Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
File: 1-TmwPxKU69NaOxXWldfpH4y0H6A.mft (raw, json)
Hash identifier: 3TzZAUVeDsR9JMeTnDwE7c2i0cyyYv6OlzDffxCcABE=
Subject key identifier: 08:D4:B0:A7:B6:E8:3A:AB:47:D3:EE:33:FF:81:A6:EC:ED:D7:C3:87
Authority key identifier: F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
Certificate issuer: /CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Certificate serial: 0199FB7C8C7B1FF4A95F2727C88E8E5ABF50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
Manifest number: 132D
Signing time: Sun 19 Oct 2025 08:01:07 +0000
Manifest this update: Sun 19 Oct 2025 08:01:07 +0000
Manifest next update: Mon 20 Oct 2025 08:01:07 +0000
Files and hashes: 1: 1-TmwPxKU69NaOxXWldfpH4y0H6A.crl (hash: EZN7OEnPKyFMwApnkp0U0ch0HAPfO4ed+68bv8ToFzM=)
2: S1K-LNOfEdqMwJPR6JwjXy3twNM.roa (hash: 6+dgtQWWnCxkd6rViHnDLK3NWbLzGQNeNx6DA6f+PL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:8c:7b:1f:f4:a9:5f:27:27:c8:8e:8e:5a:bf:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Validity
Not Before: Oct 19 08:01:07 2025 GMT
Not After : Oct 20 08:01:07 2025 GMT
Subject: CN=08d4b0a7b6e83aab47d3ee33ff81a6ecedd7c387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c8:36:75:91:57:09:fc:11:c6:3b:21:d1:ce:
e6:ae:46:a5:9b:e7:72:74:5e:27:53:e1:bc:3d:84:
02:2f:a0:c6:75:d9:91:81:ff:21:fe:09:6b:11:31:
77:72:fb:a7:9a:17:dd:37:ea:e5:74:7c:1a:3b:f2:
c3:6c:90:6d:ba:f5:d8:1f:c7:aa:4c:34:3b:99:f2:
e0:34:02:ad:a5:04:87:00:46:ed:de:f3:21:04:aa:
e1:58:91:c1:e9:61:5e:87:36:aa:a1:5c:c0:65:cc:
ee:c3:d4:26:de:75:7e:13:8c:cd:47:51:09:0f:a6:
a7:72:98:e3:2b:38:82:a3:b3:b0:2b:93:af:46:d5:
c0:9f:2a:8f:f5:88:87:19:c2:da:f4:b8:4e:4f:e7:
fa:04:cb:fb:71:93:ec:3c:79:d3:41:a1:a9:81:dc:
25:94:42:68:e8:f9:1d:ff:41:ea:46:af:53:89:b1:
64:f8:df:13:1b:0d:65:2a:3b:71:74:4c:31:2b:b5:
57:1d:dd:8d:33:89:04:8f:fc:6a:c5:5f:f1:81:63:
d1:e8:67:68:cc:fa:0f:bc:9e:7d:06:ef:aa:eb:b3:
7e:e1:15:af:19:3b:80:1f:e4:85:1e:1b:29:82:a3:
e0:5f:e0:df:56:0f:1d:6e:b3:78:65:37:65:42:e9:
11:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D4:B0:A7:B6:E8:3A:AB:47:D3:EE:33:FF:81:A6:EC:ED:D7:C3:87
X509v3 Authority Key Identifier:
keyid:F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cc:d2:d8:14:6d:e9:35:28:20:5a:97:95:e3:45:c2:42:46:
e3:cf:88:33:00:1b:3e:f5:39:81:4f:28:72:d3:6c:d4:87:ef:
1f:93:99:16:1b:8b:12:9c:08:5a:c5:51:d5:4d:43:20:d5:ee:
99:80:28:67:a0:04:82:7c:7d:c0:8f:fc:6c:44:60:2d:12:20:
2d:1c:d9:52:d8:dd:f7:fd:f7:d3:be:c9:31:a1:ba:dc:d5:ad:
12:f1:97:bf:b2:22:c8:13:98:65:d4:f4:99:a7:d6:c2:ba:2a:
b0:72:92:c1:97:44:dc:e2:13:97:19:c8:b6:a7:d5:bd:18:b3:
03:fe:25:6a:66:87:84:c2:c8:62:92:dd:e1:6d:6c:35:94:7e:
14:5d:f4:6d:eb:2e:2b:d0:a0:05:fe:22:2c:26:7f:57:bf:98:
1f:f4:41:e1:35:00:73:43:14:64:20:46:c6:78:a7:0c:ff:ee:
ef:73:a0:33:67:d0:21:6e:41:0b:de:76:16:ec:e1:cf:ad:66:
13:65:18:60:0c:04:54:7b:f7:95:ab:88:03:68:5b:60:5c:45:
68:1d:59:b5:c8:00:0d:5d:df:48:37:59:d6:94:26:1b:2e:47:
3d:6e:c7:1b:93:c2:a5:dc:b5:e6:20:08:fe:8e:cd:f6:86:2c:
8d:f4:6c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:04:59 2025 by rpki-client