Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
File: TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft (raw, json)
Hash identifier: PMw9PXkSS8z0UmHy1j2QeQSHhQ3+ZAL3Gubv6cisOqo=
Subject key identifier: 0E:47:3A:3A:34:CA:C2:50:77:6C:92:DE:C3:DC:DA:1A:52:D8:DB:EE
Authority key identifier: 4D:2F:4D:10:8A:C1:84:BD:1B:53:2F:F8:8F:C6:64:4A:DE:16:DA:75
Certificate issuer: /CN=4d2f4d108ac184bd1b532ff88fc6644ade16da75
Certificate serial: 0198D4E022C41A1CC6414B22E45CB24EB2DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
Manifest number: 09D1
Signing time: Sat 23 Aug 2025 03:01:55 +0000
Manifest this update: Sat 23 Aug 2025 03:01:55 +0000
Manifest next update: Sun 24 Aug 2025 03:01:55 +0000
Files and hashes: 1: I7ruHZ7I_t5FamkSP1UVHK-D1aQ.roa (hash: 0bp5i/w7MdfWSRoD3vMh3eYqQ/2+5IAaWheLS0shHT0=)
2: TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl (hash: uUfXHl1KVn8HRn6OC1e+Rp7y7Arh1A6jVIK1FtMOWik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:22:c4:1a:1c:c6:41:4b:22:e4:5c:b2:4e:b2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2f4d108ac184bd1b532ff88fc6644ade16da75
Validity
Not Before: Aug 23 03:01:55 2025 GMT
Not After : Aug 24 03:01:55 2025 GMT
Subject: CN=0e473a3a34cac250776c92dec3dcda1a52d8dbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:05:b8:5c:d3:cc:3b:2e:5d:ea:d6:54:50:
1a:d5:98:cd:51:79:46:ee:53:18:a1:e1:ef:61:93:
44:68:17:2a:8d:d6:ed:61:19:af:4b:5e:46:6f:b3:
2f:d2:b7:0e:ba:22:4f:58:20:5d:8a:59:d2:3d:bb:
fe:d4:d4:4a:20:9e:0d:08:44:9d:ff:93:8a:36:ed:
39:a9:00:b6:dd:d3:ce:97:74:16:51:cc:5b:7f:16:
40:2f:fd:3d:0f:2d:7d:bd:31:94:8f:43:38:07:dd:
6e:05:37:b7:3d:3c:0c:ee:34:c5:24:62:8c:6a:71:
6c:55:08:84:cf:fd:46:5d:d7:ef:47:8f:f4:7f:76:
de:ba:9e:6b:0c:b0:95:61:7b:36:5f:28:d1:4d:80:
cb:c0:c8:1d:d3:e8:57:d9:62:bc:26:b2:ca:c1:72:
ad:bd:1d:c2:16:17:c9:04:4f:15:18:55:94:f7:1e:
c3:01:3c:dc:7a:18:9b:6a:4e:18:de:17:ec:fa:43:
40:8c:6f:7c:0b:87:db:ad:38:7b:0b:81:9c:4a:8f:
15:72:02:22:ac:08:ef:ef:09:01:7a:dc:ff:3f:60:
a1:23:97:79:7e:a1:f6:42:d3:9a:e1:87:b2:f5:1e:
78:0a:61:e1:6a:23:61:e6:6c:41:ae:28:32:ae:80:
af:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:47:3A:3A:34:CA:C2:50:77:6C:92:DE:C3:DC:DA:1A:52:D8:DB:EE
X509v3 Authority Key Identifier:
keyid:4D:2F:4D:10:8A:C1:84:BD:1B:53:2F:F8:8F:C6:64:4A:DE:16:DA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:15:1f:88:76:3e:47:5e:16:9a:b6:32:0a:e5:e3:c9:ce:d2:
b1:16:8b:72:8b:e4:c0:b3:7a:ba:bf:4e:ef:be:e9:68:5c:6d:
61:4c:07:da:03:16:59:f8:a1:31:db:d8:26:2f:06:bc:8c:38:
df:3d:fd:de:8b:bd:78:3a:39:4c:83:e0:48:d9:10:de:eb:85:
8b:5e:bc:db:c5:13:1a:97:b2:dd:00:e4:72:db:39:40:ea:2a:
4d:e4:b7:84:b3:af:9b:fb:a1:86:48:76:fc:39:42:7f:1f:b9:
83:69:2a:67:49:cd:e7:ea:5d:8e:f2:3c:b3:65:17:37:dd:b5:
b6:0d:bd:91:ba:46:57:85:73:7b:ce:25:1b:b3:43:da:fd:56:
99:4a:51:f9:01:4a:7c:60:4e:b2:50:8f:07:77:a8:cc:18:fd:
bd:87:bc:a4:74:a7:0e:e5:78:88:5d:a5:39:36:c4:7e:5e:26:
30:78:53:1b:ab:44:ef:c7:93:5d:af:e8:fd:09:6e:8b:f6:06:
94:49:43:bd:78:f8:58:62:fc:10:3f:13:ed:10:c7:23:2e:ce:
eb:d7:1a:8e:0a:3d:ec:27:6e:fe:92:6c:ae:fb:f1:8a:32:19:
93:72:bc:ca:d7:6b:e2:ab:ac:bb:03:1a:f3:bc:25:a9:6e:bb:
41:18:69:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:39 2025 by rpki-client