Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
File: TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft (raw, json)
Hash identifier: ew6jcbwdduxUumyfaShP/dv5fA0Z4mYHoBn1t9BbU70=
Subject key identifier: BD:CE:6B:C0:DB:E0:67:A6:97:E3:9A:60:38:6A:B3:64:C3:80:B7:CF
Authority key identifier: 4D:F1:81:1F:39:97:B9:50:AC:89:E4:10:EA:3E:F0:18:A6:73:D5:FC
Certificate issuer: /CN=4df1811f3997b950ac89e410ea3ef018a673d5fc
Certificate serial: 0198D6613349FF851933B4D62EA9E9EE2C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
Manifest number: 0609
Signing time: Sat 23 Aug 2025 10:02:30 +0000
Manifest this update: Sat 23 Aug 2025 10:02:30 +0000
Manifest next update: Sun 24 Aug 2025 10:02:30 +0000
Files and hashes: 1: 4m_ZlqWE1YEBP4kWtbELic7ECzg.roa (hash: t8PO7dqvDfBV4dwcfBXHsLynSbU2oXoJqnNbzqZG81g=)
2: TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl (hash: wPDmNqUc76OAuzkLLI5UkkLo4CKQU19IOwi4SFs8bBA=)
3: risExVobQciJpjckh7R5a6pHayQ.roa (hash: smtSJjRXs0E72dzCfhCCARBzkZPKWKCqhHgp8E/C6HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:33:49:ff:85:19:33:b4:d6:2e:a9:e9:ee:2c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df1811f3997b950ac89e410ea3ef018a673d5fc
Validity
Not Before: Aug 23 10:02:30 2025 GMT
Not After : Aug 24 10:02:30 2025 GMT
Subject: CN=bdce6bc0dbe067a697e39a60386ab364c380b7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:07:6d:57:a2:f3:c5:88:80:e0:1a:63:f0:38:
16:d8:e3:07:91:98:79:3a:71:94:bb:e1:1a:63:23:
e6:29:60:9b:c9:aa:87:12:53:81:23:52:f3:ee:83:
70:5d:7f:e3:87:86:fe:85:b2:ae:78:d9:58:6f:36:
83:7e:57:59:c2:d4:26:4e:e5:30:96:a8:23:a6:0e:
1d:d6:7f:23:d7:ae:08:a6:48:fd:94:13:01:67:81:
09:f6:f1:59:bd:83:80:05:55:27:c6:b4:ff:98:0c:
25:fe:ca:f3:a3:50:06:8b:b5:54:8a:c9:6b:e2:8b:
a9:09:ce:9e:11:65:8b:5a:b9:13:b2:30:2d:82:02:
b6:01:c8:e1:b7:fa:77:56:b5:19:b9:f0:e6:ff:0c:
85:cd:f0:13:0a:fa:a0:59:a3:bc:60:ad:11:9a:52:
06:30:8a:a8:68:a7:15:ff:b2:d5:19:95:ae:6b:19:
ee:b0:13:55:79:a8:8d:21:d7:78:62:3a:63:e9:12:
d6:7d:67:37:9a:6c:65:84:b0:02:cd:b6:bf:d7:5f:
24:87:09:58:2b:39:c6:b4:00:c5:dd:97:b5:ae:61:
7e:bd:e9:80:c3:bb:9e:df:fc:5c:49:c6:38:c4:2f:
c8:7d:7f:67:75:44:7e:0e:f5:a8:2e:9b:5c:93:e2:
8a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CE:6B:C0:DB:E0:67:A6:97:E3:9A:60:38:6A:B3:64:C3:80:B7:CF
X509v3 Authority Key Identifier:
keyid:4D:F1:81:1F:39:97:B9:50:AC:89:E4:10:EA:3E:F0:18:A6:73:D5:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ae:ab:6e:3f:14:5d:15:e3:46:ba:60:59:51:97:fd:3f:5e:
58:26:80:c9:b3:e4:77:07:59:e3:9c:51:70:78:f8:3b:30:3e:
40:33:69:25:28:e6:1d:ef:ad:59:0d:2e:65:a4:44:9e:4e:4a:
8e:b7:f0:5b:67:e5:10:bd:12:dd:f7:f0:b6:ee:30:ab:89:3a:
1c:12:16:08:8e:b8:34:27:23:8e:4e:72:73:8f:fe:b3:5a:7c:
c6:7d:45:dc:5f:fa:17:3e:a9:27:d6:e9:8d:3c:e9:15:82:26:
3a:cf:ba:d1:b4:23:58:4e:cd:e2:05:51:a7:2c:d8:b5:c9:f8:
95:e3:98:8f:62:14:08:b9:02:9e:51:8e:ea:9c:82:52:72:fa:
0c:1b:09:ea:a5:07:d6:90:d5:57:0e:d2:bd:e3:b9:49:48:73:
d9:57:f1:2b:2c:c7:2f:dd:a2:4c:a4:36:69:bd:56:56:49:7c:
b6:fd:46:4d:92:df:69:cd:70:9c:1f:d7:db:1a:a2:0d:b2:ae:
c0:32:f2:30:10:08:0a:da:c4:e6:5d:9a:e3:b4:1c:76:fa:34:
24:55:6a:11:9e:f5:92:f4:91:c4:87:23:d8:5f:e4:8f:48:07:
9d:6b:1e:8d:d2:a4:4d:d8:f7:49:7f:d2:1f:1f:98:9e:34:31:
99:36:5c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:17 2025 by rpki-client