Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
File: Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft (raw, json)
Hash identifier: AaSme/eJcTWft5IlTQvGZBMKWtvcIGq4JeZWDgc4zP0=
Subject key identifier: 28:C3:44:37:4D:E1:0D:AE:6B:E7:C0:52:B3:54:BE:2A:65:0E:DC:D2
Authority key identifier: 4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00
Certificate issuer: /CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000
Certificate serial: 01988F227E2FA15BF92467463CE5D37138FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
Manifest number: 40
Signing time: Sat 09 Aug 2025 14:00:59 +0000
Manifest this update: Sat 09 Aug 2025 14:00:59 +0000
Manifest next update: Sun 10 Aug 2025 14:00:59 +0000
Files and hashes: 1: 91ZCHXFl5UUzytD2oCxDOo7Vf-U.roa (hash: GiWWhZLSNM54YFftILgBMiQnN9xd6n0FvV41BvORBF0=)
2: Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl (hash: pjbAvNHeixx2TAj4utVvGPL8Z7gXvUtuCvfQUaqeuNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:22:7e:2f:a1:5b:f9:24:67:46:3c:e5:d3:71:38:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000
Validity
Not Before: Aug 9 14:00:59 2025 GMT
Not After : Aug 10 14:00:59 2025 GMT
Subject: CN=28c344374de10dae6be7c052b354be2a650edcd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:89:e4:9c:f5:d5:32:0a:72:cc:d8:e7:3c:
1e:01:71:46:c6:5e:99:db:d9:dc:3c:4f:d5:b9:6a:
3a:ec:a3:f4:4b:59:d1:73:25:07:de:4d:81:34:43:
e3:7d:41:f9:b1:72:0f:f5:56:5e:bd:e6:37:87:09:
0d:c3:62:49:b2:29:0f:fc:e2:e5:a0:15:ab:cd:be:
d4:32:63:54:c5:09:a1:10:6d:9f:c2:38:9e:d4:2b:
2f:fc:8d:e7:b4:37:a0:3e:ff:41:2b:e4:e4:fe:13:
65:bb:ae:2f:46:30:cc:b3:00:4c:72:45:9f:50:a2:
b4:df:22:7a:d6:47:72:d1:1a:08:73:a0:5d:4d:99:
4d:11:f3:e3:55:95:20:29:c8:6b:4f:ba:c6:5c:e9:
b0:12:aa:7a:c9:a5:32:22:a8:ab:db:6d:fc:c6:30:
80:65:af:35:a2:4a:e9:52:3b:dc:53:47:3e:2a:b5:
e9:4a:3b:df:81:6b:17:9d:e9:ad:0a:33:f4:b3:bb:
b6:e1:ab:d8:e1:06:46:d6:72:fb:0c:76:b9:e3:8e:
68:89:ca:48:65:a5:f0:ab:66:85:99:2f:2a:06:ae:
35:b6:3d:d0:1c:c4:b4:e0:11:f9:be:1f:0d:ff:4b:
80:a9:ac:32:a7:e3:b8:4d:70:84:16:b5:4e:7d:3d:
2d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C3:44:37:4D:E1:0D:AE:6B:E7:C0:52:B3:54:BE:2A:65:0E:DC:D2
X509v3 Authority Key Identifier:
keyid:4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f0:30:1e:ff:21:70:7b:f5:cb:a8:84:4c:65:10:58:1b:3a:
74:55:40:81:71:38:67:f2:99:1f:8a:eb:6e:5b:65:0f:d7:ae:
c5:b9:99:77:c7:b7:91:8c:82:bf:a0:38:9a:5d:59:63:61:3d:
24:9b:66:79:9b:3e:a2:f2:6c:b3:86:37:f2:4b:54:00:2c:f7:
99:7a:a7:23:01:d6:52:ad:9c:ee:34:9c:e6:24:dc:d4:75:fc:
4b:e2:0f:e9:1c:a5:cb:f0:b8:ab:35:1d:18:f3:b7:5d:57:93:
bc:a3:93:26:2b:9b:57:1a:b1:d2:b2:60:e6:5b:f0:02:7c:c6:
b1:cd:8b:30:26:53:ed:70:7c:2c:ed:46:6c:99:95:c0:18:4a:
42:bf:7c:e5:fc:29:11:d9:19:8a:de:33:eb:c6:18:13:da:c6:
c9:d6:a3:e5:6b:47:f3:4e:c6:5b:a6:ec:02:1d:1b:30:c4:ec:
75:5d:36:bb:46:25:5e:60:6d:71:06:2d:7d:55:57:2c:d6:7d:
bf:8d:3a:49:a2:c3:f7:b9:04:0d:48:94:41:62:43:6a:ea:44:
b0:95:df:2d:52:fa:eb:6f:4f:5c:37:97:e6:7f:5f:30:cb:55:
0a:00:d9:b5:aa:d2:3c:1b:b2:27:21:d0:8f:b6:5d:06:6e:57:
da:f8:7d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:28:12 2025 by rpki-client