5:a2:66:e5:01:b6:35:33:89:d8:d1:fb:35:17:2b:
da:d7:31:6b:61:2a:91:ad:cc:c9:80:20:09:a5:25:
5f:82:82:15:43:c3:97:7c:56:86:ba:cf:a3:49:66:
c0:61:16:e6:8e:f8:56:0d:bb:52:50:80:e6:d0:28:
f0:71:ce:b5:38:b7:55:7c:f4:d3:80:c5:0a:8c:74:
94:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7A:71:E1:16:12:00:C7:74:E7:C1:DC:30:5E:CB:69:06:AA:AF:9F
X509v3 Authority Key Identifier:
keyid:4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:56:3e:36:29:02:11:fd:e3:e4:52:d2:dd:f4:f1:ca:e8:9f:
37:b1:13:50:26:aa:76:5b:e0:ea:de:48:c1:cf:ce:88:3e:b2:
c4:15:3e:a7:4c:db:09:4d:4c:95:b0:a1:b9:94:46:8a:c6:32:
ca:22:e1:49:18:61:c4:43:d7:9d:a2:5e:3d:1b:97:de:98:91:
48:6f:33:5a:0f:e0:cd:e5:a8:97:18:1f:ce:e8:d0:f6:3e:dd:
d3:df:4c:3c:51:09:0b:22:f4:7e:00:cd:95:91:01:02:85:b5:
2d:6a:8f:c9:3b:f6:6f:cc:10:30:e1:8e:62:8c:a0:cc:0a:e2:
75:c2:15:27:f2:0c:9c:f7:9a:d9:41:0c:e4:3b:88:bd:16:9c:
40:52:ec:cb:5a:8c:e7:be:20:d8:81:44:45:c9:6a:a8:65:c2:
04:d2:7d:15:c0:2f:69:6a:32:fb:d2:b3:72:64:4b:78:12:95:
7e:66:d7:78:f0:17:2d:20:b6:7b:bb:4a:90:37:76:4c:72:5c:
07:9d:30:05:fd:2f:45:37:11:09:c2:97:42:74:c8:d5:16:5a:
7c:a6:dc:27:60:7e:c3:18:5c:ad:a2:0a:cd:6a:89:36:8a:c4:
9a:39:06:29:07:9e:fe:6d:2b:f3:67:22:d1:b9:d8:a3:74:45:
42:1d:f1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:33:56 2025 by rpki-client