Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
File: TWh9higIIltFn6OZ5l-KBpRpq6M.mft (raw, json)
Hash identifier: hNp0YHL5TrxGFtZSFO3F5WBfB+j+FZKVSjSIYe0T+W8=
Subject key identifier: BF:87:75:4E:6E:B8:08:F2:FD:4F:B3:AA:03:7C:7F:91:B0:E8:C8:1A
Authority key identifier: 4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
Certificate issuer: /CN=4d687d862808225b459fa399e65f8a069469aba3
Certificate serial: 0198D515906E8D679262A2B3B0547E94EAF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
Manifest number: 15DA
Signing time: Sat 23 Aug 2025 04:00:16 +0000
Manifest this update: Sat 23 Aug 2025 04:00:16 +0000
Manifest next update: Sun 24 Aug 2025 04:00:16 +0000
Files and hashes: 1: TWh9higIIltFn6OZ5l-KBpRpq6M.crl (hash: fIdCdp0y0PKRxMH7gqrjs7JBLPeKf4HUHOBSGKCmxn4=)
2: yj8S8MOtSmVKNjXl11Yr8esDgtY.roa (hash: px/AqUdCFaeUdcOlWlEpkaK3sSjZNzpfw2t/zU4ncMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:90:6e:8d:67:92:62:a2:b3:b0:54:7e:94:ea:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d687d862808225b459fa399e65f8a069469aba3
Validity
Not Before: Aug 23 04:00:16 2025 GMT
Not After : Aug 24 04:00:16 2025 GMT
Subject: CN=bf87754e6eb808f2fd4fb3aa037c7f91b0e8c81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:91:65:9b:93:30:77:b8:69:31:94:67:15:28:
38:86:57:af:0f:a8:d6:3f:c1:1c:5b:ca:b2:fc:47:
7c:e3:bd:bc:48:da:f4:46:90:f6:83:d5:d9:84:40:
1b:28:69:86:c0:5a:50:4d:94:74:84:b2:75:77:37:
8a:96:a6:b7:ad:d9:ad:cc:97:08:61:55:29:fd:df:
23:23:8f:73:4a:85:4c:3e:06:dc:61:ad:50:88:a9:
4a:07:ca:0d:5e:2f:26:fd:e0:e5:a4:6f:96:78:04:
ef:24:59:09:a1:43:01:36:69:d0:40:7c:da:f6:ff:
21:c1:ca:db:34:86:8a:7c:f5:79:6f:97:9e:06:18:
fc:59:2f:4c:d5:ee:2f:7b:76:d2:67:33:33:87:f9:
bd:ef:c9:47:1d:a8:ae:de:8a:ce:31:f6:ba:86:a3:
e2:f7:9b:84:38:c8:41:52:90:cc:c1:f9:57:d5:be:
59:d3:e3:ac:c1:ba:79:35:3f:eb:d3:ac:83:3d:fd:
3e:14:31:e1:02:b4:ba:ee:c7:49:15:35:2d:ae:0e:
f6:48:e1:dd:91:b5:6c:2f:e8:68:41:76:82:60:40:
67:a5:bd:f9:e2:1c:64:cb:3d:32:9f:c0:f8:29:32:
0b:19:01:d1:8c:5d:f0:06:eb:0b:d2:99:00:f3:01:
fb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:87:75:4E:6E:B8:08:F2:FD:4F:B3:AA:03:7C:7F:91:B0:E8:C8:1A
X509v3 Authority Key Identifier:
keyid:4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:bc:03:2e:96:63:b0:9a:ab:5c:67:e2:9f:de:9a:63:05:b7:
ec:25:59:71:b2:b1:d6:fd:ad:47:01:a1:24:88:ab:db:38:c6:
5c:7a:d9:f1:a0:a6:28:79:a0:1e:47:88:35:4c:f7:ed:f5:7c:
63:25:c8:d8:41:ed:15:84:b5:f0:9c:e8:47:bd:6b:ee:2b:a0:
47:30:44:f7:8b:76:34:c1:02:2d:99:84:a8:83:42:c1:16:1b:
91:d6:70:24:3d:4c:b0:c1:a4:26:4a:42:09:c1:b7:38:00:65:
f9:87:f0:59:b6:06:1c:7a:fe:ce:4e:6d:ce:b1:6d:cb:53:c7:
75:47:79:7d:f2:f4:d6:d0:c7:94:36:97:7e:47:14:3c:52:3c:
7f:db:43:09:0f:67:d6:c5:fe:9c:f8:5d:74:f6:ca:f7:1f:34:
f0:06:c7:6e:9f:c3:ba:d4:a1:33:bf:12:b4:dd:6e:4c:05:70:
a8:4e:4a:b7:7a:7f:e7:61:f5:3c:eb:ca:e2:f3:7e:68:5d:53:
a6:26:01:a1:0e:0c:ac:2f:c5:5c:c7:cd:ae:77:87:d8:5a:2b:
fe:b5:14:ee:bc:30:db:75:f3:1b:90:6d:1a:ef:25:ed:15:dd:
1d:86:75:0e:e4:5b:66:7f:15:20:45:2c:50:4a:93:fb:1d:95:
4c:af:fd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:07 2025 by rpki-client