Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
File: tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft (raw, json)
Hash identifier: rcqpd16j67pykjNc2kk+Sxk0ukXVR0pCr/FWlgpO09w=
Subject key identifier: C6:33:23:CD:28:8F:AC:4D:CE:B5:47:7F:4B:0F:17:9C:C2:1E:9E:F9
Authority key identifier: B4:0D:84:9C:C4:3B:73:2D:AB:66:41:FC:6F:D5:A4:DB:3A:2D:B9:47
Certificate issuer: /CN=b40d849cc43b732dab6641fc6fd5a4db3a2db947
Certificate serial: 0198D8515B74075BDCF067A595B4AEAA3B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
Manifest number: 09E3
Signing time: Sat 23 Aug 2025 19:04:26 +0000
Manifest this update: Sat 23 Aug 2025 19:04:26 +0000
Manifest next update: Sun 24 Aug 2025 19:04:26 +0000
Files and hashes: 1: tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl (hash: bfEKooVLToBrleJ1hw3nvEfsR5FA3aMcofC0cS9NJQU=)
2: x7aEXzfMRzlzp6VorB64R028Jvk.roa (hash: 3aOt7CTs1p/zJJSbWQR2//U36Y0+Zh2Kxl00BzPCEXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:51:5b:74:07:5b:dc:f0:67:a5:95:b4:ae:aa:3b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d849cc43b732dab6641fc6fd5a4db3a2db947
Validity
Not Before: Aug 23 19:04:26 2025 GMT
Not After : Aug 24 19:04:26 2025 GMT
Subject: CN=c63323cd288fac4dceb5477f4b0f179cc21e9ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3b:84:2c:1a:be:e7:4c:86:2a:ef:e6:76:6a:
d7:67:c5:fe:1f:f6:bf:eb:be:8e:27:8e:76:3b:ef:
4b:58:71:e3:4f:c5:a7:60:b5:65:7a:1e:f1:18:41:
73:3a:56:d2:b5:2a:47:53:8f:d6:be:52:81:43:e1:
57:3e:a7:a7:8c:b1:16:8f:38:96:29:56:28:f0:cd:
28:d3:da:0a:05:cf:27:83:4e:45:1f:e4:f7:6e:78:
ca:71:b3:66:c6:8f:80:57:b9:67:6f:8a:a5:67:c4:
8c:ab:b0:e3:fe:6f:e6:98:16:95:74:81:fe:14:17:
9b:5a:d1:2a:38:b5:9d:b7:5d:d1:6c:10:97:78:d3:
ac:8a:f9:e9:25:86:94:0a:08:48:36:ec:6a:f2:d1:
c3:2a:9a:db:e6:be:62:64:4a:ff:9f:0c:17:2f:e3:
f9:e6:d3:81:82:83:35:e4:ed:b7:c8:08:6f:10:f2:
23:b9:b4:9e:f9:54:3b:ec:e6:22:7f:45:26:a9:4d:
18:43:bf:14:bb:78:7c:13:a3:16:29:ea:7c:fd:f3:
61:61:a6:02:2f:f7:2f:d3:b4:5b:ee:ce:3c:37:b2:
0b:e4:b7:42:57:ab:11:a6:de:8f:13:4b:f8:2c:30:
6c:48:34:8f:bc:c3:aa:b4:cb:c6:d8:29:3f:f5:be:
25:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:33:23:CD:28:8F:AC:4D:CE:B5:47:7F:4B:0F:17:9C:C2:1E:9E:F9
X509v3 Authority Key Identifier:
keyid:B4:0D:84:9C:C4:3B:73:2D:AB:66:41:FC:6F:D5:A4:DB:3A:2D:B9:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d6:40:35:01:e7:ad:43:7b:2e:32:37:89:be:12:89:f2:2c:
01:e8:1c:db:99:4f:e5:23:ad:da:b3:b7:f3:58:c9:96:e1:ed:
5b:3c:f8:1b:d4:ef:95:ba:c3:93:2a:da:c8:64:5f:36:13:a3:
2b:2c:9e:f7:db:8a:06:38:bf:20:6a:3b:80:aa:67:b8:55:b2:
d8:d2:41:dc:97:db:80:d0:8b:10:8a:e0:16:95:16:76:41:af:
0d:3d:3d:f9:eb:c7:cf:fb:94:80:b4:2b:68:c8:c4:df:ca:f6:
5b:d8:fe:06:e1:51:ce:86:7a:e2:77:6b:1c:75:4e:a9:a4:ab:
da:72:34:f7:09:52:c5:39:dc:63:56:65:aa:58:25:13:06:43:
d7:a1:11:a3:99:5e:c7:20:e2:e5:83:5a:e0:b8:2a:a5:c9:86:
cc:97:48:58:37:42:82:9c:1f:8c:ab:d3:88:73:20:ca:2a:20:
10:52:c4:d3:0c:7b:b7:c0:74:f6:15:2f:6e:54:33:b9:89:fc:
66:29:e9:d5:20:9f:1f:30:bf:6f:2b:91:42:84:cf:7d:f0:b3:
b6:cf:ff:7f:86:25:0f:7f:ea:9a:e1:15:09:4f:00:dc:e7:25:
d1:27:b5:7f:8d:88:9b:a5:88:f2:2e:39:45:e1:79:10:a2:15:
5e:db:20:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:09:37 2025 by rpki-client