Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
File: tcr-HjrqL22RHtEHoIqv7peaT1E.mft (raw, json)
Hash identifier: W9vo//gwvJtcGAX9R5fC1otaecyyMBoAN09D67YjjgI=
Subject key identifier: 20:E2:2E:A7:02:0C:E3:43:62:C0:6F:40:9E:15:49:6D:36:7D:1A:13
Authority key identifier: B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
Certificate issuer: /CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Certificate serial: 01987C09A7C7E6A39EFE57884FE2ED1D21BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
Manifest number: 0963
Signing time: Tue 05 Aug 2025 21:01:04 +0000
Manifest this update: Tue 05 Aug 2025 21:01:04 +0000
Manifest next update: Wed 06 Aug 2025 21:01:04 +0000
Files and hashes: 1: RbtpOQvxKOhivyATsaFRApG8DvI.roa (hash: rcUrQ9qXVTCmRSSGNqyeO7AKgTyqtF4rizry0Ad9las=)
2: S6bzH3vR-9_Z8W37FxbGY_bsSRI.roa (hash: mXMMwIa+4CrlkQM+hSljAaJyd1k858ZniaKc/09JBeY=)
3: a0RRgx7_17MRQY0QEGYvnSPepZU.roa (hash: YVzxS9jFVMbMgJf+c2GFQwY/wSVZdg9tW30Q3WHGzsg=)
4: tcr-HjrqL22RHtEHoIqv7peaT1E.crl (hash: sU8GtoeYJ7ceEPk2rsJl8qk7qc2DraPHGtquZQl8HJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:a7:c7:e6:a3:9e:fe:57:88:4f:e2:ed:1d:21:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Validity
Not Before: Aug 5 21:01:04 2025 GMT
Not After : Aug 6 21:01:04 2025 GMT
Subject: CN=20e22ea7020ce34362c06f409e15496d367d1a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3d:6f:3e:a5:6a:f7:2e:2d:ad:6b:78:f7:f8:
be:28:42:c5:bf:8c:b7:9d:76:d5:94:f8:03:9c:e0:
04:ca:5c:97:d7:09:fb:b4:f7:83:74:38:37:75:02:
09:5c:06:20:71:98:b1:3a:96:c3:77:67:c2:8a:f8:
69:ee:76:14:4a:cd:45:f0:5a:41:2d:3c:ae:48:66:
36:7f:b8:4c:28:76:50:78:53:8f:4e:99:17:86:ca:
a0:34:f1:bd:85:30:07:27:b9:41:2e:2e:43:b8:a0:
ff:76:dd:4d:7a:c1:dd:7b:fa:43:33:a0:c8:0b:63:
8b:ff:6b:22:85:00:38:41:03:ce:6b:04:1c:e1:c1:
ea:f3:45:f1:04:dd:a9:2a:64:e4:8d:4c:0a:1f:ff:
84:2b:0e:da:34:ae:3a:d8:d4:96:32:07:a1:e7:10:
e7:40:6f:d4:11:e8:dc:95:e0:bf:19:f5:18:5d:0d:
dd:7a:d8:48:32:3a:c2:76:90:0e:9d:f2:1f:72:4b:
2d:11:eb:22:42:28:08:5f:bc:6d:95:bd:a7:af:5d:
f2:6a:26:d2:e0:df:03:e5:20:fd:7c:1c:6b:9e:fd:
20:25:a2:36:48:65:c3:8a:77:90:e6:19:2c:44:14:
da:86:8d:d9:55:43:95:64:61:dc:a9:78:17:e3:a4:
17:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E2:2E:A7:02:0C:E3:43:62:C0:6F:40:9E:15:49:6D:36:7D:1A:13
X509v3 Authority Key Identifier:
keyid:B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:69:58:28:8f:e5:a6:73:3b:fe:6e:e7:02:68:17:5a:90:00:
c3:37:99:fe:76:fb:1a:17:5e:30:5d:44:78:0e:3e:7d:2a:42:
2e:fc:48:f5:4b:d7:c8:ba:2e:d8:bf:dc:d8:f4:3f:ac:c5:76:
03:f1:58:9e:54:a9:d1:35:4b:5b:40:14:76:11:d0:a1:7f:15:
40:da:4c:56:41:03:d6:67:be:14:fc:98:36:2c:25:69:5b:cf:
9e:47:cb:d5:88:3c:1a:bc:a3:8c:2c:83:19:b3:3f:00:42:81:
b2:17:90:6a:5a:17:39:fb:98:97:47:0f:f5:56:8c:cf:77:1b:
e0:0d:b6:10:23:a1:8f:97:d4:16:6f:2f:8f:70:40:0c:0a:a5:
4a:ee:ee:41:a9:e1:75:df:e6:af:26:7d:2b:46:47:b7:b2:f1:
0b:34:88:19:85:83:0e:8f:08:d1:29:cb:80:5d:fd:42:21:2c:
e3:9d:b0:70:09:bd:be:3a:31:3e:67:f7:cb:dd:36:82:7a:f8:
93:2f:37:0c:c7:5d:ff:95:33:3c:95:e4:45:c3:fa:18:1c:d8:
2c:66:c8:d5:94:5c:7e:bc:ab:15:ab:de:10:50:c0:cd:dd:e7:
b1:f7:c6:48:19:61:9c:c7:6b:02:c0:35:88:e0:90:c8:c5:07:
e1:7c:87:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:14:10 2025 by rpki-client